1 Topic by KNERD (edited by KNERD 2019-03-02 07:19:14)

  • KNERD
  • Member
  • Offline
  • Registered: 2019-01-25
  • Posts: 68

Topic: Two iRedMail servers: They keep rejecting each other's email

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 0.9.8 & .0.9.9
- Deployed with iRedMail Easy or the downloadable installer? yes
- Linux/BSD distribution name and version:  Debian 9
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error mes nosage is required if you're experiencing an issue.
====

So I got two servers up and running, One was set up a month ago, and it is running version 0.9.8.
The other setup just a couple of days ago is running 0.9.9.

Each one can send and receive email just fine, The problem is when they try to send, or receive email to each other.

They are are both reporting " Recipient address rejected: Intentional policy rejection, please try again later (in reply to RCPT TO command))" when an email comes in for a valid user on each of the servers. They are also on very different networks.

Any ideas on this?

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,091

Re: Two iRedMail servers: They keep rejecting each other's email

KNERD wrote:

Recipient address rejected: Intentional policy rejection

FYI: https://docs.iredmail.org/errors.html#i … gain-later

Short answer: disable greylisting service for each other.

cd /opt/iredapd/tools/
python greylisting_admin.py --disable --from '<ip-address-of-another-server>'

3 Reply by KNERD

  • KNERD
  • Member
  • Offline
  • Registered: 2019-01-25
  • Posts: 68

Re: Two iRedMail servers: They keep rejecting each other's email

I will give it a try.

Thank you

4 Reply by KNERD

  • KNERD
  • Member
  • Offline
  • Registered: 2019-01-25
  • Posts: 68

Re: Two iRedMail servers: They keep rejecting each other's email

ZhangHuangbin wrote:
KNERD wrote:

Recipient address rejected: Intentional policy rejection

FYI: https://docs.iredmail.org/errors.html#i … gain-later

Short answer: disable greylisting service for each other.

cd /opt/iredapd/tools/
python greylisting_admin.py --disable --from '<ip-address-of-another-server>'

After giving this more though, why would this be necessary? I have done everything I can to make each sever legitimate as possible.

It seems the grey list is acting more more a block list as I am seeing a lot of legitimate email coming in getting rejected.

How can this overzealous behavior be disabled?

5 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,091

Re: Two iRedMail servers: They keep rejecting each other's email

This is just temporary rejection, sender server will retry the delivery, after tried few times, it will be bypassed for few days (30 days by default).

You can also whitelist the IP in /opt/iredapd/settings.py, parameter "MYNETWORKS", then restart iredapd service.

MYNETWORKS = ['x.x.x.x', 'y.y.y.y']

6 Reply by KNERD

  • KNERD
  • Member
  • Offline
  • Registered: 2019-01-25
  • Posts: 68

Re: Two iRedMail servers: They keep rejecting each other's email

ZhangHuangbin wrote:

This is just temporary rejection, sender server will retry the delivery, after tried few times, it will be bypassed for few days (30 days by default).

You can also whitelist the IP in /opt/iredapd/settings.py, parameter "MYNETWORKS", then restart iredapd service.

MYNETWORKS = ['x.x.x.x', 'y.y.y.y']

Thank you kindly

7 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,091

Re: Two iRedMail servers: They keep rejecting each other's email

Does it work for you now?

8 Reply by KNERD

  • KNERD
  • Member
  • Offline
  • Registered: 2019-01-25
  • Posts: 68

Re: Two iRedMail servers: They keep rejecting each other's email

ZhangHuangbin wrote:

Does it work for you now?


Yes it does, thank you.
I still wonder why the issue if both email servers are legit?

9 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,091

Re: Two iRedMail servers: They keep rejecting each other's email

You know the servers are legit, but the software programs don't. So we just add relevant configurations to tell them.

10 Reply by KNERD

  • KNERD
  • Member
  • Offline
  • Registered: 2019-01-25
  • Posts: 68

Re: Two iRedMail servers: They keep rejecting each other's email

ZhangHuangbin wrote:

You know the servers are legit, but the software programs don't. So we just add relevant configurations to tell them.


What I mean is the proper method to set them up with DNS servers is done, and other things to ensure email is not blocked by any email servers.

Iit seems you have gone a little overboard with the greylisting and blocking a lot of legit servers.

I have gone ahead and disabled the greylist per your documentation.

11 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,091

Re: Two iRedMail servers: They keep rejecting each other's email

KNERD wrote:

Iit seems you have gone a little overboard with the greylisting and blocking a lot of legit servers.

Which ones?

12 Reply by KNERD

  • KNERD
  • Member
  • Offline
  • Registered: 2019-01-25
  • Posts: 68

Re: Two iRedMail servers: They keep rejecting each other's email

ZhangHuangbin wrote:
KNERD wrote:

Iit seems you have gone a little overboard with the greylisting and blocking a lot of legit servers.

Which ones?


I am sorry, but there are too many to list. Not the major ones like gmail. outlook , etc. but legit businesses in which I communicate with.