Outbound email not working after migration

Ubuntu 20.04
Webmin: 1.984
Virtualmin: 6.17-3

I migrated from a bare metal server in my office to an IONOS dedicated server, and since, all outbound emails are failing to land from email clients, but outbound from the usermin webmail does go out.

nmap / netstat for reference
Relevant info - JustPaste.it

I checked, and the credentials didn’t change during the migration according to the users area.

I checked the DNS @ godaddy for an MX record, which I have pointed to the servers hostname, not the sites.

IONOS insists they aren’t blocking any ports.

I’m at a loss, please help, the office is very angry.

SOLUTION NOTE: When Ubuntu tried to add the opendkim user, for whatever reason the groups file was locked. Rebooting, then reinstalling dkim brought the server back up in short order.

@cheatcode,

What does your mail log say after you send?

I get a “Relay access denied” error.

Jan 12 16:29:24 837F7BF postfix/smtpd[1616274]: NOQUEUE: reject: RCPT from unknown[IP REDACTED]: 554 5.7.1 : Relay access denied; from= to= proto=ESMTP helo=<smtpclient.apple>

@cheatcode,

Okay, so that points to something misconfigured somewhere.

It’s possible since you switched physical machines and IP addresses and such, a setting or two requires adjusting.

My nightmares start with this sentence lol.

1 Like

I can confirm, my physical IP did change, however, it appears in virtualmin that it sees the correct IP. Where should I look to find whats misconfigured friend?

@cheatcode,

Don’t fret, it’s often easier to address then you think. Seen my share of issues with SMTP.

If you’d be open to it, I’d be happy to offer a screen sharing session to identify and resolve this for you.

*** Hospital life sucks, I could use a little distraction ***

I read your post, I hope it all turns out well. I would be very open to that! What app would you like to use? Teamviewer? Anydesk? Anydesk is kinda janky on ubuntu rn

If IP has changed. Do you not need to re issue the SPF, DKIM, DMARC etc. + make sure main host IP is included in the relay. As Usermin works the core services are working fine. Apple will always reject if SPF etc not setup correctly. I would ensure new IP address is listed and not old one.

I removed DKIM and SPF when I migrated from godaddy dns, thinking I could simply readd them after I got this going again. Was that a mistake? Also, I have the MX record pointing to the servers hostname, not the sites hostname, is that correct?

Whether your DNS is hosted on the server or externally. You will need those entries, can be added back. Should be fine to use the host name. Normally when you create a new site the mail.domain.com is just an alias of MX to hostname/ main site. Try to validate your entries using an online tool like DNS Lookup Tool - DNS Tools - MxToolbox not sure if you re generated certificate TLS, but make sure yours is valid.

Thanks so much for your help so far. The SPF record has the correct IP. I can’t get DKIM to activate, keeps saying to specify socket. Trying to lookup how to get DKIM working now. I dont understand why it needs a socket specified, it didnt when setup before.

When trying to bring OpenDKIM online, I spot this error : Jan 13 13:14:01 837F7BF opendkim[1871045]: opendkim: /etc/opendkim.conf: opendkim: no such user

Im gonna guess an important user that existed on the old server doesnt exist on the new server, gonna go digging with nano.

EDIT:

Userid userid

default (none)

Change to user “userid” before starting normal operation? May include

a group ID as well, separated from the userid by a colon.

UserID opendkim

Theres no user called opendkim on either server, now im super confused.

Ran a log to see whats happening with opendkim when it tries to start, using this command:
sudo journalctl -f -u opendkim.service

Jan 13 14:25:44 837F7BF systemd[1]: Starting OpenDKIM DomainKeys Identified Mail (DKIM) Milter…
Jan 13 14:25:44 837F7BF opendkim[1885879]: opendkim: /etc/opendkim.conf: opendkim: no such user
Jan 13 14:25:44 837F7BF systemd[1]: opendkim.service: Control process exited, code=exited, status=78/CONFIG
Jan 13 14:25:44 837F7BF systemd[1]: opendkim.service: Failed with result ‘exit-code’.

Code 78 on google only gets me info on how to fix a socket declaration, not what to do for an unknown user.

Any idea where I’m messing this up? I’m sure its my fault, it always is XD

Has tpnsolutions got in touch yet, I thought he said he would do some screen share. Although I’m not sure how easy it will be for him to do so where he is at.

Did you install Virtualmin/webmin as per guide, did you do anything extra or in addition to that. By default you would normally enable the email settings using the Virtualmin/webmin panel. Did you remove anything manually or restored/overwritten existing settings?

See if this link helps as a guide SPF, DKIM, and DMARC with Postfix and Ubuntu 20.04 | GeoffStratton.com

This topic was automatically closed 8 days after the last reply. New replies are no longer allowed.