Mail system blues due to blacklisted IP addresses

Logs! Y’all need to be looking in the logs.

/var/log/maillog or /var/log/mail.log. If there are no entries, then your DNS is wrong.

1 Like

Hi Joe, there are over 3800 entries…Here are the last 14: Aug 27 01:13:05 nx1 dovecot: imap-login: Login: user=<admin-yaconplus.com>, method=PLAIN, rip=::1, lip=::1, mpid=23846, secured, session=
Aug 27 01:13:05 nx1 dovecot: imap(admin-yaconplus.com): Logged out in=90 out=944
Aug 27 01:13:21 nx1 dovecot: imap-login: Login: user=<admin-yaconplus.com>, method=PLAIN, rip=::1, lip=::1, mpid=23905, secured, session=
Aug 27 01:13:21 nx1 dovecot: imap(admin-yaconplus.com): Logged out in=313 out=1906
Aug 27 01:13:22 nx1 dovecot: imap-login: Login: user=<admin-yaconplus.com>, method=PLAIN, rip=::1, lip=::1, mpid=23908, secured, session=
Aug 27 01:13:22 nx1 dovecot: imap(admin-yaconplus.com): Logged out in=313 out=1906
Aug 27 01:14:05 nx1 dovecot: imap-login: Login: user=<admin-yaconplus.com>, method=PLAIN, rip=::1, lip=::1, mpid=24065, secured, session=<d/gGp9GtSLIAAAAAAAAAAAAAAAAAAAAB>
Aug 27 01:14:05 nx1 dovecot: imap(admin-yaconplus.com): Logged out in=90 out=944
Aug 27 01:15:05 nx1 dovecot: imap-login: Login: user=<admin-yaconplus.com>, method=PLAIN, rip=::1, lip=::1, mpid=24407, secured, session=
Aug 27 01:15:05 nx1 dovecot: imap(admin-yaconplus.com): Logged out in=90 out=944
Aug 27 01:15:36 nx1 postfix/anvil[22722]: statistics: max connection rate 1/60s for (smtp:209.85.208.41) at Aug 27 01:10:04
Aug 27 01:15:36 nx1 postfix/anvil[22722]: statistics: max connection count 1 for (smtp:209.85.208.41) at Aug 27 01:10:04
Aug 27 01:15:36 nx1 postfix/anvil[22722]: statistics: max cache size 1 at Aug 27 01:10:04
Aug 27 01:16:05 nx1 dovecot: imap-login: Login: user=<admin-yaconplus.com>, method=PLAIN, rip=::1, lip=::1, mpid=25024, secured, session=
Aug 27 01:16:05 nx1 dovecot: imap(admin-yaconplus.com): Logged out in=90 out=944

OK, good! Something is happening. So, trying sending mail (or whatever is not working, I don’t have time to read this whole thread to figure out what it’s about) and figure out where the mail is going, or why it isn’t being accepted or whatever…

Ignore the dovecot bits (or grep -v them) unless you’re trying to troubleshoot IMAP problems, but it looks like IMAP is working.

It’s working between users and reaching outside sources like Gmail…but, nothing in return…

To be clear, I don’t see any indication that Postfix has received mail in the entries you just posted. If it has, it’s somewhere else in the log. So, those entries do not prove your DNS is configured correctly.

I have my DNS as: nx1 and nx2.intrelligent.net, MX records: mail.intrelligent.net. One thing I’ve noticed is that i don’t have isptables installed on the firewall. No iptables(6) bootup action was found, indicating that the IPtables package is not installed on your system… I don’t know if this makes any difference…

Just look in the log.

These are from the Hostname: Aug 27 01:25:05 nx1 dovecot: imap-login: Login: user=<admin-yaconplus.com>, method=PLAIN, rip=::1, lip=::1, mpid=27736, secured, session=
Aug 27 01:25:05 nx1 dovecot: imap(admin-yaconplus.com): Logged out in=90 out=944
Aug 27 01:25:26 nx1 postfix/smtpd[28014]: warning: No server certs available. TLS won’t be enabled
Aug 27 01:25:26 nx1 postfix/smtpd[28014]: connect from mail-ej1-f68.google.com[209.85.218.68]
Aug 27 01:25:27 nx1 postfix/smtpd[28014]: lost connection after STARTTLS from mail-ej1-f68.google.com[209.85.218.68]
Aug 27 01:25:27 nx1 postfix/cleanup[28017]: 0F5E36AAD3: message-id=20200827012527.0F5E36AAD3@mail.intrelligent.net
Aug 27 01:25:27 nx1 postfix/smtpd[28014]: disconnect from mail-ej1-f68.google.com[209.85.218.68]
Aug 27 01:25:27 nx1 postfix/qmgr[18880]: 0F5E36AAD3: from=double-bounce@mail.intrelligent.net, size=941, nrcpt=1 (queue active)
Aug 27 01:25:27 nx1 postfix/local[28019]: 0F5E36AAD3: to=root@intrelligent.net, orig_to=, relay=local, delay=0.29, delays=0.02/0.01/0/0.26, dsn=2.0.0, status=sent (delivered to command: /usr/bin/procmail-wrapper -o -a $DOMAIN -d $LOGNAME)
Aug 27 01:25:27 nx1 postfix/qmgr[18880]: 0F5E36AAD3: removed
Aug 27 01:26:05 nx1 dovecot: imap-login: Login: user=<admin-yaconplus.com>, method=PLAIN, rip=::1, lip=::1, mpid=28345, secured, session=
Aug 27 01:26:05 nx1 dovecot: imap(admin-yaconplus.com): Logged out in=90 out=944
Aug 27 01:27:05 nx1 dovecot: imap-login: Login: user=<admin-yaconplus.com>, method=PLAIN, rip=::1, lip=::1, mpid=28649, secured, session=
Aug 27 01:27:05 nx1 dovecot: imap(admin-yaconplus.com): Logged out in=90 out=944

This seems wrong. Was the mail intended for root? Probably indicates some kind of problem and the mail may have an error indicating what. If you’re really trying to send mail to root@ a domain hosted by Virtualmin, that’s definitely wrong.

Check root’s mailbox (Webmin has a Read Mail module, or you can use your favorite CLI mail client as root)…but probably should setup an alias for root that delivers to your normal user for the future. If there is no mail, something is wrong in your virtual maps file, though I can’t guess what. This just looks weird and I haven’t see this kind of behavior.

The double-bounce thing maybe indicates address verification failed (so, you sent mail to an address that postfix does not recognize, but I think you’d get a bounce in the sending client, maybe).

This is where I’m stuck. I didn’t even know there was a root mailbox… this is the reason I have deleted and re-installed this system numerous times…

Reinstallation is not a useful way to solve problems. It wastes your time and you don’t learn anything.

Unfortunately I haven’t been able to find a solution.

I’m also trying to set up a mail client and it won’t connect…

let me catch up with whats been posted overnight ;o)

I’ve sent an email to admin, here is my log from my server, 250 shows it was queued for delivery on your server

Aug 27 06:53:29 ns postfix/smtp[39479]: EEB3215A4015E: to=admin@yaconplus.com, relay=mail.yaconplus.com[68.183.138.249]:25, delay=12, delays=5.3/0.02/6.4/0.18, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 7D4066AADC)

check your maillog with this
grep brian@fife maillog

I don’t believe that my incoming message will show up in Postfix mail queue.
can you also go to Edit Users and for each user list go to Login to Usermin to see if any messages have arrived,

also can you tell us what are the list of aliases

edited to add your comment from above:
O.K. I’ve just installed VTiger again and it’s not working. I’m using as the Host, Webmin’s system host, nx2.intrelligent.net and as user, a user where it’s installed. admin@yaconplus.com. Any idea oh how to get this to work?. TY

it seems from this that you may be using intrelligent.net as the main hostname for your incoming and outgoing servers. if that is the case then you do not have SSL setup for Postfix and Dovecot.

in Networking is there a : FirewallD

vtiger is a red-herring. until you get your mail fully working and understood it doesn’t help by setting that up

some further questions.

  1. for your server what is the main domain on it
  2. for this main domain have you setup SSL cert for it and use the SSL for Webmin, Postfix, Dovecot
  3. this main domain is then your incoming and outgoing server name for the yaconplus.com domain

I see that intrelligent.net itself doesn’t have an SSL certificate

The certificate is only valid for the following names: admin.yaconplus.com, mail.yaconplus.com, webmail.yaconplus.com, www.yaconplus.com, yaconplus.com

Hi briand, I received your test mail. I’m wondering why it took so long… The actual domain intrelligent.net doesn’t have SSL. I tried installing and Webmin crashed.

ok I got your reply. I only sent it this morning, 3 or 4 hours ago
your email i ssetup as admin-yaconplus.com

instead of admin@yaconplus.com (refer to one of my earlier psost)
I have a feeling this may be an issue causing SASL errors

with regard to your SSL problem, logging in usign SSH may have helped you restart webmin