Not receiving emails Virtualmin on Ubuntu 20 with Postfix

TheMGuy · December 21, 2020, 2:26pm

Hi all,

I have a very strange problem on which I can’t find a solution by my own. For a few days I have decided to use spf, dmarc and dkim for emails on my virtualmin. I have everything configured, but now I can’t receive emails and I can’t find the problem. The logs in virtualmin are all clean, port 25 is ok. The only clue that I have is from Gmail when I tried to send an email:

Delivery incomplete

The recipient server did not accept our requests to connect. Learn more at https://support.google.com/mail/answer/7720 [mail.domain.com. IPV6: timed out] [mail.domain.com. IPV4: unable to read banner]

I’ve Checked that google link but I did not find something useful.

If anyone have any idea how to properly configure that postfix(spif, dkim, dmarc) for a VPS on Ubuntu 20 with virtualmin(I have 2 IPs and more websites on an IP) please post it because I think I’m going crazy with those email configs.

Thank you.

calport · December 21, 2020, 4:37pm

Without help of log entries it becomes difficult to diagnose a problem. One could query the DNS records of the domain to begin with but you have chosen to obfuscate the domain name in question for reasons best known to you. We need more info to be able to suggest a way to resolve the issue of your server not being able to receive mail.

TheMGuy · December 21, 2020, 4:47pm

Hi there,
First, thank you for the reply. I did not put the domain to not be considered as spam, but if it’s ok, I will gladly do it. The domain in cause is: theblackscreenchannel.com.
The mail error log is empty. This is what I have in my mail.log:

Dec 21 17:38:49 vmd63883 postfix/postfix-script[153497]: warning: /var/spool/postfix/etc/resolv.conf and /etc/resolv.conf differ
Dec 21 17:38:49 vmd63883 dovecot: imap-login: Login: user=<shop-theblackscreenchannel.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=153524, secured, session=<caO8F/y2WOZ/AAAB>
Dec 21 17:38:49 vmd63883 dovecot: imap(shop-theblackscreenchannel.com)<153524><caO8F/y2WOZ/AAAB>: Logged out in=90 out=942 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
Dec 21 17:38:49 vmd63883 postfix/smtpd[137202]: disconnect from unknown[212.70.149.54] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:38:50 vmd63883 postfix/smtpd[149826]: warning: unknown[45.142.120.11]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:38:50 vmd63883 postfix/smtpd[149826]: disconnect from unknown[45.142.120.11] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:38:54 vmd63883 postfix/smtpd[149871]: connect from unknown[45.142.120.34]
Dec 21 17:38:59 vmd63883 postfix/smtpd[127099]: connect from unknown[45.142.120.138]
Dec 21 17:39:00 vmd63883 postfix/smtpd[149871]: warning: unknown[45.142.120.34]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:39:01 vmd63883 postfix/smtpd[149871]: disconnect from unknown[45.142.120.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:39:03 vmd63883 postfix/postfix-script[153815]: warning: symlink leaves directory: /etc/postfix/./makedefs.out
Dec 21 17:39:03 vmd63883 postfix/postfix-script[153984]: warning: /var/spool/postfix/etc/hosts and /etc/hosts differ
Dec 21 17:39:03 vmd63883 postfix/postfix-script[153989]: warning: /var/spool/postfix/etc/resolv.conf and /etc/resolv.conf differ
Dec 21 17:39:05 vmd63883 postfix/smtpd[127128]: connect from unknown[212.70.149.54]
Dec 21 17:39:06 vmd63883 postfix/smtpd[107552]: connect from unknown[45.142.120.82]
Dec 21 17:39:06 vmd63883 postfix/smtpd[127099]: warning: unknown[45.142.120.138]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:39:07 vmd63883 postfix/smtpd[127099]: disconnect from unknown[45.142.120.138] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:39:08 vmd63883 postfix/postfix-script[154738]: warning: symlink leaves directory: /etc/postfix/./makedefs.out
Dec 21 17:39:08 vmd63883 postfix/postfix-script[154893]: warning: /var/spool/postfix/etc/hosts and /etc/hosts differ
Dec 21 17:39:08 vmd63883 postfix/postfix-script[154897]: warning: /var/spool/postfix/etc/resolv.conf and /etc/resolv.conf differ
Dec 21 17:39:12 vmd63883 postfix/smtpd[107552]: warning: unknown[45.142.120.82]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:39:12 vmd63883 postfix/smtpd[127128]: warning: unknown[212.70.149.54]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:39:12 vmd63883 postfix/smtpd[107552]: disconnect from unknown[45.142.120.82] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:39:12 vmd63883 postfix/smtpd[127128]: disconnect from unknown[212.70.149.54] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:39:15 vmd63883 postfix/smtpd[107353]: connect from unknown[45.142.120.209]
Dec 21 17:39:18 vmd63883 postfix/smtpd[107353]: warning: unknown[45.142.120.209]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:39:18 vmd63883 postfix/smtpd[107353]: disconnect from unknown[45.142.120.209] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:39:19 vmd63883 postfix/smtpd[137202]: connect from unknown[45.142.120.20]
Dec 21 17:39:21 vmd63883 postfix/smtpd[137202]: warning: unknown[45.142.120.20]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:39:22 vmd63883 postfix/smtpd[137202]: disconnect from unknown[45.142.120.20] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:39:23 vmd63883 postfix/smtpd[149871]: connect from unknown[45.142.120.59]
Dec 21 17:39:24 vmd63883 postfix/smtpd[149871]: warning: unknown[45.142.120.59]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:39:24 vmd63883 postfix/smtpd[149871]: disconnect from unknown[45.142.120.59] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:39:27 vmd63883 postfix/smtpd[149826]: connect from unknown[45.142.120.57]
Dec 21 17:39:28 vmd63883 postfix/smtpd[127099]: connect from unknown[45.142.120.63]
Dec 21 17:39:30 vmd63883 postfix/smtpd[107552]: connect from unknown[212.70.149.54]
Dec 21 17:39:31 vmd63883 postfix/smtpd[127099]: warning: unknown[45.142.120.63]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:39:31 vmd63883 postfix/smtpd[127099]: disconnect from unknown[45.142.120.63] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:39:35 vmd63883 postfix/smtpd[149826]: warning: unknown[45.142.120.57]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:39:35 vmd63883 postfix/smtpd[149826]: disconnect from unknown[45.142.120.57] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:39:37 vmd63883 postfix/smtpd[107552]: warning: unknown[212.70.149.54]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:39:37 vmd63883 postfix/smtpd[107552]: disconnect from unknown[212.70.149.54] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:39:40 vmd63883 postfix/smtpd[127128]: connect from unknown[45.142.120.147]
Dec 21 17:39:43 vmd63883 postfix/smtpd[127128]: warning: unknown[45.142.120.147]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:39:43 vmd63883 postfix/smtpd[127128]: disconnect from unknown[45.142.120.147] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:39:50 vmd63883 dovecot: imap-login: Login: user=<shop-theblackscreenchannel.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=155559, secured, session=<rQBTG/y2cuZ/AAAB>
Dec 21 17:39:50 vmd63883 dovecot: imap(shop-theblackscreenchannel.com)<155559><rQBTG/y2cuZ/AAAB>: Logged out in=90 out=942 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
Dec 21 17:39:54 vmd63883 postfix/smtpd[107353]: connect from unknown[212.70.149.54]
Dec 21 17:40:01 vmd63883 postfix/smtpd[107353]: warning: unknown[212.70.149.54]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:40:02 vmd63883 postfix/smtpd[107353]: disconnect from unknown[212.70.149.54] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:40:10 vmd63883 postfix/smtpd[137202]: connect from unknown[45.142.120.65]
Dec 21 17:40:13 vmd63883 postfix/smtpd[137202]: warning: unknown[45.142.120.65]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:40:13 vmd63883 postfix/smtpd[137202]: disconnect from unknown[45.142.120.65] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:40:17 vmd63883 postfix/smtpd[149871]: connect from unknown[45.142.120.87]
Dec 21 17:40:23 vmd63883 postfix/smtpd[127099]: connect from unknown[45.142.120.215]
Dec 21 17:40:24 vmd63883 postfix/smtpd[149871]: warning: unknown[45.142.120.87]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:40:25 vmd63883 postfix/smtpd[149871]: disconnect from unknown[45.142.120.87] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:40:26 vmd63883 postfix/smtpd[127099]: warning: unknown[45.142.120.215]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:40:26 vmd63883 postfix/smtpd[127099]: disconnect from unknown[45.142.120.215] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:40:29 vmd63883 postfix/smtpd[149826]: connect from unknown[45.142.120.62]
Dec 21 17:40:36 vmd63883 postfix/smtpd[149826]: warning: unknown[45.142.120.62]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:40:37 vmd63883 postfix/smtpd[149826]: disconnect from unknown[45.142.120.62] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:40:38 vmd63883 postfix/smtpd[107552]: connect from unknown[45.142.120.60]
Dec 21 17:40:40 vmd63883 postfix/smtpd[107552]: warning: unknown[45.142.120.60]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:40:41 vmd63883 postfix/smtpd[107552]: disconnect from unknown[45.142.120.60] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:40:49 vmd63883 dovecot: imap-login: Login: user=<shop-theblackscreenchannel.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=155929, secured, session=<4jPlHvy2guZ/AAAB>
Dec 21 17:40:49 vmd63883 dovecot: imap(shop-theblackscreenchannel.com)<155929><4jPlHvy2guZ/AAAB>: Logged out in=90 out=942 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
Dec 21 17:41:24 vmd63883 postfix/smtpd[127128]: connect from unknown[45.142.120.34]
Dec 21 17:41:26 vmd63883 postfix/smtpd[107353]: connect from unknown[45.142.120.138]
Dec 21 17:41:28 vmd63883 postfix/smtpd[107353]: warning: unknown[45.142.120.138]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:41:28 vmd63883 postfix/smtpd[107353]: disconnect from unknown[45.142.120.138] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:41:30 vmd63883 postfix/smtpd[127128]: warning: unknown[45.142.120.34]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:41:30 vmd63883 postfix/smtpd[127128]: disconnect from unknown[45.142.120.34] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:41:34 vmd63883 postfix/smtpd[137202]: connect from unknown[45.142.120.147]
Dec 21 17:41:35 vmd63883 postfix/smtpd[149871]: connect from unknown[45.142.120.11]
Dec 21 17:41:38 vmd63883 postfix/smtpd[149871]: warning: unknown[45.142.120.11]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:41:38 vmd63883 postfix/smtpd[149871]: disconnect from unknown[45.142.120.11] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:41:41 vmd63883 postfix/smtpd[137202]: warning: unknown[45.142.120.147]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:41:42 vmd63883 postfix/smtpd[137202]: disconnect from unknown[45.142.120.147] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:41:49 vmd63883 dovecot: imap-login: Login: user=<shop-theblackscreenchannel.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=156333, secured, session=<9654Ivy2qOZ/AAAB>
Dec 21 17:41:49 vmd63883 dovecot: imap(shop-theblackscreenchannel.com)<156333><9654Ivy2qOZ/AAAB>: Logged out in=90 out=942 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
Dec 21 17:41:54 vmd63883 postfix/smtpd[127099]: connect from unknown[45.142.120.82]
Dec 21 17:41:54 vmd63883 postfix/anvil[106354]: statistics: max connection rate 7/60s for (161.97.132.177:smtp:45.142.120.38) at Dec 21 17:33:38
Dec 21 17:41:54 vmd63883 postfix/anvil[106354]: statistics: max connection count 3 for (161.97.132.177:smtp:45.142.120.38) at Dec 21 17:33:10
Dec 21 17:41:54 vmd63883 postfix/anvil[106354]: statistics: max cache size 15 at Dec 21 17:34:34
Dec 21 17:41:56 vmd63883 postfix/smtpd[127099]: warning: unknown[45.142.120.82]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:41:56 vmd63883 postfix/smtpd[127099]: disconnect from unknown[45.142.120.82] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:41:56 vmd63883 dovecot: imap-login: Login: user=<shop-theblackscreenchannel.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=156377, secured, session=<E0viIvy2ruZ/AAAB>
Dec 21 17:41:56 vmd63883 dovecot: imap(shop-theblackscreenchannel.com)<156377><E0viIvy2ruZ/AAAB>: Logged out in=44 out=633 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
Dec 21 17:41:57 vmd63883 dovecot: imap-login: Login: user=<shop-theblackscreenchannel.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=156381, secured, session=<XJHrIvy2tOZ/AAAB>
Dec 21 17:41:57 vmd63883 dovecot: imap(shop-theblackscreenchannel.com)<156381><XJHrIvy2tOZ/AAAB>: Logged out in=292 out=2030 deleted=0 expunged=0 trashed=0 hdr_count=2 hdr_bytes=543 body_count=0 body_bytes=0
Dec 21 17:41:57 vmd63883 dovecot: imap-login: Login: user=<shop-theblackscreenchannel.com>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=156382, secured, session=<habrIvy2tuZ/AAAB>
Dec 21 17:41:57 vmd63883 dovecot: imap(shop-theblackscreenchannel.com)<156382><habrIvy2tuZ/AAAB>: Logged out in=120 out=807 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0
Dec 21 17:42:03 vmd63883 postfix/smtpd[149826]: connect from unknown[45.142.120.20]
Dec 21 17:42:05 vmd63883 postfix/smtpd[149826]: warning: unknown[45.142.120.20]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:42:05 vmd63883 postfix/smtpd[149826]: disconnect from unknown[45.142.120.20] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4
Dec 21 17:42:13 vmd63883 postfix/smtpd[107552]: connect from unknown[45.142.120.62]
Dec 21 17:42:15 vmd63883 postfix/smtpd[107353]: connect from unknown[45.142.120.57]
Dec 21 17:42:15 vmd63883 postfix/smtpd[107552]: warning: unknown[45.142.120.62]: SASL LOGIN authentication failed: authentication failure
Dec 21 17:42:16 vmd63883 postfix/smtpd[107552]: disconnect from unknown[45.142.120.62] ehlo=1 auth=0/1 rset=1 quit=1 commands=3/4

I can login in the roundcube, send emails, also tried smtp directly from the website and it works, but receiving…

calport · December 21, 2020, 5:40pm

You are most welcome! Virtualmin has a community of helpful and knowledgeable users who assist each other whenever they are able to do so. Feel free to post here when you need help.

I had a quick look at the DNS records. IPv4 address 161.97.132.176 is working normally but the IPv6 address 2a02:c206:3006:3883:0:0:0:1 is not. You should disable it in the DNS settings of the Contabo control panel till you get it to work normally. You will see weird behavior till you do.

There is also the matter of this warning in the logs:
symlink leaves directory: /etc/postfix/./makedefs.out
/var/spool/postfix/etc/hosts and /etc/hosts differ

I can confirm that your MX is configured correctly, so it might be just the matter of the IPv6 records that is preventing you from receiving email.

TheMGuy · December 21, 2020, 11:13pm

Hi again,
Thank you very much for taking the time to look into this. I have removed the IPv6 from the server and still get from Gmail an error:

[mail.theblackscreenchannel.com. 161.97.132.176: unable to read banner]

Maybe has something to do with the SMTP greeting banner? If so, right now has the following configuration:
$myhostname ESMTP $mail_name (Ubuntu)

As an update I’ve checked the DKIM configuration(selector is: 202011) on https://dkimcore.org/c/keycheck and this is what I got:

This doesn’t seem to be a valid RSA public key: RSA.xs:178: OpenSSL error: bad base64 decode at blib/lib/Crypt/OpenSSL/RSA.pm (autosplit into blib/lib/auto/Crypt/OpenSSL/RSA/new_public_key.al) line 91.

Thank you again.

RJM_Web_Design · December 22, 2020, 12:22am

Yep. There’s a mismatch between the rDNS entry and the banner name. rDNS for 161.97.132.176 is

vmd63883.contaboserver.net

That’s also how the mail server identified itself when I tried to connect by telnet to mail.theblackscreenchannel.com. I didn’t proceed with trying to send mail.

Is there any way to have your host set rDNS for the IP to your domain?

Richard

TheMGuy · December 22, 2020, 1:10am

Hi there,

I can change the rdns myself, but I will still have the same problem when I will add another domain on the same IP address. Is any way to solve this? Maybe I can leave in the banner just $mail_name?
Thanks.

RJM_Web_Design · December 22, 2020, 1:42am

I’m no Postfix expert and know even less about Ubuntu. But…

I’m pretty sure that Postfix will take care of the additional domain issue if you’re running it with SNI enabled and have the domain certificates for each domain enabled for Postfix in Virtualmin > Server Configuration > SSL certificate > Service Certificates. Attempts to connect to mail.somedomain.com will be responded to by the hostname, the banner will match, and life will be good.

If you’re not using SNI, then it wouldn’t matter because all of the domains would use the hostname as their mail server, which is how many people prefer to do it anyway.

Richard

EDIT: If you don’t have the option to enable the cert for Postfix in Virtualmin > Server Configuration > SSL certificate > Service Certificates, then you’re running an older version of Postfix that doesn’t support SNI.

TheMGuy · December 22, 2020, 9:52am

Hi again,
Thanks for the reply. The SSL was the first configuration that I made and SNI is enabled that’s why is very confusing for me. I will try now to change the rdns and try to add another website to see if I will have the same problem.

Thank you

EDIT: didn’t work. Still have the same problems. What is very frustrating is that I don’t have any errors in logs. It’s like a ghost. The only thing that I can get is that the DKIM is invalid and again don’t know why :). I am so close to trow something out of the window :)).

TheMGuy · December 23, 2020, 5:52pm

Hi there,
Can you please tell me what shoud I change in that greeting banner? On that VPS I have 2 IPs and one of them will be shared(I will host multiple domains on it). I really tried everything. I also changed the rDNS and still the same problem. I also made backup of the home directory and database, deleted the server, created the virtual server again and recovered only the home directory and database and the problem is still present. I really don’t know what to do anymore.

Thank you and Happy Holidays.

paulocoghi · December 25, 2020, 2:50pm

@TheMGuy

Probably, when you enabled DKIM, you probably left enabled the option “Reject incoming email with invalid DKIM signature?”

Check it again in Virtualmin -> Email Settings -> DomainKeys Identified Mail -> Reject incoming email with invalid DKIM signature? and set it to “No”.

Now, do another test and check if your server can receive emails normally.

TheMGuy · December 28, 2020, 2:49pm

Hi,
Thank you very much for your reply. Indeed, it was set to yes. I have set it to no, but still can’t receive emails. I keep receiving from Gmail “unable to read banner”. I really don’t know what is happening here.

paulocoghi · December 28, 2020, 3:06pm

Please, send and email using an account on this domain to check-auth@verifier.port25.com and post here the result sent back (if the response arrives).

If it doesn’t arrive, regarding the problem about invalid RSA public key, in the same DKIM configuration page, there is an option to regenerate keys. Proceed with the regeneration and do the check again, with check-auth@verifier.port25.com

Important: when you regenerate the DKIM keys, only proceed with the check after the DNS is propagated, that is, only when the TXT records regarding the DKIM keys are updated when checking here: https://dnschecker.org/

TheMGuy · December 28, 2020, 4:02pm

Hi,
Nothing arrived back and when I try to regenerate the keys it doesn’t regenerate. The process is going all the way, but when I checked it I had the same key.

paulocoghi · December 28, 2020, 5:05pm

What’s is your Ubuntu version (16.04, 18.04, 20.04)?
And Virtualmin version?
When you access your server through SSH, does ping resolve to an IP address? For example:
ping -c 4 google.com
What is the output of:
netstat -natpu | grep opendkim
Whats is the output of:
hostname -f
In /etc/postfix/main.cf, what are the values of smtpd_banner and myhostname?

In case command #4 doesn’t return any output and your Ubuntu is 18.04 or 20.04, your DKIM service maybe not working. To fix it:

/lib/opendkim/opendkim.service.generate
systemctl daemon-reload
service opendkim restart

(one command per line)

After applying the fix, run the command #4 again and proceed with new tests.

TheMGuy · December 28, 2020, 5:18pm

Ubuntu 20.04
Virtualmin 6.14

— google.com ping statistics —
4 packets transmitted, 4 received, 0% packet loss, time 3005ms
rtt min/avg/max/mdev = 9.050/9.166/9.362/0.117 ms

tcp 0 0 127.0.0.1:8891 0.0.0.0:* LISTEN 1031965/opendkim
tcp 0 0 127.0.0.1:8891 127.0.0.1:34190 ESTABLISHED 1031965/opendkim
vmd63883.contaboserver.net

smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)

myhostname = vmd63883.contaboserver.net

paulocoghi · December 28, 2020, 5:20pm

Everything seems ok

TheMGuy · December 28, 2020, 5:26pm

That’s my problem. Everything seems to be ok and yet I don’t receive emails. I am trying for almost 2 weeks now to solve this and I really can’t find what’s wrong.

paulocoghi · December 28, 2020, 5:30pm

Please, check your MX records, again using dnschecker.org and choosing the MX record type for your domain. They may be wrong.

Also, run the MX Toolbox diagnostic for your domain, here:

On both cases you do not need to post anything here. Those results may help you find the problem.

TheMGuy · December 28, 2020, 5:39pm

With dnschecker everything is green.

with MX tools I have the following problems:

    SMTP Banner Check	    Reverse DNS does not match SMTP Banner
SMTP TLS	Warning - Does not support TLS.
SMTP Transaction Time	15.190 seconds - Not good! on Transaction Time
SMTP Reverse DNS Mismatch	OK - 161.97.132.176 resolves to vmd63883.contaboserver.net	
SMTP Valid Hostname	OK - Reverse DNS is a valid Hostname	
SMTP Connection Time	0 seconds - Good on Connection time	
SMTP Open Relay	OK - Not an open relay.

Very very strange about that “Reverse DNS does not match SMTP Banner” because I have also checked https://dkimvalidator.com/ and I have the following results:

Received: from vmd63883.contaboserver.net (vmd63883.contaboserver.net [161.97.132.176])
by relay-2.us-west-2.relay-prod (Postfix) with ESMTPS id 18CCA2013A
for GVGK2TN1ye4Q36@dkimvalidator.com; Mon, 28 Dec 2020 16:17:21 +0000 (UTC)
Received: from theblackscreenchannel.com (localhost [127.0.0.1])
by vmd63883.contaboserver.net (Postfix) with ESMTPA id A00E0540282
for GVGK2TN1ye4Q36@dkimvalidator.com; Mon, 28 Dec 2020 17:17:19 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;
d=theblackscreenchannel.com; s=202011; t=1609172239;
bh=nMTF1qnIpIBXMQopAknts9+OnvYe9005+j1suP/Os7Y=;
h=Date:From:To:Subject:From;
b=elsE7bvH87sQ7doN/nb+JcbM5RpCUA8EHjLYE13yGd4GGu3fuAWuDgQaB7EY/hglB
RqGfdGZCncF8PC6Q81NT2nNwRohsDpG2hgp2XQHv97lX7SGbPMBluRT2v6yoLn8RoH
MVXszQg6j+fyzRnbbWS8GQABdWf5eH+VaJEd6gUAbJ12diri+Xc6fdavoFMTwdS/yI
fh0NoZQe04qWPEs8q78Qykm213HPpN2oK+Dq36RP9YTEM2pFy4b7+IlW9ZUmq5Zc5h
NpJo6GmfPK6Xb5mEuZiXfn+yHB01jbuuVxaVH1BNslFdIoJ+QH3fR90giyItwgGiEE
8Oa70Cl9ExGGw==
MIME-Version: 1.0
Date: Mon, 28 Dec 2020 17:17:19 +0100
From: “info-theblackscreenchannel.com” info@theblackscreenchannel.com
To: GVGK2TN1ye4Q36@dkimvalidator.com
Subject: tetst
User-Agent: Roundcube Webmail/1.4.9
Message-ID: b76db5ba4735cbcabd70c5bed8808aae@theblackscreenchannel.com
X-Sender: info@theblackscreenchannel.com
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit

tests

DKIM Information:
DKIM Signature

Message contains this DKIM Signature:
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;
d=theblackscreenchannel.com; s=202011; t=1609172239;
bh=nMTF1qnIpIBXMQopAknts9+OnvYe9005+j1suP/Os7Y=;
h=Date:From:To:Subject:From;
b=elsE7bvH87sQ7doN/nb+JcbM5RpCUA8EHjLYE13yGd4GGu3fuAWuDgQaB7EY/hglB
RqGfdGZCncF8PC6Q81NT2nNwRohsDpG2hgp2XQHv97lX7SGbPMBluRT2v6yoLn8RoH
MVXszQg6j+fyzRnbbWS8GQABdWf5eH+VaJEd6gUAbJ12diri+Xc6fdavoFMTwdS/yI
fh0NoZQe04qWPEs8q78Qykm213HPpN2oK+Dq36RP9YTEM2pFy4b7+IlW9ZUmq5Zc5h
NpJo6GmfPK6Xb5mEuZiXfn+yHB01jbuuVxaVH1BNslFdIoJ+QH3fR90giyItwgGiEE
8Oa70Cl9ExGGw==

Signature Information:
v= Version: 1
a= Algorithm: rsa-sha256
c= Method: simple/simple
d= Domain: theblackscreenchannel.com
s= Selector: 202011
q= Protocol:
bh= nMTF1qnIpIBXMQopAknts9+OnvYe9005+j1suP/Os7Y=
h= Signed Headers: Date:From:To:Subject:From
b= Data: elsE7bvH87sQ7doN/nb+JcbM5RpCUA8EHjLYE13yGd4GGu3fuAWuDgQaB7EY/hglB
RqGfdGZCncF8PC6Q81NT2nNwRohsDpG2hgp2XQHv97lX7SGbPMBluRT2v6yoLn8RoH
MVXszQg6j+fyzRnbbWS8GQABdWf5eH+VaJEd6gUAbJ12diri+Xc6fdavoFMTwdS/yI
fh0NoZQe04qWPEs8q78Qykm213HPpN2oK+Dq36RP9YTEM2pFy4b7+IlW9ZUmq5Zc5h
NpJo6GmfPK6Xb5mEuZiXfn+yHB01jbuuVxaVH1BNslFdIoJ+QH3fR90giyItwgGiEE
8Oa70Cl9ExGGw==
Public Key DNS Lookup

Building DNS Query for 202011._domainkey.theblackscreenchannel.com
Retrieved this publickey from DNS: v=DKIM1; k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv001OvTrqWVExGEoKXnk714hodaHCxjObF6RBvBnN5wglFmbxbpeNjgBmVeZkgdIM+kfeJ45WhyA3KTcpQIpd6dirgsEyDmx4NrKlg7Ob7opi6n0I9/giNFBxIP1h1WQAQzJMKNkTqfFH7Kd0urk67w8jQACCUyrLb3FBmhgwuuTVrLQ5ujMzjO2tfU3Pbrg561oi9orLL8/HOWUqfGxqeKZVy9pjBvcj3b3gw+qbwMNOxj/3tNpejN1g1OVfus5jh80ASbBGdwD1DqQkiXdMEXpRySTlHPg7IvBK8J5Q+1EV9+JM3PpenjvS/ntIuSuZOHwyyBSeDPUFjp5r9RXQIDAQAB
Validating Signature

result = pass
Details:

SPF Information:

Using this information that I obtained from the headers

Helo Address = vmd63883.contaboserver.net From Address = info@theblackscreenchannel.com From IP = 161.97.132.176

SPF Record Lookup

Looking up TXT SPF record for theblackscreenchannel.com Found the following namesevers for theblackscreenchannel.com: ns3.contabo.net ns1.contabo.net ns2.contabo.net Retrieved this SPF Record: zone updated 20201228 (TTL = 599) using authoritative server (ns3.contabo.net) directly for SPF Check

Result: pass (Mechanism ‘mx’ matched)

Result code: pass Local Explanation: theblackscreenchannel.com: 161.97.132.176 is authorized to use ‘info@theblackscreenchannel.com’ in ‘mfrom’ identity (mechanism ‘mx’ matched) spf_header = Received-SPF: pass (theblackscreenchannel.com: 161.97.132.176 is authorized to use ‘info@theblackscreenchannel.com’ in ‘mfrom’ identity (mechanism ‘mx’ matched)) receiver=dkimvalidator.com; identity=mailfrom; envelope-from="info@theblackscreenchannel.com"; helo=vmd63883.contaboserver.net; client-ip=161.97.132.176

SpamAssassin Score: 0.203
Message is NOT marked as spam
Points breakdown:
0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
0.0 TVD_SPACE_RATIO No description available.
0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid
0.0 BODY_SINGLE_WORD Message body is only one word (no spaces)