On 2024-09-10 at 04:51:13 UTC-0400 (Tue, 10 Sep 2024 10:51:13 +0200)
Enrico Morelli via Postfix-users <more...@cerm.unifi.it>
is rumored to have said:
On Tue, 10 Sep 2024 10:43:25 +0200
Enrico Morelli via Postfix-users <postfix-users@postfix.org> wrote:
Dear all,
I'd installed rspamd as antispam in my postfix mail server.
Everything seems to work fine except for some users who report a
problem when trying to send e-mails from an external network. The
error is: An error occurred while sending mail. The mail server
responded: Try again later. Please check the message and try again.
I configured rspamd to disable greylist for email address coming from
our domain.
Where can I investigate to solve the problem?
I tried from my phone using 4G network and I see that in postfix log
file:
Sep 10 10:45:21 genio postfix/smtpd[2066845]: 7C1CB83872A:
client=mobiledyn-62-240-135-13.mrsn.it[62.240.135.13],
sasl_method=PLAIN, sasl_username=more...@cerm.unifi.it
Sep 10 10:45:22 genio postfix/cleanup[2066259]: 7C1CB83872A:
message-id=<191db1bb1d8.282c.a953f059503a376e0563cf9126e3a...@cerm.unifi.it>
Sep 10 10:45:22 genio postfix/postscreen[625953]: CONNECT from
[178.77.121.166]:38082 to [150.217.146.39]:25
Sep 10 10:45:22 genio postfix/cleanup[2066259]: 7C1CB83872A:
milter-reject: END-OF-MESSAGE from
mobiledyn-62-240-135-13.mrsn.it[62.240.135.13]: 4.7.1 Try again later;
from=<more...@cerm.unifi.it> to=<x...@gmail.com> proto=ESMTP
helo=<[100.75.128.253]>
Sep 10 10:45:22 genio postfix/smtpd[2066845]: disconnect from
mobiledyn-62-240-135-13.mrsn.it[62.240.135.13] ehlo=2 starttls=1
auth=1
mail=1 rcpt=1 data=0/1 quit=1 commands=7/8
Without your actual configuration ("postconf -nf" output ) it is only
possible to *guess* at the source of the problem.
The above log lines seem to show a connection on the main (port 25) SMTP
daemon, based on the fact that it goes through postscreen. It is the
modern best practice to NOT use port 25 for anything but incoming
Internet mail and NOT enable authentication there. Instead, you should
run submission daemons on ports 587 (with STARTTLS enabled) and 465 (in
TLS wrapper mode.) How this is done is all described in the
documentation.
--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo@toad.social and many *@billmail.scconsult.com
addresses)
Not Currently Available For Hire
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org