Hello-
Problem with VPN and postfix mail 3.3.0
Ubuntu 18.04, Mulvad vpn. gmail server
I have postfix working fine sending mails though gmail while VPN not
connected. When connected , sending mail fails.
In looking at mail logs, it appears it is not connecting to gmail.
I contacted Mulvad and there response was:
"We block outgoing port 25. You need to use a server with support for
SSL/TLS (which uses port 587/465) and use that instead."
I am using port 587, as far as I can see.
Hers is my /etc/postfix/main.cf:
# See /usr/share/postfix/main.cf.dist for a commented, more complete version
# Debian specific: Specifying a file name will cause the first
# line of that file to be used as the name. The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname
smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
biff = no
# appending .domain is the MUA's job.
append_dot_mydomain = no
# Uncomment the next line to generate "delayed mail" warnings
delay_warning_time = 1h
readme_directory = no
# TLS parameters
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_use_tls=yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.
smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated
defer_unauth_destination
myhostname =dandell-OptiPlex-990
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
mydestination = dandell-OptiPlex-990, localhost.localdomain, , localhost
relayhost = [smtp.gmail.com]:587
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options =
smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
#smtp_tls_CAfile = /etc/postfix/cacert.pem
smtp_use_tls = yes
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
inet_protocols = all
=======================================================
It does say "relayhost = [smtp.gmail.com]:587" , so I assume I am using
port 587 for SSL., or is that TLS?
Then I searched for more information on port 25 and found this:
https://kb.iweb.com/hc/en-us/articles/230241988-Changing-SMTP-ports-Linux-
"Due to a very large volume of junk email being produced today, most ISPs
now block port 25. By default, your server may use port 25 to send mail; as
a result, you could find that your email is being blocked.
<snip>
Postfix
You will need to edit the following file:
/etc/postfix/master.cf
Add a line to the file in the following format:
<port> inet n - - - - smtpd
Replace <port> with the appropriate port number, for example:
26 inet n - - - - smtpd"
==========================================
So I added 495 , also tried 587.
465 inet n - - - - smtpd
But still blocked.
In summary, postfix mail works fine if VPN if off, does not work if VPN is
on, any advice would be appreciated, thanks DAN
--
Dan Ziolkowski KC2STA
SKCC #4290T
Ubuntu LINUX
