On Sun, Apr 22, 2018 at 07:24:42PM -0400, David Mehler wrote:
> Is anyone using Android's Aquamail to send mail through postfix?
> If so, how do you have it configured?
> 
> My postfix is rejecting mail from Aquamail because it's helo is:
> 
> <[192.168.1.1]> basically it's internal ip.

What restriction do you have that is blocking this?  Include 
"postconf -nf ; postconf -Mf" and the entire non-verbose logs showing 
the rejection.  Perhaps you have a check_helo_access lookup; you 
should also show us what is in that lookup.

While you can, and I do, block such HELOs on port 25, you must not 
apply such a restriction to submitting clients.  A HELO like that is 
perfectly valid per RFC.

So perhaps the actual problem is that you're submitting on port 25, 
and your fix is to require users to submit on submission[s], ports 
587 or 465, and don't accept submitted mail on 25.  Your reply as 
detailed above will show this.

> I do not want to remove my restrictions can I get around this with 
> a map?

That would be a bad idea, and anyway, a question we couldn't answer 
without knowing how you blocked it.  The various Postfix HELO 
restrictions, such as:
+ reject_invalid_helo_hostname
+ reject_non_fqdn_helo_hostname
+ reject_unknown_helo_hostname
will NOT block that HELO string.
-- 
  http://rob0.nodns4.us/
  Offlist GMX mail is seen only if "/dev/rob0" is in the Subject:

Reply via email to