Tag Info

New answers tagged

0

You can do most of what you want with postfix. See the link below for specific configuration parameters that you will need to alter. http://www.postfix.org/BASIC_CONFIGURATION_README.html There are no free/open source solutions for your situation because your request is more infrastructure/bandwidth dependent then code related. There are however free and ...


0

You say you're using Postfix for mail, so Joomla is completely unrelated here. First, are you using SASL or some other sort of authentication on your sending? If not, there's your problem: anyone can "telnet yourhost.com 25" and send messages to anyone they want; scripts make it very easy to send thousands of mails this way, and it's called an open relay. ...


0

The problem with Joomla and restricting email to only one email address is that you will lose functionality. The better solution would be to look at your Joomla site for a possible HACK. It is actually easy to hack these sites. Look at your directories and look for a recent hack that will leave directories like: "target" in your main Joomla directory. Also ...


0

Some older versions of Windows Server supported a POP3 service that clients could use to pick up mail received by the SMTP server. This has been dropped, and as Stephen has already mentioned Exchange is the best Microsoft alternative However, while I'm a huge fan of Exchange, it is both complex and expensive. If your needs are relatively simple, you could ...


1

In order to host email you'll need to host a full Email Server on your VPS. In the Microsoft world that is Microsoft Exchange. However, setting up and maintaining Microsoft Exchange or any email server is quite a bit of work and may not be worth the trouble. If you are looking for a simpler way to host mail for your domain, you should look into services ...


1

Assuming that your printers are using a DNS name as their SMTP target then yes, Updating that DNS entry to point to your new server will work. You will need to make sure your new server is setup to accept mail from these printers. (ie. Printers should authenticate to the server, or your server needs to accept anonymous connections.) You should test this ...


0

The IP address is being blocked by Earthlink An SMTP server can deliver for many domains. If one or more users are registered as SPAM offenders you can become a victim of someone else's actions. The sender can complain to their provider as well as use SPF records and other methods to properly identify their email. ...


1

Considering, that I was working on this issue for the past 2 weeks, after writing down the details of the problem in this question, I was finally able to fix it. It was actually an entry I made in the hosts file that caused this issue. Perhaps I was playing around a bit too much :-) Anyway, here is the issue line: 127.0.0.1 localhost.localdomain localhost ...


0

As of now, MXtoolbox do not show any error while looking up rDNS of IP address 178.32.48.104. rDNS of IP address 178.32.48.104 is set to FQDN mail.simplyislam.biz. http://mxtoolbox.com/SuperTool.aspx?action=mx%3amail.simplyislam.biz&run=toolpage# Thanks,


2

According to whois, both 208.91.199.x and 199.79.63.x are registered to Confluence Networks. So it seems they are just using a different IP for outgoing mail than for incoming mail, which is perfectly justified.


1

Concerning smtp[d]_tls_[mandatory_]ciphers Yes. If I set both smtpd_tls_security_level and smtp_tls_security_level to may then only the opportunistic settings are relevant meaning it does not matter what I set in the mandatory ones? Yes. If I want to make a secure but still public mail server would the following configuration (in regard of the ...


1

Where are you defining the Mandrill API key? I think you are missing smtp_sasl_password_maps directive in main.cf. Please see the following: Can I configure Postfix to send through Mandrill?


3

The problem here is that you configured your server so that it should relay any outbound email to a server, namely smtp.mandrillapp.com. That server, in turn, is not accepting to relay your mail. I don't know this company, but my guess is that they only relay mails from authenticated customers, and your are not logging-in. You should probably have ...


0

The IP:PORT issue isn't/wasn't an issue for me (Ubuntu 14.04.2 LTS). It can be misleading to assume postgrey is breaking/exiting on local port attach/execution failure. First check to see if daemon is recognized as running : sudo service postgrey status If it is not running/recognized, you will still see : warning: problem talking to server [::1]:10023: ...


0

Your Ironport is failing the set up an encrypted TLS session for mail transfer. Possibly, either your Destination Controls or HAT Policy is mandating encryption, or the remote end is mandating it. You need to have a Certificate installed and configured in order for incoming SSL/TLS to work. This may be self-signed, but if it is then a remote side cannot ...


-1

I've been researching a similar question, it looks like postsuper -h ALL and postsuper -H ALL should work. http://www.postfix.org/postsuper.1.html


2

Reverse DNS does not match SMTP Banner The SMTP Banner is the response of your mail server for the ehlo query. Currently your mail server is closing the connection. That is the reason for the mismatch between rDNS and SMTP banner. Reverse DNS itself is set up correctly, though. # telnet mail.simplyislam.biz 25 Trying 178.32.48.104... Connected to ...


1

Wildcard DNS RRs are not really a very good answer to any known problem, and they are an especially bad idea for MX records as it is often difficult or even impossible to correctly configure any mail server to work properly with them. Just be specific about exactly which domains you wish to use for email and configure the DNS and mail server(s) for them ...


-4

try { $sock = @fsockopen($t['host'], $t['port'], $errno, $errstr,10); } catch (Exception $e) { $sock =null ; return ; }


0

Ok so i see it is nonsence to completely block SMTP for auth only, because then the mail server cannot even receive mails. SMTP must remain open for anonyms and allow to send mails to local mailboxes, if i am right. Of course is good if it will block to send emails to another domains (for anonymous connections), but that should be default configuration.


0

Standalone postfix does not have SASL capabilities, you must install Cyrus or Dovecot. Take a look at postfix official doc. http://www.postfix.org/SASL_README.html#server_sasl


2

Ok, it seems, i have to also add this: smtpd_delay_reject = yes smtpd_client_restrictions = permit_sasl_authenticated, reject as stated here: http://www.postfix.org/postconf.5.html under smtpd_sasl_auth_enable


2

Disclaimer: this answer only use some postfix documentation in the internet, so perhaps I missed some facts here. For better and precise documentation, feel free to post the question in postfix mailing-list (Wietse Venema is active person in that list) or look in postfix source code. All above question is focused on postfix backoff algorithm. First, I'll ...


1

unfortunately that isn't possible. But you could create a second virtual SMTP server, just not using the same port and local IP. You'd need to either use a different SMTP port instead of 25 or bind the two virtual SMTP servers to different local network cards / IPs.


1

Added solution from official productgoole forums. The real domain that has a problem is universcine.com. The TXT record of this domain is @ 600 IN TXT "v=spf1 a mx ptr a:lmc.universcine.com include:_spf1.universcine.com include:lmc-other._spf.universcine.com include:emarsys._spf.universcine.com include:universcine._spf.wiztivi.com include:spf.google.com ...


1

The masquerade rule is wrong: iptables -t nat -A POSTROUTING -s '192.168.0.0/24' -o vmbr0 -j MASQUERADE It is saying that packets going out the vmbr0 interface and from 192.168.0.0/24 should be masqueraded. But no packets will ever match this, because they aren't going out the vmbr0 interface! Instead they are going out your physical interface. Change ...


1

Delivery to the following recipient failed permanently: user@emailaddress.com Technical details of permanent failure: Google tried to deliver your message, but it was rejected by the server for the recipient domain user@emailaddress.com by smtp.secureserver.net. [68.178.213.37]. The error that the other server returned was: 550 5.1.1 Recipient not found. ...


2

After comment from @masegaloeh I've found a solution. The idea is to have a second postfix SMTP server listening on 10025 with a policy server in order to send mails to the normal server (if whitelisted) or to the quarantine server. The idea was starting as your header_checks solution, in main.cf: header_checks = regexp:/etc/postfix/header_checks In ...


0

I have this one too- IP : 216.58.192.0/19 | Subnet : 255.255.224.0 Range : 216.58.192.0 - 216.58.223.255 here is a link to a calculator: http://www.subnet-calculator.com/cidr.php


0

SMART_HOST is indeed the right option, but as well nullclient is. Examples: FEATURE(`nullclient',`mta.external.com') dnl define(`SMART_HOST',`mta.external.com') dnl The basic difference is that nullclient, contrary to SMART_HOST, also forwards messages for local users to the remote host. SMART_HOST forwards to the remote host only messages for non-local ...


0

You need to add your actual mail domain to the mydestination list, as it is currently only set to accept localhost: mydestination = localhost, localhost.$mydomain, $mydomain See the Postfix docs for details.


1

It is not possible to route select e-mails from Office 365 to another SMTP Server, at least not an SAP SMTP server. I ended up forwarding e-mails from one domain to another - using the second domain as an 'SAP e-mail only domain', which would be routed to the SAP e-mail server: sapuser@mycompany.com -> sapuser@sapmycompany.com -> SAP SMTP server This way, ...


3

I found two possible methods, but maybe there is a better way. 1st method: smtpd_sender_restrictions = reject_sender_login_mismatch, permit_sasl_authenticated, permit Now I modified my smtpd_sender_login_maps to return an entry of 'admin' if the domain exists in the domains table. This way a record is returned, even when the emailadress ...


0

You should try to implement at least one of the followings (both is better): SPF: Project Overview DomainKeys Identified Mail (DKIM)


0

The righteous way is to setup SPF for your domain and enable SPF in the MTA. Then you'll get protection not only for your own domain forging but also for all other domains having SPF enabled.


6

Use localhost for mydestination and myorigin mydestination = localhost myorigin = localhost With this setup, when mdadm send email to root, it will transformed to root@localhost. With mydestination = localhost, postfix will consult /etc/aliases to do aliasing. If you aren't comfortable with root@localhost in return-path, then you can use ...


0

It does look like port 25 open outwards, but possibly not in the other direction, try a site like this http://www.mynetworktest.com/ports.php or this http://www.canyouseeme.org and test port 25 to your servers' external IP address. If it fails, you may have a firewall or ISP configuration issue still.


3

This is the tell-tale part of the log. Leads to masegaloeh's answer. May 3 17:26:04 raspberrysyncserver postfix/smtpd[31303]: >>> START Recipient address RESTRICTIONS <<< May 3 17:26:04 raspberrysyncserver postfix/smtpd[31303]: generic_checks: name=reject_unknown_client_hostname May 3 17:26:04 raspberrysyncserver postfix/smtpd[31303]: ...


5

The rejection was caused by smtpd_recipient_restrictions. Delete reject_unauth_destination from smtpd_recipient_restrictions should fix the problem. You have already put reject_unauth_destination in smtpd_relay_restrictions, so no need to put it again in smtpd_recipient_restrictions.


3

How can I reinject mail scanned with spamassassin back into the queue for final delivery without causing a loop? NO You can't Explanation I understand the reason you use virtual_transport to pipe email into Spam Assassin. You only want to scan the email intended to your virtual_mailbox_domain. Unfortunately it doesn't follow the recommended setup for ...



Top 50 recent answers are included