1

Topic: Problem in dynamic IP address

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 0.9.8 MARIADB edition.
- Deployed with iRedMail Easy or the downloadable installer?
- Linux/BSD distribution name and version: Ubuntu
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): Mysql
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hello, some messages from a specific provider are being blocked because the server is considering dynamic IP origin. I've already tried to release it and still can not do it. Here is the information for analysis:

Log Mail

###

Apr 10 18:00:21 srv-mx1 postfix/smtpd[12250]: NOQUEUE: reject: RCPT from webmail-201.76.63.158.ig.com.br[201.76.63.158]: 554 5.7.1 <webmail-201.76.63.158.ig.com.br>: Helo command rejected: ACCESS DENIED. Your email was rejected because the sending mail server appears to be on a dynamic IP address that should not be doing direct mail delivery (201.76.63.158); from=<ajum@ig.com.br> to=<compras@metalleste.com> proto=ESMTP helo=<webmail-201.76.63.158.ig.com.br>
Apr 10 18:00:21 srv-mx1 postfix/smtpd[12250]: NOQUEUE: reject: RCPT from webmail-201.76.63.158.ig.com.br[201.76.63.158]: 554 5.7.1 <webmail-201.76.63.158.ig.com.br>: Helo command rejected: ACCESS DENIED. Your email was rejected because the sending mail server appears to be on a dynamic IP address that should not be doing direct mail delivery (201.76.63.158); from=<ajum@ig.com.br> to=<vendas@metalleste.com> proto=ESMTP helo=<webmail-201.76.63.158.ig.com.br>

###

I followed the recommendations of this tutorial and still could not solve:

https://forum.iredmail.org/topic8108-ir … ected.html

You can see my example code below:

###

# Prepend HELO hostname of sender server
#/(.*)/ PREPEND X-Original-Helo: $1 (iRedMail: http://www.iredmail.org/)

/^ec2-(\d{1,3}-\d{1,3}-\d{1,3}-\d{1,3}).*.ig.com.br$/ DUNNO
/(\d{1,3}-\d{1,3}-\d{1,3}-\d{1,3})/ REJECT ACCESS DENIED. Your email was rejected because the sending mail server appears to be on a dynamic IP address that should not be doing direct mail delivery (${1})

# No one will use these in helo command.
/^(localhost)$/ REJECT ACCESS DENIED. Your email was rejected because the sending mail server does not identify itself correctly (${1})
/^(localhost.localdomain)$/ REJECT ACCESS DENIED. Your email was rejected because the sending mail server does not identify itself correctly (${1})
/(\.local)$/ REJECT ACCESS DENIED. Your email was rejected because the sending mail server does not identify itself correctly (${1})


###

Is there something wrong?

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Problem in dynamic IP address

ramonalonso wrote:

/^ec2-(\d{1,3}-\d{1,3}-\d{1,3}-\d{1,3}).*.ig.com.br$/ DUNNO

You match "ec2-" at the beginning, but the rejected one is "webmail-".