<![CDATA[iRedMail — Client host rejected: Access denied (even with permitted network)]]> https://forum.iredmail.org/topic19977-client-host-rejected-access-denied-even-with-permitted-network.html Mon, 07 Aug 2023 15:58:04 +0000 PunBB <![CDATA[Re: Client host rejected: Access denied (even with permitted network)]]> https://forum.iredmail.org/post87048.html#p87048 Thank you Huangbin!

I got it working with smtp authentication.

]]> Mon, 07 Aug 2023 15:58:04 +0000 https://forum.iredmail.org/post87048.html#p87048 <![CDATA[Re: Client host rejected: Access denied (even with permitted network)]]> https://forum.iredmail.org/post87039.html#p87039 In postfix /etc/postfix/master.cf, submission service is not configured to bypass trusted networks, but only smtp authenticated clients.

The simplest and BEST solution is enabling smtp auth in your web form.

]]> Sun, 06 Aug 2023 04:59:29 +0000 https://forum.iredmail.org/post87039.html#p87039 <![CDATA[Client host rejected: Access denied (even with permitted network)]]> https://forum.iredmail.org/post87038.html#p87038 ==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 0.9.9
- Deployed with iRedMail Easy or the downloadable installer? downloadable
- Linux/BSD distribution name and version: CentOS 7
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MYSQL
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro? Yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
Hello!

I am trying to get a webform submission from a server (140.X.X.X) to send email to my mail server (beacon). I have configured 140.X.X.X with postfix and set it to send mail on 587 with authentication. I have configured beacon by adding 140.X.X.X to $mynetworks in main.cf and iredapd conf.

When I send email from 140.X.X.X to beacon I get the following error in the maillog:

Aug  4 19:31:13 beacon postfix/submission/smtpd[10993]: connect from unknown[140.X.X.X]
Aug  4 19:31:14 beacon postfix/submission/smtpd[10993]: Anonymous TLS connection established from unknown[140.X.X.X]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Aug  4 19:31:15 beacon postfix/submission/smtpd[10993]: NOQUEUE: reject: RCPT from unknown[140.X.X.X]: 554 5.7.1 <unknown[140.X.X.X]>: Client host rejected: Access denied; from=<admin@example.llc> to=<admin@example.llc> proto=ESMTP helo=<example.llc>
Aug  4 19:31:15 beacon postfix/submission/smtpd[10993]: disconnect from unknown[140.X.X.X]
Aug  4 19:31:15 beacon postfix/submission/smtpd[10993]: connect from unknown[140.X.X.X]
Aug  4 19:31:16 beacon postfix/submission/smtpd[10993]: Anonymous TLS connection established from unknown[140.X.X.X]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Aug  4 19:31:17 beacon postfix/submission/smtpd[10993]: NOQUEUE: reject: RCPT from unknown[140.238.96.113]: 554 5.7.1 <unknown[140.X.X.X]>: Client host rejected: Access denied; from=<> to=<admin@example.llc> proto=ESMTP helo=<example.llc>
Aug  4 19:31:17 beacon postfix/submission/smtpd[10993]: disconnect from unknown[140.X.X.X]

Why will this not work even though the IP is permitted and it is authenticating?

]]> Fri, 04 Aug 2023 19:39:06 +0000 https://forum.iredmail.org/post87038.html#p87038