smtp problem

Discussion in 'Installation/Configuration' started by lolo, Dec 31, 2020.

  1. lolo

    lolo Member

    Hello,

    I tried to send via my website an email via Ispconfig SMTP, not work. I make a setting with Gmail (gmail protocol) and live (smtp protocol); it works fine.

    my setting :
    transmission : smtp
    smtp host : mail.myIspconfigDomain.com
    smtp port : 25 (try also with 587 but it finish in this case with error page)
    secure protocol : TLS
    password : xxxxxx
    username : [email protected]
    authentification : true

    I configure thunderbird and it sends the email via the port 587 and smtp : works fine.

    the log after send an email

    maybe the problem come from there : warning: hostname nsxxxxxx.ip-94-23-7.eu does not resolve to address xx.x.x.xxx

    Tk.

    Code:
    Dec 31 15:41:14 nsxxxxxx dovecot: imap([email protected])<700592><rMcwdMS3UuN/AAAB>: Logged out in=168 out=1516 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
    Dec 31 15:41:40 nsxxxxxx postfix/smtpd[698711]: warning: hostname nsxxxxxx.ip-xx-xx-x7.eu does not resolve to address xx.x.x.xxx
    Dec 31 15:41:40 nsxxxxxx postfix/smtpd[698711]: connect from unknown[xx.x.x.xxx]
    Dec 31 15:41:40 nsxxxxxx postfix/smtpd[698711]: lost connection after STARTTLS from unknown[xx.x.x.xxx]
    Dec 31 15:41:40 nsxxxxxx postfix/smtpd[698711]: disconnect from unknown[xx.x.x.xxx] ehlo=1 starttls=1 commands=2
    Dec 31 15:42:01 nsxxxxxx CRON[700609]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Dec 31 15:42:01 nsxxxxxx CRON[700610]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    Dec 31 15:42:01 nsxxxxxx pure-ftpd: ([email protected]) [INFO] New connection from 127.0.0.1
    Dec 31 15:42:01 nsxxxxxx pure-ftpd: ([email protected]) [INFO] Logout.
    Dec 31 15:42:01 nsxxxxxx postfix/smtpd[698711]: connect from localhost[127.0.0.1]
    Dec 31 15:42:01 nsxxxxxx postfix/smtpd[698711]: lost connection after CONNECT from localhost[127.0.0.1]
    Dec 31 15:42:01 nsxxxxxx postfix/smtpd[698711]: disconnect from localhost[127.0.0.1] commands=0/0
    Dec 31 15:42:01 nsxxxxxx dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session=<yNIGd8S3Bqh/AAAB>
    Dec 31 15:42:01 nsxxxxxx dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session=<gdMGd8S3aON/AAAB>
    Dec 31 15:42:14 nsxxxxxx dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=700633, secured, session=<j9zDd8S3bON/AAAB>
    Dec 31 15:42:14 nsxxxxxx dovecot: imap([email protected])<700633><j9zDd8S3bON/AAAB>: Logged out in=168 out=1516 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
     
    
     
  2. Jesse Norell

    Jesse Norell Well-Known Member Staff Member Howtoforge Staff

    Your client (website - php application?) dropped connection after running STARTTLS - maybe you have a certificate problem (need to use a different smtp hostname, or disable verification)? Do you have an errors logged or displayed by your site when it tries to send?
     
  3. lolo

    lolo Member

    Do you have an errors logged or displayed by your site when it tries to send? ===> No it turns and crash on 587 port (not on 25)
    maybe you have a certificate problem ===> How to check ?
     
  4. Jesse Norell

    Jesse Norell Well-Known Member Staff Member Howtoforge Staff

    In general, use the debugging/logging of your website's smtp client. How to do that (or if it even has such debugging/logging) is entirely dependent on your website software, of course.

    You could also try manually checking what your smtp client would be doing, ie. connect (eg. using openssl s_client) to the same smtp server hostname on port 587 and see what certificate is presented, and ensure it's valid (includes the same hostname, not expired, etc.).
     
  5. lolo

    lolo Member

    Hello,
    I tested on my server with other domains with outook smtp works very fine but on this domain there is a problem. I deleted spf, dkim; dmarc et recreate all of that. It's worse now, I do not receive anything. I think google block completly

    the report :

    Code:
    	2020-12-31 21:51:02 SERVER -> CLIENT: 220 AM9P195CA0021.outlook.office365.com Microsoft ESMTP MAIL Service ready at Thu, 31 Dec 2020 21:51:02 +0000
    2020-12-31 21:51:02 CLIENT -> SERVER: EHLO www.myDomain.com
    2020-12-31 21:51:02 SERVER -> CLIENT: 250-AM9P195CA0021.outlook.office365.com Hello [2001:41d0:2:8a6::1]250-SIZE 157286400250-PIPELINING250-DSN250-ENHANCEDSTATUSCODES250-STARTTLS250-8BITMIME250-BINARYMIME250-CHUNKING250 SMTPUTF8
    2020-12-31 21:51:02 CLIENT -> SERVER: STARTTLS
    2020-12-31 21:51:02 SERVER -> CLIENT: 220 2.0.0 SMTP server ready
    2020-12-31 21:51:02 CLIENT -> SERVER: EHLO www.myDomain.com
    2020-12-31 21:51:02 SERVER -> CLIENT: 250-AM9P195CA0021.outlook.office365.com Hello [2001:41d0:2:8a6::1]250-SIZE 157286400250-PIPELINING250-DSN250-ENHANCEDSTATUSCODES250-AUTH LOGIN XOAUTH2250-8BITMIME250-BINARYMIME250-CHUNKING250 SMTPUTF8
    2020-12-31 21:51:02 CLIENT -> SERVER: AUTH LOGIN
    2020-12-31 21:51:02 SERVER -> CLIENT: 334 VXNlcm5hbWU6
    2020-12-31 21:51:02 CLIENT -> SERVER: [credentials hidden]
    2020-12-31 21:51:02 SERVER -> CLIENT: 334 UGFzc3dvcmQ6
    2020-12-31 21:51:02 CLIENT -> SERVER: [credentials hidden]
    2020-12-31 21:51:02 SERVER -> CLIENT: 235 2.7.0 Authentication successful
    2020-12-31 21:51:02 CLIENT -> SERVER: MAIL FROM:<[email protected]>
    2020-12-31 21:51:02 SERVER -> CLIENT: 250 2.1.0 Sender OK
    2020-12-31 21:51:02 CLIENT -> SERVER: RCPT TO:<[email protected]>
    2020-12-31 21:51:02 SERVER -> CLIENT: 250 2.1.5 Recipient OK
    2020-12-31 21:51:02 CLIENT -> SERVER: DATA
    2020-12-31 21:51:03 SERVER -> CLIENT: 354 Start mail input; end with <CRLF>.<CRLF>
    2020-12-31 21:51:03 CLIENT -> SERVER: Date: Thu, 31 Dec 2020 21:51:02 +0000
    2020-12-31 21:51:03 CLIENT -> SERVER: To: Loic Richard <[email protected]>
    2020-12-31 21:51:03 CLIENT -> SERVER: From: "[email protected]" <[email protected]>
    2020-12-31 21:51:03 CLIENT -> SERVER: Reply-To: [email protected]
    2020-12-31 21:51:03 CLIENT -> SERVER: Subject: test
    2020-12-31 21:51:03 CLIENT -> SERVER: Message-ID: <[email protected]>
    2020-12-31 21:51:03 CLIENT -> SERVER: X-Mailer: myAppliction version 4.0
    2020-12-31 21:51:03 CLIENT -> SERVER: MIME-Version: 1.0
    2020-12-31 21:51:03 CLIENT -> SERVER: Content-Type: text/html; charset=utf-8
    2020-12-31 21:51:03 CLIENT -> SERVER: Content-Transfer-Encoding: quoted-printable
    2020-12-31 21:51:03 CLIENT -> SERVER:
    2020-12-31 21:51:03 CLIENT -> SERVER: Bonjour Mr, Mme .....<br />.....<br />.....<br />.....<br />Cordialement,<b=
    2020-12-31 21:51:03 CLIENT -> SERVER: r />La direction<br /><p>---------------------</p><p>Cordialement,</p><p>L'=
    2020-12-31 21:51:03 CLIENT -> SERVER: =C3=A9quipe FIGURES PRODUCTS</p><br /><p>=
    2020-12-31 21:51:03 CLIENT -> SERVER: =C2=A0<u>Avis de confidentialit=C3=A9 :</u><br />Ce message ainsi que les d=
    2020-12-31 21:51:03 CLIENT -> SERVER: ocuments qui seraient joints en annexe sont adress=C3=A9s exclusivement =
    2020-12-31 21:51:03 CLIENT -> SERVER: =C3=A0=C2=A0 leur destinataire et pourraient contenir une information confi=
    2020-12-31 21:51:03 CLIENT -> SERVER: dentielle soumise au secret professionnel ou dont la divulgation est interd=
    2020-12-31 21:51:03 CLIENT -> SERVER: ite en vertu de la l=C3=A9gislation en vigueur. De ce fait, nous avertisson=
    2020-12-31 21:51:03 CLIENT -> SERVER: s la personne qui le recevrait sans =C3=A0=C2=AAtre le destinataire ou une =
    2020-12-31 21:51:03 CLIENT -> SERVER: personne autoris=C3=A9e, que cette information est confidentielle et que to=
    2020-12-31 21:51:03 CLIENT -> SERVER: ute utilisation, copie, archive ou divulgation en est interdite. Si vous av=
    2020-12-31 21:51:03 CLIENT -> SERVER: ez re=C3=A0=C2=A7u ce message, nous vous prions de bien vouloir nous le com=
    2020-12-31 21:51:03 CLIENT -> SERVER: muniquer par courriel :=C2=A0 [email protected] et de proc=C3=A9der di=
    2020-12-31 21:51:03 CLIENT -> SERVER: rectement =C3=A0=C2=A0 sa destruction.</p><p>Conform=C3=A9ment =C3=A0=C2=
    2020-12-31 21:51:03 CLIENT -> SERVER: =A0 la Loi dans le pays de
    2020-12-31 21:51:03 CLIENT -> SERVER: r=C3=A9sidence de la soci=C3=A9t=C3=A9 exploitant la boutique FIGURES AND F=
    2020-12-31 21:51:03 CLIENT -> SERVER: IGURINES - PRODUCTS, vous avez droit =C3=A0=C2=A0 la rectif=
    2020-12-31 21:51:03 CLIENT -> SERVER: ication de vos donn=C3=A9es personnelles =C3=A0=C2=A0 tout moment ou sur si=
    2020-12-31 21:51:03 CLIENT -> SERVER: mple demande par email. [email protected]</p>
    2020-12-31 21:51:03 CLIENT -> SERVER:
    2020-12-31 21:51:03 CLIENT -> SERVER: .
    2020-12-31 21:51:04 SERVER -> CLIENT: 554 5.2.0 STOREDRV.Submission.Exception:SendAsDeniedException.MapiExceptionSendAsDenied; Failed to process message due to a permanent exception with message Cannot submit message. 0.35250:0A001785, 1.36674:0A000000, 1.61250:00000000, 1.45378:02000000, 1.44866:4D020000, 1.36674:0E000000, 1.61250:00000000, 1.45378:52020000, 1.44866:18010000, 16.55847:D0030000, 17.43559:0000000024020000000000000000000000000000, 20.52176:140F898E13004010F1030000, 20.50032:140F898E83174010F1030000, 0.35180:00000000, 255.23226:0
    2020-12-31 21:51:04 SMTP ERROR: DATA END command failed: 554 5.2.0 STOREDRV.Submission.Exception:SendAsDeniedException.MapiExceptionSendAsDenied; Failed to process message due to a permanent exception with message Cannot submit message. 0.35250:0A001785, 1.36674:0A000000, 1.61250:00000000, 1.45378:02000000, 1.44866:4D020000, 1.36674:0E000000, 1.61250:00000000, 1.45378:52020000, 1.44866:18010000, 16.55847:D0030000, 17.43559:0000000024020000000000000000000000000000, 20.52176:140F898E13004010F1030000, 20.50032:140F898E83174010F1030000, 0.35180:00000000, 255.23226:0
    SMTP Error: data not accepted.
    2020-12-31 21:51:04 CLIENT -> SERVER: QUIT
    2020-12-31 21:51:04 SERVER -> CLIENT: 0000000, 255.27962:0A000000, 255.27962:0E000000, 255.31418:0A000000, 0.35250:00000000, 1.36674:0A000000, 1.61250:00000000, 1.45378:02000000, 1.44866:18000000, 1.36674:32000000, 1.61250:00000000, 1.45378:1D000000, 1.44866:01000000, 16.55847:84000000, 17.43559:0000000080030000000000000000000000000000, 20.52176:140F898E1300101053000000, 20.50032:140F898E8317F01F65000000, 0.35180:0A000000, 255.23226:4800D13D, 255.27962:0A000000, 255.27962:32000000, 255.17082:DC040000, 0.27745:02000000, 4.21921:DC040000, 255.27962:FA000000, 255.1494:00000000, 0.38698:05000780, 0.37692:02000000, 0.37948:98E1B9AD, 5.33852:00000000534D545000000100, 7.36354:010000000000010900000000, 4.56248:DC040000, 7.40748:010000000000010B39314D42, 7.57132:0000000000000000322D3564, 1.63016:32000000, 4.39640:DC040000, 8.45434:FDBF0600A38CEBDE000000000000000000000000, 1.46798:04000000, 5.10786:0000000031352E32302E333732312E3031393A505233503139314D42313337353A32396333636436322D356437362D346463652D386266652D3035613964636239633865363A32343837363000D3201000000000, 7.51330:95BC6C2BD6ADD80818000000, 0.39570:00000000, 1.55954:0A000000, 0.49266:A4000000, 1.33010:0A000000, 2.54258:00000000, 0.40002:12000000, 1.56562:00000000, 1.64146:32000000, 1.33010:32000000, 2.54258:DC040000, 255.1750:BE000000, 255.31418:B4000000, 0.22753:0A00F565, 255.21817:DC040000, 0.64418:B9000000, 4.39842:DC040000, 0.41586:C8000000, 4.60547:DC040000, 0.21966:0A006136, 4.30158:DC040000 [Hostname=PR3P191MB1375.EURP191.PROD.OUTLOOK.COM]221 2.0.0 Service closing transmission channel
    2020-12-31 21:51:04 SMTP ERROR: QUIT command failed: 0000000, 255.27962:0A000000, 255.27962:0E000000, 255.31418:0A000000, 0.35250:00000000, 1.36674:0A000000, 1.61250:00000000, 1.45378:02000000, 1.44866:18000000, 1.36674:32000000, 1.61250:00000000, 1.45378:1D000000, 1.44866:01000000, 16.55847:84000000, 17.43559:0000000080030000000000000000000000000000, 20.52176:140F898E1300101053000000, 20.50032:140F898E8317F01F65000000, 0.35180:0A000000, 255.23226:4800D13D, 255.27962:0A000000, 255.27962:32000000, 255.17082:DC040000, 0.27745:02000000, 4.21921:DC040000, 255.27962:FA000000, 255.1494:00000000, 0.38698:05000780, 0.37692:02000000, 0.37948:98E1B9AD, 5.33852:00000000534D545000000100, 7.36354:010000000000010900000000, 4.56248:DC040000, 7.40748:010000000000010B39314D42, 7.57132:0000000000000000322D3564, 1.63016:32000000, 4.39640:DC040000, 8.45434:FDBF0600A38CEBDE000000000000000000000000, 1.46798:04000000, 5.10786:0000000031352E32302E333732312E3031393A505233503139314D42313337353A32396333636436322D356437362D346463652D386266652D3035613964636239633865363A32343837363000D3201000000000, 7.51330:95BC6C2BD6ADD80818000000, 0.39570:00000000, 1.55954:0A000000, 0.49266:A4000000, 1.33010:0A000000, 2.54258:00000000, 0.40002:12000000, 1.56562:00000000, 1.64146:32000000, 1.33010:32000000, 2.54258:DC040000, 255.1750:BE000000, 255.31418:B4000000, 0.22753:0A00F565, 255.21817:DC040000, 0.64418:B9000000, 4.39842:DC040000, 0.41586:C8000000, 4.60547:DC040000, 0.21966:0A006136, 4.30158:DC040000 [Hostname=PR3P191MB1375.EURP191.PROD.OUTLOOK.COM]221 2.0.0 Service closing transmission channel
    [\code]
     
  6. Jesse Norell

    Jesse Norell Well-Known Member Staff Member Howtoforge Staff

    That's not an error or format I'm used to seeing, but likely if you can contact the admin on the receiving side they could lookup info on why the message was rejected. In any case, it does seem to be rejected by the remote server, not a failure in your application.
     
  7. Jesse Norell

    Jesse Norell Well-Known Member Staff Member Howtoforge Staff

  8. lolo

    lolo Member

    Hello,
    Tk, nobodies had been this problem on the forum ?
    I deleted my dns, also inside bind, rebuilt everything, the problem is the same.
     
  9. lolo

    lolo Member

    I follow this url :https://www.howtoforge.com/community/threads/please-read-before-posting.58408/
    the result I have 2 warm


    Code:
    ##### SERVER #####
    IP-address (as per hostname): ***.***.***.***
    [WARN] could not determine server's ip address by ifconfig
    [INFO] OS version is Ubuntu 20.10
    
    [INFO] ISPConfig is installed.
    
    ##### ISPCONFIG #####
    ISPConfig version is 3.2dev20201201
    
    
    ##### VERSION CHECK #####
    
    [INFO] php (cli) version is 7.4.13
    
    ##### PORT CHECK #####
    
    [WARN] Port 465 (SMTP server SSL) seems NOT to be listening
    
    ##### MAIL SERVER CHECK #####
    
    [WARN] I found no "smtps" entry in your postfix master.cf
    [INFO] this is not critical, but if you want to offer SSL for smtp (not TLS) connections you have to enable this.
    
    ##### RUNNING SERVER PROCESSES #####
    
    [INFO] I found the following web server(s):
            Apache 2 (PID 267976)
    [INFO] I found the following mail server(s):
            Postfix (PID 1748)
    [INFO] I found the following pop3 server(s):
            Dovecot (PID 742)
    [INFO] I found the following imap server(s):
            Dovecot (PID 742)
    [INFO] I found the following ftp server(s):
            PureFTP (PID 16715)
    
    ##### LISTENING PORTS #####
    (only           ()
    Local           (Address)
    [anywhere]:993          (742/dovecot)
    [anywhere]:995          (742/dovecot)
    [localhost]:10023               (1284/postgrey)
    [localhost]:10024               (898409/amavisd-new)
    [localhost]:10025               (1748/master)
    [localhost]:10027               (1748/master)
    [anywhere]:587          (1748/master)
    [localhost]:11211               (750/memcached)
    [anywhere]:110          (742/dovecot)
    [anywhere]:143          (742/dovecot)
    [anywhere]:21           (16715/pure-ftpd)
    ***.***.***.***:53              (753/named)
    [localhost]:53          (753/named)
    ***.***.***.***:53              (705/systemd-resolve)
    [anywhere]:22           (858/sshd:)
    [anywhere]:25           (1748/master)
    [localhost]:953         (753/named)
    *:*:*:*::*:993          (742/dovecot)
    *:*:*:*::*:995          (742/dovecot)
    *:*:*:*::*:10024                (898409/amavisd-new)
    *:*:*:*::*:3306         (943/mysqld)
    *:*:*:*::*:587          (1748/master)
    [localhost]10           (742/dovecot)
    [localhost]43           (742/dovecot)
    *:*:*:*::*:8080         (267976/apache2)
    *:*:*:*::*:80           (267976/apache2)
    *:*:*:*::*:8081         (267976/apache2)
    *:*:*:*::*:21           (16715/pure-ftpd)
    *:*:*:*::**:*:*:*::*53          (753/named)
    *:*:*:*::*1:53          (753/named)
    *:*:*:*::*:53           (753/named)
    *:*:*:*::*:22           (858/sshd:)
    *:*:*:*::*:25           (1748/master)
    *:*:*:*::*:953          (753/named)
    *:*:*:*::*:443          (267976/apache2)
    
    ##### IPTABLES #####
    Chain INPUT (policy ACCEPT)
    target     prot opt source               destination
    f2b-pure-ftpd  tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 21
    f2b-sshd   tcp  --  [anywhere]/0            [anywhere]/0            multiport dports 22
    
    Chain FORWARD (policy ACCEPT)
    target     prot opt source               destination
    
    Chain OUTPUT (policy ACCEPT)
    target     prot opt source               destination
    
    Chain f2b-sshd (1 references)
    target     prot opt source               destination
    REJECT     all  --  ***.***.***.***       [anywhere]/0            reject-with icmp-port-unreachable
    REJECT     all  --  ***.***.***.***        [anywhere]/0            reject-with icmp-port-unreachable
    REJECT     all  --  ***.***.***.***        [anywhere]/0            reject-with icmp-port-unreachable
    REJECT     all  --  ***.***.***.***         [anywhere]/0            reject-with icmp-port-unreachable
    REJECT     all  --  ***.***.***.***      [anywhere]/0            reject-with icmp-port-unreachable
    REJECT     all  --  ***.***.***.***       [anywhere]/0            reject-with icmp-port-unreachable
    REJECT     all  --  ***.***.***.***        [anywhere]/0            reject-with icmp-port-unreachable
    REJECT     all  --  ***.***.***.***         [anywhere]/0            reject-with icmp-port-unreachable
    REJECT     all  --  ***.***.***.***       [anywhere]/0            reject-with icmp-port-unreachable
    RETURN     all  --  [anywhere]/0            [anywhere]/0
    
    Chain f2b-pure-ftpd (1 references)
    target     prot opt source               destination
    RETURN     all  --  [anywhere]/0            [anywhere]/0
    
    
    
     
  10. lolo

    lolo Member

    My /etc/postfix/master.cf

    Code:
    #
    # Postfix master process configuration file.  For details on the format
    # of the file, see the master(5) manual page (command: "man 5 master" or
    # on-line: http://www.postfix.org/master.5.html).
    #
    # Do not forget to execute "postfix reload" after editing this file.
    #
    # ==========================================================================
    # service type  private unpriv  chroot  wakeup  maxproc command + args
    #               (yes)   (yes)   (no)    (never) (100)
    # ==========================================================================
    smtp      inet  n       -       y       -       -       smtpd
    #smtp      inet  n       -       y       -       1       postscreen
    #smtpd     pass  -       -       y       -       -       smtpd
    #dnsblog   unix  -       -       y       -       0       dnsblog
    #tlsproxy  unix  -       -       y       -       0       tlsproxy
    submission inet n       -       y       -       -       smtpd
      -o syslog_name=postfix/submission
      -o smtpd_tls_security_level=encrypt
      -o smtpd_sasl_auth_enable=yes
      -o smtpd_tls_auth_only=yes
      -o smtpd_client_restrictions=permit_sasl_authenticated,reject
    #  -o smtpd_reject_unlisted_recipient=no
    #  -o smtpd_client_restrictions=$mua_client_restrictions
    #  -o smtpd_helo_restrictions=$mua_helo_restrictions
    #  -o smtpd_sender_restrictions=$mua_sender_restrictions
    #  -o smtpd_recipient_restrictions=
    #  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
    #  -o milter_macro_daemon_name=ORIGINATING
    #smtps     inet  n       -       y       -       -       smtpd
      -o syslog_name=postfix/smtps
      -o smtpd_tls_wrappermode=yes
      -o smtpd_sasl_auth_enable=yes
      -o smtpd_client_restrictions=permit_sasl_authenticated,reject
    #  -o smtpd_reject_unlisted_recipient=no
    #  -o smtpd_client_restrictions=$mua_client_restrictions
    #  -o smtpd_helo_restrictions=$mua_helo_restrictions
    #  -o smtpd_sender_restrictions=$mua_sender_restrictions
    #  -o smt#  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
    #  -o milter_macro_daemon_name=ORIGINATING
    #628       inet  n       -       y       -       -       qmqpd
    pickup    unix  n       -       y       60      1       pickup
    cleanup   unix  n       -       y       -       0       cleanup
    qmgr      unix  n       -       n       300     1       qmgr
    #qmgr     unix  n       -       n       300     1       oqmgr
    tlsmgr    unix  -       -       y       1000?   1       tlsmgr
    rewrite   unix  -       -       y       -       -       trivial-rewrite
    bounce    unix  -       -       y       -       0       bounce
    defer     unix  -       -       y       -       0       bounce
    trace     unix  -       -       y       -       0       bounce
    verify    unix  -       -       y       -       1       verify
    flush     unix  n       -       y       1000?   0       flush
    proxymap  unix  -       -       n       -       -       proxymap
    proxywrite unix -       -       n       -       1       proxymap
    smtp      unix  -       -       y       -       -       smtp
    relay     unix  -       -       y       -       -       smtp
            -o syslog_name=postfix/$service_name
    #       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
    showq     unix  n       -       y       -       -       showq
    error     unix  -       -       y       -       -       error
    retry     unix  -       -       y       -       -       error
    discard   unix  -       -       y       -       -       discard
    local     unix  -       n       n       -       -       local
    virtual   unix  -       n       n       -       -       virtual
    lmtp      unix  -       -       y       -       -       lmtp
    anvil     unix  -       -       y       -       1       anvil
    scache    unix  -       -       y       -       1       scache
    postlog   unix-dgram n  -       n       -       1       postlogd
    #
    # ====================================================================
    # Interfaces to non-Postfix software. Be sure to examine the manual
    # pages of the non-Postfix software to find out what options it wants.
    #
    # Many of the following services use the Postfix pipe(8) delivery
    # agent.  See the pipe(8) man page for information about ${recipient}
    # and other message envelope options.
    # ====================================================================
    pd_recipient_restrictions=
    # and other message envelope options.
    # ====================================================================
    #
    # maildrop. See the Postfix MAILDROP_README file for details.
    # Also specify in main.cf: maildrop_destination_recipient_limit=1
    #
    maildrop  unix  -       n       n       -       -       pipe
      flags=DRXhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
    #
    # ====================================================================
    #
    # Recent Cyrus versions can use the existing "lmtp" master.cf entry.
    #
    # Specify in cyrus.conf:
    #   lmtp    cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4
    #
    # Specify in main.cf one or more of the following:
    #  mailbox_transport = lmtp:inet:localhost
    #  virtual_transport = lmtp:inet:localhost
    #
    # ====================================================================
    #
    # Cyrus 2.1.5 (Amos Gouaux)
    # Also specify in main.cf: cyrus_destination_recipient_limit=1
    #
    #cyrus     unix  -       n       n       -       -       pipe
    #  flags=DRX user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
    #
    # ====================================================================
    # Old example of delivery via Cyrus.
    #
    #old-cyrus unix  -       n       n       -       -       pipe
    #  flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
    #
    # ====================================================================
    
    # See the Postfix UUCP_README file for configuration details.
    #
    uucp      unix  -       n       n       -       -       pipe
      flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
    #
    # Other external delivery methods.
    #
    ifmail    unix  -       n       n       -       -       pipe
      flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
    bsmtp     unix  -       n       n       -       -       pipe
      flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
    scalemail-backend unix -       n       n       -       2       pipe
      flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
    mailman   unix  -       n       n       -       -       pipe
      flags=FRX user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py ${nexthop} ${user}
    dovecot   unix  -       n       n       -       -       pipe
      flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop}
    
    amavis unix - - - - 2 smtp
            -o smtp_data_done_timeout=1200
            -o smtp_send_xforward_command=yes
                    -o smtp_bind_address=
    
    
    127.0.0.1:10025 inet n - n - - smtpd
            -o content_filter=
            -o local_recipient_maps=
            -o relay_recipient_maps=
            -o smtpd_restriction_classes=
            -o smtpd_client_restrictions=
            -o smtpd_helo_restrictions=
            -o smtpd_sender_restrictions=
            -o smtpd_recipient_restrictions=permit_mynetworks,reject
            -o smtpd_end_of_data_restrictions=
            -o mynetworks=127.0.0.0/8
            -o strict_rfc821_envelopes=yes
            -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
            -o smtp_send_xforward_command=yes
            -o disable_dns_lookups=yes
    127.0.0.1:10027 inet n - n - - smtpd
            -o content_filter=
            -o local_recipient_maps=
            -o relay_recipient_maps=
            -o smtpd_restriction_classes=
            -o smtpd_client_restrictions=
            -o smtpd_helo_restrictions=
            -o smtpd_sender_restrictions=
            -o smtpd_recipient_restrictions=permit_mynetworks,reject
            -o smtpd_end_of_data_restrictions=
            -o mynetworks=127.0.0.0/8
            -o strict_rfc821_envelopes=yes
            -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
            -o smtp_send_xforward_command=yes
                -o milter_default_action=accept
            -o milter_macro_daemon_name=ORIGINATING
            -o disable_dns_lookups=yes
    #add
    policy-spf  unix  -       n       n       -       -       spawn
         user=nobody argv=/usr/bin/policyd-spf
    
    
    
    
     
  11. till

    till Super Moderator Staff Member ISPConfig Developer

    you missed removing the # in front of the line:

    Code:
    smtps     inet  n       -       y       -       -       smtpd
     
  12. lolo

    lolo Member

    Tk
    It s better I have a pop up message on thunderbird

    the message

    you are overriding the way Thunderbird identifies the site
    Address: mail.mydomain.com:587
    get the certificate: ===> If I click on that, I have nothing
    Unable to get identify status for this site

    This site tries to identify itself with invalid information


    Bad site
    The certificate belongs to a different site, which could indicate that someone is trying to spoof the identity of that site
     
  13. lolo

    lolo Member

    I received from google also this report
    It seems dkim fail

    Code:
    <?xml version="1.0" encoding="UTF-8" ?>
    <feedback>
      <report_metadata>
        <org_name>google.com</org_name>
        <email>[email protected]</email>
        <extra_contact_info>https://support.google.com/a/answer/2466580</extra_contact_info>
        <report_id>5969444705001895626</report_id>
        <date_range>
          <begin>1609372800</begin>
          <end>1609459199</end>
        </date_range>
      </report_metadata>
      <policy_published>
        <domain>mydomain.com</domain>
        <adkim>r</adkim>
        <aspf>r</aspf>
        <p>quarantine</p>
        <sp>quarantine</sp>
        <pct>100</pct>
      </policy_published>
      <record>
        <row>
          <source_ip>xxxx:41d0:2:xxxxx::1</source_ip>
          <count>1</count>
          <policy_evaluated>
            <disposition>none</disposition>
            <dkim>fail</dkim>
            <spf>pass</spf>
          </policy_evaluated>
        </row>
        <identifiers>
          <header_from>mydomain.com</header_from>
        </identifiers>
        <auth_results>
          <spf>
            <domain>mydomain.com</domain>
            <result>pass</result>
          </spf>
        </auth_results>
      </record>
    </feedback>
    
     
  14. Jesse Norell

    Jesse Norell Well-Known Member Staff Member Howtoforge Staff

    This could be simply because you rebuilt your server/dns. Does it happen for new messages?
     
  15. Jesse Norell

    Jesse Norell Well-Known Member Staff Member Howtoforge Staff

    What do you have setup for the mail server certificate? You may need to use the server's hostname.
     
  16. lolo

    lolo Member

  17. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    You can run a force update:
    Code:
    ispconfig_update.sh --force
     
  18. lolo

    lolo Member

    I think I found a way, could tell me if it's correct

    I have just this information inside named.conf.local
    Code:
    nano named.conf.local
    
    zone "myDomain.org" {
            type master;
            file "/etc/bind/pri.myDomain.org.signed";
    };
    
    Now if I look the dns on https://mxtoolbox.com/

    I have an error on status

    Code:
    At least one name server failed to respond in a timely manner
    Failure detail: 213.186.33.199
    
    on this website : https://www.memoinfo.fr/tutoriels-linux/configurer-serveur-dns-kimsufi-ovh/
    It recommends to put inside named.conf.local this :

    Code:
    zone "domaine.tld" {
        type master;
        file "/etc/bind/db.domaine.tld";
        allow-transfer {213.186.33.199;};
        allow-query{any;};
        notify yes;
    };
    
    
    and create db.domaine.tld = pri.myDomain.com

    Do I need to insert in named.conf.local this ?

    Code:
    zone "domaine.tld" {
        type master;
        file "/etc/bind/db.domaine.tld";
        allow-transfer {213.186.33.199;};
        allow-query{any;};
        notify yes;
    };
    
    
    tk
     
  19. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    Never change this file directly, use the UI. You can allow transfer through there aswell.
     
  20. lolo

    lolo Member

    Ok tk, could you tell me the process to do that, please. tk
     

Share This Page