Results 1 to 10 of 12

Thread: Helo command - Need Change postfix settings

Hybrid View

  1. #1
    Join Date
    Apr 2007
    Posts
    3
    Rep Power
    8

    Exclamation Helo command - Need Change postfix settings

    Hello all!

    I have problem with one incoming mails from one server. It is very importnant!
    postfix reject mails sent from this domain mailserver because, it has wrong defined mx records
    i browse forums i found that i need do this
    "You need to turn off the appropriate DNS/HELO check(s). Postfix is rejecting the mail because the MX record doesn't match the hostname the server announces itself as."
    But i cant do that because domain we host has very very much spam.
    I need help where to add in postix settings that postix dont scan/check from this domain e-mails for mx records.

    log part:

    Feb 26 11:55:48 mail postfix/smtpd[31847]: NOQUEUE: reject: RCPT from mail.domain.com[xx.xxx.x.xx]: 450 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
    Feb 26 11:55:48 snmail postfix/smtpd[31847]: disconnect from mail.domain.com[xx.xxx.x.xx]
    Feb 26 11:56:03 snmail zmtomcatmgr[32097]: status requested
    Feb 26 11:56:03 snmail zmtomcatmgr[32097]: status OK
    Feb 26 11:55:48 snmail last message repeated 2 times

    fc5 Release 4.5.5_GA_838.FC5_20070503175107 FC5 FOSS edition


    Please help. I'm newbie with postix.

  2. #2
    Join Date
    May 2007
    Location
    Oklahoma
    Posts
    703
    Rep Power
    9

    Default

    If you have the IP address of this server you could add it to the trusted networks in the Admin GUI. Something like this - xxx.xxx.xxx.xxx/32 . This will narrow it down to only that IP and postfix should accept mail from the server.

  3. #3
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    Quote Originally Posted by Bill Brock View Post
    If you have the IP address of this server you could add it to the trusted networks in the Admin GUI. Something like this - xxx.xxx.xxx.xxx/32 . This will narrow it down to only that IP and postfix should accept mail from the server.
    I would suggest that's not a wise thing to do as it could allow the external server to relay mail though the receiving server (i.e. spam). The best course of action would be to use a whitelist, check this section of the wiki article.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  4. #4
    Join Date
    May 2007
    Location
    Oklahoma
    Posts
    703
    Rep Power
    9

    Default

    A white list will open up the whole domain And the helo command is a lot easier to spoof than an IP address. Any machine claiming to be from that domain could send mail. Isolating one IP of a legitimate mail server seems more logical to me.

    But that's just my opinion. :-)

  5. #5
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    A whitelist doesn't necessarily open up the whole domain, you can restrict it to a specific email address. Allowing a mail server to connect to you will allow any user that can send mail via the remote server to relay mail through your server - the potential for a spammer is there.

    Who said the sending mail server, in this case, is legitimate? As they can't even get their DNS correct how lax are they likely to be? I wouldn't know the answer to either of those questions, it's better to err on the side of caution.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  6. #6
    Join Date
    May 2007
    Location
    Oklahoma
    Posts
    703
    Rep Power
    9

    Default

    He obviously wants to receive mail from that one server or he wouldn't be asking to.

Similar Threads

  1. How to change initial installation settings
    By paul.terhune@gmail.com in forum Installation
    Replies: 1
    Last Post: 02-16-2008, 12:06 AM
  2. 5.0 RC1: admin interface: no statistics, no mail queue
    By christian.kieft in forum Administrators
    Replies: 1
    Last Post: 11-13-2007, 09:22 AM
  3. Replies: 3
    Last Post: 11-03-2007, 11:55 PM
  4. Change default quoting/reply settings?
    By gkra in forum Administrators
    Replies: 0
    Last Post: 09-17-2007, 10:03 AM
  5. Replies: 0
    Last Post: 11-16-2006, 07:28 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •