1 (edited by Chameleon 2018-08-01 03:27:22)

Topic: Helo command rejected Whitelist domain

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 0.9.8 MYSQL edition.
- Linux/BSD distribution name and version: Ubuntu 16.04.5 LTS
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hi,

Very often I get similar messages in the logs, which are getting blocked:

Jul 31 16:00:44 srvmx01 postfix/smtpd[3426]: NOQUEUE: reject: RCPT from static-IP-address.net.encoline.de[IP Address]: 450 4.7.1 <gate.faseroptik>: Helo command rejected: Host not found; from=<user01@domain04.com> to=<sales@domain01.com> proto=ESMTP helo=<gate.domain01>

I have added domain04.com into /etc/postfix/helo_access.pcre like this:

/^domain04\.com$/         DUNNO

I have tried and:

/^domain04\.com$/         OK

I have added it with:

python wblist_admin.py --add --whitelist @domain04.com

But there is no effect.
All the messages from that domain continues to be blocked.

Can you please advised how to fix it?

Thanks in advance.

BR,
Stan

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Helo command rejected Whitelist domain

Chameleon wrote:

I have added domain04.com into /etc/postfix/helo_access.pcre like this:
/^domain04\.com$/         DUNNO

You need to place this rule BEFORE other rules in same file. First match rule wins.

3

Re: Helo command rejected Whitelist domain

Hi,

I did it and now the error has changed to:

Aug  7 08:42:50 srvmx01 postfix/smtpd[27990]: NOQUEUE: reject: RCPT from static-217-17-207-45.net.encoline.de[217.17.207.45]: 554 5.7.1 <static-217-17-207-45.net.encoline.de>: Helo command rejected: ACCESS DENIED. Your email was rejected because the sending mail server appears to be on a dynamic IP address that should not be doing direct mail delivery (217-17-207-45); from=<mark@faseroptik-jena.de> to=<sales@domain01.com> proto=ESMTP helo=<static-217-17-207-45.net.encoline.de>

I have added /^\static-217-17-207-45\.net\.encoline\.de$/ DUNNO

But there is no effect.

What I am doing wrong?

BR,
Stan

4

Re: Helo command rejected Whitelist domain

Chameleon wrote:

I have added /^\static-217-17-207-45\.net\.encoline\.de$/ DUNNO
But there is no effect.

Are you sure this client use same HELO all the time?