1 (edited by a.dimitrov 2021-04-16 17:09:40)

Topic: Allow internal network devices to send email with insecure connection

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):
- Deployed with iRedMail Easy or the downloadable installer?
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
My setup
iRedMail version .1.3.2, downloadable installer, Ubuntu 20.01LTS, MariaDB, Nginx, No
My setup is Proxmox MGW on 25 port only for incoming mail, outgoing is sent directly via iredmail server in 587 port.

Hi, IredMail masters. I have a following problem. I need to enable send mails from internal lan via my mail server. I followed this documentation - https://docs.iredmail.org/additional.smtp.port.html for enabling 2525 port. Its work like a charm.
After that this one doc - https://docs.iredmail.org/allow.send.wi … auth.html.
This is not working.
In my /etc/postfix/sender_access.pcre I have a these records
/^backup@example\.bg$/ OK
/^10\.x\./ OK
/^10\.x\./ OK

This is my settings in /opt/iredapd/settings.py
MYNETWORKS = ['10.10.x.x','10.10.x.x','10.x.x.x']
ALLOWED_FORGED_SENDERS = ['backup@example.bg']

My goal is to send mail trought backup@example.bg to my mailbox a.dimitrov@example.bg in internal lan without SMTP auth and via 2525 port.
I have a backup software (is not support tls and ssl connection) and MS SQL from which I need to recieve notification.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Allow internal network devices to send email with insecure connection

What do you mean "not working"? Any related error message or log lines?

3 (edited by a.dimitrov 2021-04-18 00:49:23)

Re: Allow internal network devices to send email with insecure connection

Yep. Im sorry. Its litlle strange.
If I set non fdqn (just by internal mail server IP) I have a error log and error from sending software

Apr 17 09:02:39 smtp postfix/smtpd[1373821]: connect from unknown[10.10.0.x]
Apr 17 09:02:39 smtp postfix/smtpd[1373821]: NOQUEUE: reject: RCPT from unknown[10.10.0.x]: 504 5.5.2 <****>: Helo command rejected: need fully-qualified hostname; from=<backup@example.bg> to=<a.dimitrov@example.bg> proto=ESMTP helo=<*****>
Apr 17 09:02:39 smtp postfix/smtpd[1373821]: lost connection after RCPT from unknown[10.10.0.x]
Apr 17 09:02:39 smtp postfix/smtpd[1373821]: disconnect from unknown[10.10.0.x] ehlo=1 mail=1 rcpt=0/1 commands=2/3

If I set fdqn I dont have errror in maillog but  I have a error from sending software
(please view picture)

Other log is from SQL server (fdqn is set, if I set it only via IP - "Helo command rejected: need fully-qualified hostname" )
Message
The mail could not be sent to the recipients because of the mail server failure. (Sending Mail using Account 1 (2021-04-17T09:13:11). Exception Message: Could not connect to mail server. (A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond 94.x.x.x:2525).
)
In maillog there is no record for this error.

Post's attachments

error1.jpg
error1.jpg 26.86 kb, file has never been downloaded. 

You don't have the permssions to download the attachments of this post.

4

Re: Allow internal network devices to send email with insecure connection

a.dimitrov wrote:

Apr 17 09:02:39 smtp postfix/smtpd[1373821]: NOQUEUE: reject: RCPT from unknown[10.10.0.x]: 504 5.5.2 <****>: Helo command rejected: need fully-qualified hostname; from=<backup@example.bg> to=<a.dimitrov@example.bg> proto=ESMTP helo=<*****>

Whitelist this internal IP in /etc/postfix/helo_access.pcre.

BTW, i see your MUA has SMTP authentication support in the screenshot, why not use smtp auth directly?