1 Topic by kurb

  • kurb
  • Member
  • Offline
  • Registered: 2022-02-20
  • Posts: 8

Topic: Zix Encrypted emails are not deliverable to mail server

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.5.1
- Deployed with iRedMail Easy or the downloadable installer? Downloadable installer
- Linux/BSD distribution name and version: Ubuntu
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
If sender sends an email using Zix Email Encryption, email goes back as "your message could not be delivered"
___________
This is the mail system at host zix.xxx.xxxx.local.
I'm sorry to have to inform you that your message could not be delivered to one or more recipients.
It's attached below.
For further assistance, please send mail to postmaster.
If you do so, please include this problem report.
You can delete your own text from the attached returned message.

Reporting-MTA: dns; zix.xxx.xxxx.local
Final-recipient: xxxxx@xxxxxx.com
Action: failed
Status: 5.7.1
Remote-MTA: dns; mx.xxxxxxx.com
X-Supplementary-Info: <mx.xxxxxxx.com #5.7.1 smtp; 554 5.7.1
<zix.xxx.xxxx.local>: Helo command rejected:    ACCESS DENIED. Your email
was rejected because the sending mail server does    not identify itself
correctly (.local)>
---------------------------

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by Cthulhu

  • Cthulhu
  • Member
  • Offline
  • Registered: 2019-06-04
  • Posts: 914

Re: Zix Encrypted emails are not deliverable to mail server

Thats normal, every mailserver which identifies as a local mailserver or uses a dynamic or even statip HELO is rejected

3 Reply by kurb

  • kurb
  • Member
  • Offline
  • Registered: 2022-02-20
  • Posts: 8

Re: Zix Encrypted emails are not deliverable to mail server

Cthulhu wrote:

Thats normal, every mailserver which identifies as a local mailserver or uses a dynamic or even statip HELO is rejected

But, how can I receive those encrypted emails?

4 Reply by Cthulhu

  • Cthulhu
  • Member
  • Offline
  • Registered: 2019-06-04
  • Posts: 914

Re: Zix Encrypted emails are not deliverable to mail server

Since you removed literally everything which is needed to figure out a regex for server HELO, i cannot help you currently

5 Reply by kurb

  • kurb
  • Member
  • Offline
  • Registered: 2022-02-20
  • Posts: 8

Re: Zix Encrypted emails are not deliverable to mail server

Cthulhu wrote:

Since you removed literally everything which is needed to figure out a regex for server HELO, i cannot help you currently

I did not remove anything, except my email address and senders information.
The information I provided is the message sender receives. I get nothing on my side.
Where should I look in my mail server?

6 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,131

Re: Zix Encrypted emails are not deliverable to mail server

kurb wrote:

<zix.xxx.xxxx.local>: Helo command rejected:    ACCESS DENIED. Your email
was rejected because the sending mail server does    not identify itself
correctly (.local)>

This is quite clear.
If you want to allow this HELO hostname, insert one line at the beginning of  /etc/postfix/helo_access.pcre to bypass it:

/^zix\.xxx\.xxxx\.local$/ OK

7 Reply by kurb

  • kurb
  • Member
  • Offline
  • Registered: 2022-02-20
  • Posts: 8

Re: Zix Encrypted emails are not deliverable to mail server

ZhangHuangbin wrote:
kurb wrote:

<zix.xxx.xxxx.local>: Helo command rejected:    ACCESS DENIED. Your email
was rejected because the sending mail server does    not identify itself
correctly (.local)>

This is quite clear.
If you want to allow this HELO hostname, insert one line at the beginning of  /etc/postfix/helo_access.pcre to bypass it:

/^zix\.xxx\.xxxx\.local$/ OK

Hi Zhang Huangbin,
It worked! Thank you!