1 Topic by 376416354

  • 376416354
  • Member
  • Offline
  • Registered: 2018-04-08
  • Posts: 7

Topic: iredmail disable 25 port

Now I have enabled the 465 port, how to ban 25 port, because our server vendor intercepts spam, shielded the 25 port and now can only disable the 25 port. If the 25 port is not disabled, all the mail I sent is unsuccessful, and there is a 25 port connection timeout prompt.

==== Required information ====
- iRedMail version (check /etc/iredmail-release):
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,792

Re: iredmail disable 25 port

Port 25 must be open for mail service.
FYI: https://docs.iredmail.org/network.ports.html

3 Reply by 376416354

  • 376416354
  • Member
  • Offline
  • Registered: 2018-04-08
  • Posts: 7

Re: iredmail disable 25 port

25 udp is disable by the service provider,but 25 tcp is enable , can receive mail now but can't send it；465 mail in iredmail seems to have to go through 25 ports. Now, how do I get through 25 ports?

4 Reply by 376416354

  • 376416354
  • Member
  • Offline
  • Registered: 2018-04-08
  • Posts: 7

Re: iredmail disable 25 port

ZhangHuangbin wrote:

Port 25 must be open for mail service.
FYI: https://docs.iredmail.org/network.ports.html


25 udp is disable by the service provider,but 25 tcp is enable , can receive mail now but can't send it；465 mail in iredmail seems to have to go through 25 ports. Now, how do I get through 25 ports?

5 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,792

Re: iredmail disable 25 port

Please use port 587 with STARTTLS (or TLS) instead of port 465.
And do NOT use port 25 for end users to send email.

6 Reply by 376416354

  • 376416354
  • Member
  • Offline
  • Registered: 2018-04-08
  • Posts: 7

Re: iredmail disable 25 port

ZhangHuangbin wrote:

Please use port 587 with STARTTLS (or TLS) instead of port 465.
And do NOT use port 25 for end users to send email.



The official document is only 465 ports, and there is no 587. How does the user not use the 25 port at last?

7 Reply by 376416354

  • 376416354
  • Member
  • Offline
  • Registered: 2018-04-08
  • Posts: 7

Re: iredmail disable 25 port

ZhangHuangbin wrote:

Please use port 587 with STARTTLS (or TLS) instead of port 465.
And do NOT use port 25 for end users to send email.

The most important thing is not to use the 25 port！

8 Reply by 376416354

  • 376416354
  • Member
  • Offline
  • Registered: 2018-04-08
  • Posts: 7

Re: iredmail disable 25 port

ZhangHuangbin wrote:

Please use port 587 with STARTTLS (or TLS) instead of port 465.
And do NOT use port 25 for end users to send email.

[root@mail ~]# lsof -i:587
COMMAND  PID USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
master  1514 root   26u  IPv4  17676      0t0  TCP *:submission (LISTEN)

/etc/postfix/master.cf

587     inet  n       -       n       -       -       smtpd
  -o syslog_name=postfix/smtps
  -o smtpd_tls_wrappermode=yes
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject


Modify this location, do you need to modify other locations? At present, we can only receive mail, sending the error log as follows:

Apr  8 16:54:09 mail postfix/smtp[5119]: connect to mx3.qq.com[184.105.206.86]:25: Connection timed out
Apr  8 16:54:39 mail postfix/smtp[5119]: connect to mx3.qq.com[184.105.206.32]:25: Connection timed out
Apr  8 16:55:09 mail postfix/smtp[5119]: connect to mx3.qq.com[203.205.176.244]:25: Connection timed out
Apr  8 16:55:39 mail postfix/smtp[5119]: connect to mx3.qq.com[184.105.206.82]:25: Connection timed out
Apr  8 16:56:09 mail postfix/smtp[5119]: connect to mx3.qq.com[184.105.206.85]:25: Connection timed out
Apr  8 16:56:09 mail postfix/smtp[5119]: 1628D40605: to=<376416354@qq.com>, relay=none, delay=2078, delays=1927/0.07/150/0, dsn=4.4.1, status=deferred (connect to mx3.qq.com[184.105.206.85]:25: Connection timed out)

9 Reply by 376416354

  • 376416354
  • Member
  • Offline
  • Registered: 2018-04-08
  • Posts: 7

Re: iredmail disable 25 port

Why don't I get a valid answer to my question