Interesting issue - I can receive e-mail, but can't relay apparently.

[mike_art03a]

Good day all,

I've been scouring the web and I can't seem to find an answer for my curious issue.

I'm running Ubuntu Server 10.04 LTS with ispCP Omega 1.0.7 and my issue is that I can't seem to send out e-mail, I can receive them in most cases, but sent messages get bounced back from their respective domains.

I've included a copy of the error report that I get from Gmail, Hotmail also results in the same error. I can receive mail just fine as well. It seems to me that servers are assuming that I'm sending mail from a domestic IP (which mine shouldn't be) and not a 'mail server.'

---Error Report---
Subject: Undelivered Mail Returned to Sender
From: "Mail Delivery System" <MAILER-DAEMON@67.55.2.42>
Date: Wed, April 25, 2012 12:09 am
To: martelle@msrv.ca
Priority: Normal


This is the mail system at host admin.msrv.ca.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

The mail system

<michael.artelle@gmail.com>: host gmail-smtp-in.l.google.com[209.85.225.27]
said: 550-5.7.1 [67.55.2.42] The IP you're using to send mail is not
authorized to 550-5.7.1 send email directly to our servers. Please use the
SMTP relay at your 550-5.7.1 service provider instead. Learn more at 550
5.7.1 http://support.google.com/mail/bin/answe...swer=10336
b7si14722466icw.13 (in reply to end of DATA command)

[ephigenie]

please post the first 50 lines of your postfix /etc/postfix/main.cf .

[mike_art03a]

Howdy,

Sure thing, here it is:

Code:

# Postfix directory settings; These are critical for normal Postfix MTA functionallity
command_directory            = /usr/sbin
daemon_directory             = /usr/lib/postfix

# Some common configuration parameters
inet_interfaces              = all
mynetworks_style             = host

myhostname                   = admin.msrv.ca
mydomain                     = admin.msrv.ca
myorigin                     = 67.55.2.42

smtpd_banner                 = $myhostname ESMTP ispCP 1.0.7 OMEGA Managed
setgid_group                 = postdrop

# Receiving messages parameters
mydestination                = $myhostname, $mydomain
append_dot_mydomain          = no
append_at_myorigin           = yes
local_transport              = local
virtual_transport            = virtual
transport_maps               = hash:/etc/postfix/ispcp/transport
alias_maps                   = hash:/etc/aliases
alias_database               = hash:/etc/aliases

# Delivering local messages parameters
mail_spool_directory         = /var/mail

# Mailboxquota
# => 0 for unlimited
# => 104857600 for 100 MB
mailbox_size_limit           = 0
mailbox_command              = procmail -a "$EXTENSION"

# Message size limit
# => 0 for unlimited
# => 104857600 for 100 MB
message_size_limit           = 0

biff                         = no
recipient_delimiter          = +

local_destination_recipient_limit = 1
local_recipient_maps         = unix:passwd.byname $alias_database

# ispCP Autoresponder parameters
ispcp-arpl_destination_recipient_limit = 1

# Delivering virtual messages parameters
virtual_mailbox_base         = /var/mail/virtual
virtual_mailbox_limit        = 0

virtual_mailbox_domains      = hash:/etc/postfix/ispcp/domains
virtual_mailbox_maps         = hash:/etc/postfix/ispcp/mailboxes

virtual_alias_maps           = hash:/etc/postfix/ispcp/aliases

virtual_minimum_uid          = 1001
virtual_uid_maps             = static:1001
virtual_gid_maps             = static:8

# SASL paramters
smtpd_sasl_auth_enable       = yes
smtpd_sasl_security_options  = noanonymous
smtpd_sasl_local_domain      = sv1.msrv.ca
broken_sasl_auth_clients     = yes

smtpd_helo_required          = yes

smtpd_helo_restrictions      = permit_mynetworks,
                               permit_sasl_authenticated,
                               reject_invalid_helo_hostname,
                               reject_non_fqdn_helo_hostname

smtpd_sender_restrictions    = reject_non_fqdn_sender,
                               reject_unknown_sender_domain,
                               permit_mynetworks,
                               permit_sasl_authenticated

smtpd_recipient_restrictions = reject_non_fqdn_recipient,
                               reject_unknown_recipient_domain,
                               permit_mynetworks,
                               permit_sasl_authenticated,
                               reject_unauth_destination,
                               reject_unlisted_recipient,
                               check_policy_service inet:127.0.0.1:12525,
                               check_policy_service inet:127.0.0.1:10023,
                               permit

smtpd_data_restrictions      = reject_multi_recipient_bounce,
                               reject_unauth_pipelining

# TLS parameters; activate, if avaible/used
#smtpd_tls_security_level    = may
#smtpd_tls_loglevel          = 2
#smtpd_tls_cert_file         = /etc/postfix/cert.pem
#smtpd_tls_key_file          = /etc/postfix/privkey.pem
#smtpd_tls_auth_only         = no
#smtpd_tls_received_header   = yes

# AMaViS parameters; activate, if available/used
#content_filter               = amavis:[127.0.0.1]:10024

# Quota support; activate, if available/used
#virtual_create_maildirsize     = yes
#virtual_mailbox_extended       = yes
#virtual_mailbox_limit_maps     = mysql:/etc/postfix/mysql_virtual_mailbox_limit_maps.cf
#virtual_mailbox_limit_override = yes
#virtual_maildir_limit_message  = "The user you're trying to reach is over mailbox quota."
#virtual_overquota_bounce       = yes

[ephigenie]

This is strange indeed.
I looked a bit at your DNS settings and so on ... did not really see a problem.
The only problem you might have is the reverse DNS entry of your IP.

Can you fix that to be something like mail.msrv.ca ? or admin.msrv.ca ?
Right now it looks like its dsl-67-55-*****.acanac.net maybe thats what google doesn't like...
Can you send elsewhere ?
Try sending me a mail ... ( malte at snapscouts dot de )

[mike_art03a]

Yeah, I figured the reverse look up might be the issue. Sadly, that's on the server provider's end (Canaca). They also own a Independant ISP (Acanac), I can only assume they're recycling an IP address that belonged to their ISP.

Looks like I can send mail to my gmail account now. Probably because it took longer to resolve DNS issues I guess.

Here's a copy of my log attached just the same.

-Edit: I should ask this while I am at it, what are the mail server settings that allows me to use external mail clients to be able to connect to send/receive mail? I've been scouring the documentation and haven't seen anything mentioned. -

Also, thanks for your help again!

[ephigenie]

There are no more settings needed... you can use thunderbird / apple mail / outlook ... whatever you prefer.

Use your hostname as smtp and pop3 or imap server and as username your complete email adress + password = password...

[mike_art03a]

Thanks alot, just wanted to make sure. Just swapped out Squirrelmail for Roundcube, much cleaner interface.