Hello We have a server built using the howto for Debian Lenny with ISPConfig 2 and everything has been working well but have found that we are unable to receive any mail sent from a GMail account. I am wondering if there is a way to make sure that emails from the google domain reach us? The mail log entries around the google items (I'm not sure what's useful here), look like this: Code: Aug 21 14:55:45 first pop3d: LOGOUT, user=anthony, ip=[::ffff:122.149.156.159], port=[49190], top=0, retr=0, rcvd=12, sent=39, time=0 Aug 21 14:55:45 first postfix/smtp[23411]: certificate verification failed for gmail-smtp-in.l.google.com[74.125.159.27]:25: untrusted issuer /C=US/O=Equifax/OU=Equifax Secure Certificate Authority Aug 21 14:55:48 first postfix/smtpd[23402]: disconnect from unknown[122.149.156.159] Aug 21 14:55:48 first postfix/smtp[23411]: 4F2AFA084: to=<[email protected]>, relay=gmail-smtp-in.l.google.com[74.125.159.27]:25, delay=4.6, delays=1.5/0.01/0.34/2.7, dsn=2.0.0, status=sent (250 2.0.0 OK 1313902548 h65si15218840yhe.0) Aug 21 14:55:55 first postfix/local[23412]: 4F2AFA084: to=<[email protected]>, orig_to=<[email protected]>, relay=local, delay=11, delays=1.5/0.01/0/9.9, dsn=2.0.0, status=sent (delivered to command: /usr/bin/procmail -f-) Aug 21 14:55:55 first postfix/qmgr[11174]: 4F2AFA084: removed Aug 21 14:56:53 first postfix/smtpd[23402]: warning: 122.149.156.159: hostname 122-149-156-159.dynamic.dsl.clubtelco.com verification failed: Name or service not known Aug 21 14:56:53 first postfix/smtpd[23402]: connect from unknown[122.149.156.159] Aug 21 14:56:54 first postfix/smtpd[23402]: 8BEEDA084: client=unknown[122.149.156.159], sasl_method=LOGIN, sasl_username=anthony Aug 21 14:56:55 first postfix/cleanup[23407]: 8BEEDA084: message-id=<[email protected]> Aug 21 14:56:59 first postfix/qmgr[11174]: 8BEEDA084: from=<[email protected]>, size=250259, nrcpt=1 (queue active) Aug 21 14:56:59 first postfix/pickup[23251]: D664AA08D: uid=10026 from=<helen> Aug 21 14:56:59 first postfix/cleanup[23407]: D664AA08D: message-id=<[email protected]> Aug 21 14:56:59 first postfix/qmgr[11174]: D664AA08D: from=<[email protected]>, size=398, nrcpt=1 (queue active) Aug 21 14:56:59 first postfix/local[23412]: D664AA08D: to=<[email protected]>, relay=local, delay=0.02, delays=0/0/0/0.02, dsn=2.0.0, status=sent (delivered to command: /usr/bin/procmail -f-) Aug 21 14:56:59 first postfix/qmgr[11174]: D664AA08D: removed Thanks for any advice in advance. Andrew
Check if you have this file: /etc/ssl/certs/ca-certificates.crt if so, then add this to your main.cf: Code: smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt and restart postfix.
We do have that file, however main.cf has the following entry: smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem Which must be invalid because under /etc/postfix/ssl/ there is only smtpd.conf. I'll keep you opsted. cheers Andrew
I changed the line in main.cf. GMail users now receive the following: 454 454 4.7.0 TLS not available due to local problem (state 9) Andrew