Hi all,
Having loads of problems with clients complaining about not receiving email from certain domains.
Seems that loads of servers are badly configured and this then causes problems with mine.
Here is an example of a good email but gets rejected because their reverse dns is bad.
Code
- cat mail.log | grep [email protected] 22 17:22:22 sosaria postfix/smtp[12946]: 7B3A4195B081: to=<[email protected]>, relay=mail.sanituboexpo.com[213.9.234.90]:25, delay=3.1, delays=2.3/0.01/0.43/0.4, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 0939582CA3)Jan 23 16:46:07 sosaria postfix/policyd-weight[2691]: weighted check: NOT_IN_SBL_XBL_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5 BL_NJABL=SKIP(-1.5) CL_IP_EQ_HELO_IP=-2 CL_SEEMS_DIALUP=3.75 HELO_SEEMS_DIALUP=4.5 (check from: .sanituboexpo. - helo: .clientes1.cherrytel. - helo-domain: .cherrytel.) FROM/MX_MATCHES_NOT_HELO(DOMAIN)=1.938; <client=213.9.234.3> <helo=clientes1.cherrytel.com> <[email protected]> <[email protected]>; rate: 3.688Jan 23 16:46:07 sosaria postfix/policyd-weight[2691]: decided action=550 Mail appeared to be SPAM or forged. Ask your Mail/DNS-Administrator to correct HELO and DNS MX settings or to get removed from DNSBLs; Please use DynDNS; <client=213.9.234.3> <helo=clientes1.cherrytel.com> <[email protected]> <[email protected]>; delay: 0sother strange errors:Jan 22 15:25:07 sosaria postfix/smtp[12152]: 05DAA195B087: host mx-ha02.web.de[213.165.67.120] said: 451 Requested action aborted: local error in processing (in reply to MAIL FROM command)Jan 22 15:25:08 sosaria postfix/smtp[12152]: 05DAA195B087: to=<[email protected]>, relay=mx-ha03.web.de[213.165.67.104]:25, delay=403, delays=403/0/0.5/0.15, dsn=4.0.0, status=deferred (host mx-ha03.web.de[213.165.67.104] said: 451 Requested action aborted: local error in processing (in reply to MAIL FROM command))
I've tried commenting some of the HELO stuff to try and get postfix to accept more of these trouble domains. Can anyone lend a hand to have more relaxed rules?
Here is my /etc/postfix/main.cf
Code
- # SASL parameters
- smtpd_sasl_auth_enable = yes
- smtpd_sasl_security_options = noanonymous
- broken_sasl_auth_clients = yes
- smtpd_sasl_authenticated_header = yes
- smtpd_helo_required = yes
- smtpd_helo_restrictions = permit_mynetworks,
- check_helo_access hash:/etc/postfix/helo_access,
- permit_sasl_authenticated,
- # reject_invalid_helo_hostname,
- # reject_non_fqdn_helo_hostname,
- reject_unauth_pipelining,
- warn_if_reject reject_unknown_hostname,
- permit
- smtpd_sender_restrictions = reject_non_fqdn_sender,
- reject_unknown_sender_domain,
- permit_mynetworks,
- permit_sasl_authenticated
- smtpd_recipient_restrictions = reject_non_fqdn_recipient,
- reject_unknown_recipient_domain,
- permit_mynetworks,
- permit_sasl_authenticated,
- reject_unauth_destination,
- check_client_access hash:/etc/postfix/policyd_whitelist,
- reject_unlisted_recipient,
- check_policy_service inet:127.0.0.1:12525,
- check_policy_service inet:127.0.0.1:10023,
- permit
- smtpd_data_restrictions = reject_multi_recipient_bounce,
- reject_unauth_pipelining
