1 Topic by fiast5 (edited by fiast5 2023-06-13 21:05:38)

  • fiast5
  • Member
  • Offline
  • Registered: 2023-06-13
  • Posts: 3

Topic: Relay access denied to IDN domain

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.6.1 MARIADB edition.
- Deployed with iRedMail Easy or the downloadable installer? iRedMail Easy
- Linux/BSD distribution name and version: CentOS Stream release 8
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): nginx
- Manage mail accounts with iRedAdmin-Pro? - No iredadmin community edition
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
i add IDN domain (****.рф)  with punycode xn--*******.xn--p1ai in the iredamin interface, add test email test@****.рф
If I send a mail from SOGo (test@****.рф) my message sends successfully to gmail, but if i send from gmail to test@****.рф i get an error

Jun 13 08:33:49 mx postfix/smtpd[5621]: NOQUEUE: reject: RCPT from mail-ej1-f50.google.com[209.85.218.50]: 554 5.7.1 <test@****.рф>: Relay access denied; from=<**********@gmail.com> to=<test@****.рф> proto=ESMTP helo=<mail-ej1-f50.google.com>

Post's attachments

Screenshot_2.png
Screenshot_2.png 22.32 kb, 1 downloads since 2023-06-13 

You don't have the permssions to download the attachments of this post.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by Cthulhu (edited by Cthulhu 2023-06-14 11:33:50)

  • Cthulhu
  • Member
  • Offline
  • Registered: 2019-06-04
  • Posts: 907

Re: Relay access denied to IDN domain

IDN works without problems, it's just gmail that causes problems.

By default, postfix offers SMTPUTF8, which isn't used at all, and literally all mailservers and clients use plain ASCII, but gmail uses UTF8 when it is offered

The workaround:

in /etc/postfix/main.cf

smtputf8_enable = no

restart postfix afterwards

pls report if it works


Edit:

may i request if it also works if you add the domain with UTF8 (no punycode) as alias domain without the changes to postfix?

3 Reply by fiast5

  • fiast5
  • Member
  • Offline
  • Registered: 2023-06-13
  • Posts: 3

Re: Relay access denied to IDN domain

this solved the problem.

4 Reply by Cthulhu

  • Cthulhu
  • Member
  • Offline
  • Registered: 2019-06-04
  • Posts: 907

Re: Relay access denied to IDN domain

can you try with the alias domain aswell?

5 Reply by fiast5

  • fiast5
  • Member
  • Offline
  • Registered: 2023-06-13
  • Posts: 3

Re: Relay access denied to IDN domain

i does not try with alias domain.
I have a problem with SOGo, i cannot can auth with test@****.рф, but if i use punycode in domain name as test@xn--*******.xn--p1ai SOGo authenticates and i can use web mail.

6 Reply by Cthulhu

  • Cthulhu
  • Member
  • Offline
  • Registered: 2019-06-04
  • Posts: 907

Re: Relay access denied to IDN domain

https://bugs.sogo.nu//view.php?id=4261

This "bug" is 7 years old and was not yet resolved

but it can't be considered a bug, since IDN are treated like what they are: ASCII encoded
neither potfix, dovecot nor sogo are handling this incorrect

7 Reply by dave.opc

  • dave.opc
  • Member
  • Offline
  • Registered: 2019-07-08
  • Posts: 103

Re: Relay access denied to IDN domain

as i already mention in telegram channel, it's not safe to use cyrillic domains for mail purposes. you will encounter problems with gmail and other mail services, that don't have this feature implemented. your users will complain all the time that mail was not delivered, mail was not received etc. doesn't worse it.

8 Reply by Cthulhu

  • Cthulhu
  • Member
  • Offline
  • Registered: 2019-06-04
  • Posts: 907

Re: Relay access denied to IDN domain

i checked:

view-source:https://sogo.taz.de/SOGo/

https://www.npmjs.com/package/punycode

You could hook the login form, redirect the form method to a new js function which converts the login credentions to punycode and then call the login function afterwards

this is not a nice solution, but it should work

9 Reply by rukraj.pereira

  • rukraj.pereira
  • Member
  • Offline
  • Registered: 2023-06-22
  • Posts: 32

Re: Relay access denied to IDN domain

We are getting 554 5.7.1 Relay access denied while doing SMTP testing.

Please assist.

10 Reply by Cthulhu

  • Cthulhu
  • Member
  • Offline
  • Registered: 2019-06-04
  • Posts: 907

Re: Relay access denied to IDN domain

what you mean with smtp testing?

11 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,082

Re: Relay access denied to IDN domain

IDN (smtp utf8) support is now disabled by default in iRedMail.
FYI https://github.com/iredmail/iRedMail/pull/221