1

Topic: SMTP AUTH is required for users under this sender domain

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.3.2 MARIADB edition.
- Deployed with iRedMail Easy or the downloadable installer? Downloadable Installer
- Linux/BSD distribution name and version: Debian 10
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):  MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? Yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

We experiencing a problem from time to time, when someone send email from account in our domain in o365 to account hosted on iredmail.
o365 have permission to talk behalf of our domain - CHECK_SPF_IF_LOGIN_MISMATCH is enabled and SPF record contains include:spf.protection.outlook.com.
Thousand or more emails per day from o365 in this scenario are sended properly, but some are not (<10). How to resolve this issue, where to search problem - dns, iredapd related settings or maybe something else?

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: SMTP AUTH is required for users under this sender domain

TronRobotron wrote:

Thousand or more emails per day from o365 in this scenario are sended properly, but some are not (<10).

Check Postfix and iRedAPD log files, are those 10 actually sent from o365? Or spammers?
If sent from o365, we need full smtp session log related to the email in Postfix and iRedAPD log files. (Note: do not attach the full log files, just extract related log lines without filter like "grep".)

3

Re: SMTP AUTH is required for users under this sender domain

ZhangHuangbin wrote:
TronRobotron wrote:

Thousand or more emails per day from o365 in this scenario are sended properly, but some are not (<10).

Check Postfix and iRedAPD log files, are those 10 actually sent from o365? Or spammers?
If sent from o365, we need full smtp session log related to the email in Postfix and iRedAPD log files. (Note: do not attach the full log files, just extract related log lines without filter like "grep".)

It was our traffic, not spam or something else.
We found what was a problem, and very nasty solution smile
The problem was a timeout when iredapd checks spf record. We cannot change our resolver on iredapd box, so one of our collegues added to iredapd code posiibility to use other dns servers than the system-wide.