1 Topic by c4r81n3

  • c4r81n3
  • Member
  • Offline
  • Registered: 2022-10-31
  • Posts: 12

Topic: Postfix - Amavis - Blocked MTA Blocked

smtp; 554 5.7.1 id=17953-16 - Rejected by next-hop MTA on
relaying, from MTA(smtp:[127.0.0.1]:10025): 554 5.7.1
<******@outlook.com>: Recipient address rejected: Access denied

Does anyone have this same error when a domain from outside the org sends an email even though the domain is whitelisted?
Modify message

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,770

Re: Postfix - Amavis - Blocked MTA Blocked

Did you change any Amavisd settings?

3 Reply by c4r81n3

  • c4r81n3
  • Member
  • Offline
  • Registered: 2022-10-31
  • Posts: 12

Re: Postfix - Amavis - Blocked MTA Blocked

ZhangHuangbin wrote:

Did you change any Amavisd settings?

We don't actually changed any settings on the amavis

# listen on multiple TCP ports. 9998 is used for releasing quarantined mails.
$inet_socket_port = [10024, 10026, 9998];

# Num of pre-forked children.
# WARNING: it must match (equal to or larger than) the number set in
# /etc/postfix/master.cf "maxproc" column for the 'smtp-amavis' service.
$max_servers = 10; # number of pre-forked children
$max_requests = 20; # retire a child after that many accepts

# Amavisd log level. Verbosity: 0, 1, 2, 3, 4, 5, -d.
$log_level = 0;
# SpamAssassin debugging (require $log_level). Default if off (0).
$sa_debug = 0;

# Listen on specified addresses.
$inet_socket_bind = ['127.0.0.1'];

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,770

Re: Postfix - Amavis - Blocked MTA Blocked

Please post context log for troubleshooting.

5 Reply by c4r81n3

  • c4r81n3
  • Member
  • Offline
  • Registered: 2022-10-31
  • Posts: 12

Re: Postfix - Amavis - Blocked MTA Blocked

ZhangHuangbin wrote:

Please post context log for troubleshooting.

This is the error that we got, i've attached the file

6 Reply by c4r81n3

  • c4r81n3
  • Member
  • Offline
  • Registered: 2022-10-31
  • Posts: 12

Re: Postfix - Amavis - Blocked MTA Blocked

This is the error that we got, I've attached the file

ZhangHuangbin wrote:

Please post context log for troubleshooting.

7 Reply by c4r81n3

  • c4r81n3
  • Member
  • Offline
  • Registered: 2022-10-31
  • Posts: 12

Re: Postfix - Amavis - Blocked MTA Blocked

Apologies for the spam, i've attached the file for reference regarding of the error message

ZhangHuangbin wrote:

Please post context log for troubleshooting.

8 Reply by Cthulhu

  • Cthulhu
  • Member
  • Offline
  • Registered: 2019-06-04
  • Posts: 815

Re: Postfix - Amavis - Blocked MTA Blocked

You still did not attach anything

9 Reply by c4r81n3

  • c4r81n3
  • Member
  • Offline
  • Registered: 2022-10-31
  • Posts: 12

Re: Postfix - Amavis - Blocked MTA Blocked

Apologies, it seems that the filed that I attached has not successfully imported, but here's the context logs

Dec  6 17:19:08 ip-10-250-3-46 roundcube: <nv8arucf> SMTP Error: Failed to add recipient 'john.smith@test-mail.domain.com'. 5.7.1 <john.smith@test-mail.domain.com>: Recipient address rejected: You are not authorized to sent to this domain. Kindly contact help@domain.com for assistance. Thanks! (Code: 554) in /opt/www/roundcubemail-1.1.3/program/lib/Roundcube/rcube.php on line 1708 (POST /mail/?_task=mail&_unlock=loading1670365147810&_lang=en_US&_framed=1?_task=mail&_action=send)

Cthulhu wrote:

You still did not attach anything

10 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,770

Re: Postfix - Amavis - Blocked MTA Blocked

c4r81n3 wrote:

Recipient address rejected: You are not authorized to sent to this domain. Kindly contact help@domain.com for assistance. Thanks!

Isn't it clear enough?

11 Reply by c4r81n3

  • c4r81n3
  • Member
  • Offline
  • Registered: 2022-10-31
  • Posts: 12

Re: Postfix - Amavis - Blocked MTA Blocked

Unfortunately we already whitelisted the domain where it should be allowed to send an email to the target email address however, we still get this error

ZhangHuangbin wrote:
c4r81n3 wrote:

Recipient address rejected: You are not authorized to sent to this domain. Kindly contact help@domain.com for assistance. Thanks!

Isn't it clear enough?

12 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,770

Re: Postfix - Amavis - Blocked MTA Blocked

The point is error message "You are not authorized to sent to this domain", keyword "not authorized".

This error message was triggered when your user sending email to that recipient, and recipient server rejected the message. You should contact the administrator of recipient server to figure out why they block your server.

13 Reply by c4r81n3

  • c4r81n3
  • Member
  • Offline
  • Registered: 2022-10-31
  • Posts: 12

Re: Postfix - Amavis - Blocked MTA Blocked

In addition, we saw this error as well sir

Blocked MTA-BLOCKED {RejectedInternal}, ORIGINATING LOCAL [209.85.214.197]:34336 [54.240.27.96] <01010184bec3a840-322fd8cb-974c-4fb5-982d-bc6a045a8774-000000@us-west-2.amazonses.com> -> <mary.s***@ro***-mail.*****.com>, Queue-ID: E5F63660C06, Message-ID: <01010184bec3a840-322fd8cb-974c-4fb5-982d-bc6a045a8774-000000@us-west-2.amazonses.com>, mail_id: ZEBjmR4P_8yv, Hits: -, size: 16129, dkim_sd=gdwg2y3kokkkj5a55z2ilkup5wp5hhxx:amazonses.com, 201 ms
Nov 28 10:03:50 ip-10-250-3-46 postfix/smtp[35961]: E5F63660C06: to=<mary.solis@ro***-mail.*********.com>, relay=127.0.0.1[127.0.0.1]:10026, conn_use=3, delay=0.88, delays=0.66/0/0/0.21, dsn=5.7.1, status=bounced (host 127.0.0.1[127.0.0.1] said: 550 5.7.1 id=31530-06-3 - Rejected by next-hop MTA on relaying, from MTA(smtp:[127.0.0.1]:10025): 550 5.7.1 Command rejected (in reply to end of DATA command))

ZhangHuangbin wrote:

The point is error message "You are not authorized to sent to this domain", keyword "not authorized".

This error message was triggered when your user sending email to that recipient, and recipient server rejected the message. You should contact the administrator of recipient server to figure out why they block your server.

14 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,770

Re: Postfix - Amavis - Blocked MTA Blocked

Are you using a third-party smtp service as relay?

15 Reply by c4r81n3

  • c4r81n3
  • Member
  • Offline
  • Registered: 2022-10-31
  • Posts: 12

Re: Postfix - Amavis - Blocked MTA Blocked

We are using the amavis tool

ZhangHuangbin wrote:

Are you using a third-party smtp service as relay?

16 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,770

Re: Postfix - Amavis - Blocked MTA Blocked

Seems Postfix is configured to use Amazon SES for outbound / relay?

17 Reply by c4r81n3

  • c4r81n3
  • Member
  • Offline
  • Registered: 2022-10-31
  • Posts: 12

Re: Postfix - Amavis - Blocked MTA Blocked

Yes boss

ZhangHuangbin wrote:

Seems Postfix is configured to use Amazon SES for outbound / relay?