> On Tue, 10 Sep 2024 10:43:25 +0200 > Enrico Morelli via Postfix-users <postfix-users@postfix.org> wrote: > Sep 10 10:45:21 genio postfix/smtpd[2066845]: 7C1CB83872A: > client=mobiledyn-62-240-135-13.mrsn.it[62.240.135.13], > sasl_method=PLAIN, sasl_username=more...@cerm.unifi.it > Sep 10 10:45:22 genio postfix/cleanup[2066259]: 7C1CB83872A: > message-id=<191db1bb1d8.282c.a953f059503a376e0563cf9126e3a...@cerm.unifi.it> > Sep 10 10:45:22 genio postfix/postscreen[625953]: CONNECT from > [178.77.121.166]:38082 to [150.217.146.39]:25 > Sep 10 10:45:22 genio postfix/cleanup[2066259]: 7C1CB83872A: > milter-reject: END-OF-MESSAGE from > mobiledyn-62-240-135-13.mrsn.it[62.240.135.13]: 4.7.1 Try again > later; from=<more...@cerm.unifi.it> to=<x...@gmail.com> proto=ESMTP > helo=<[100.75.128.253]> > Sep 10 10:45:22 genio postfix/smtpd[2066845]: disconnect from > mobiledyn-62-240-135-13.mrsn.it[62.240.135.13] ehlo=2 starttls=1 > auth=1 > mail=1 rcpt=1 data=0/1 quit=1 commands=7/8
On Tue, 10 Sep 2024 12:17:11 -0400 Bill Cole via Postfix-users <postfix-users@postfix.org> wrote:Without your actual configuration ("postconf -nf" output ) it is only possible to *guess* at the source of the problem. The above log lines seem to show a connection on the main (port 25) SMTP daemon, based on the fact that it goes through postscreen. It is the modern best practice to NOT use port 25 for anything but incoming Internet mail and NOT enable authentication there. Instead, you should run submission daemons on ports 587 (with STARTTLS enabled) and 465 (in TLS wrapper mode.) How this is done is all described in the documentation.
On 11.09.24 08:59, Enrico Morelli via Postfix-users wrote:
This is my postconf. Usually I set clients to use 587 port with STARTTLS. I'll check the documentation for your suggestion.
content_filter = smtp-amavis:[127.0.0.1]:10024 smtpd_milters = inet:localhost:11332
I don't know why you feed the incoming mail to both milter and content_filter. Either of those settings can be overridden in master.cf so that may be fine.
However, in this case it's clearly the milter that told postfix to tempfail the mail, you need to search in your milter configuration (port 11332, I guess rspamd)
-- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. "Two words: Windows survives." - Craig Mundie, Microsoft senior strategist "So does syphillis. Good thing we have penicillin." - Matthew Alton _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
