Search results

Show the email in raw format. The what object rule work for me. Delivered-To: recipient@mydomain.com Return-Path: sender@gmail.com Received-SPF: pass (gmail.com ... _spf.google.com: Sender is authorized to use 'sender@gmail.com' in 'mfrom' identity (mechanism 'include:_netblocks.google.com'...

Like this

this will do

Have you setup a mail filter rule based on your what object?

Configure spamassassin custom configuration. https://cwiki.apache.org/confluence/display/SPAMASSASSIN/writingrules https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#_custom_spamassassin_configuration

have you try ddns?

Apply your custom mail.cf using PMG custom template. https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#pmgconfig_template_engine

Show your relaying settings.

Do you have MX record pointing to your zimbra for incoming email? If yes, you need to replace it with PMG. If you use PMG as outgoing server as well, need to update SPF record too.

Any error log from mail.log?

Have you setup MX record to point all incoming email to PMG instead of zimbra?

@Spirog, if you confirm your PVE is no longer require iptables then it is ok to remove it. I would recommend test out iptables first with fail2ban. If iptables work then u can remove nftables since u just install it recently.

@Spirog , you can remove iptables using command apt-get remove iptables. But pls make sure there is no others application using iptables before removing it. Btw, as mention before fail2ban work with iptables by default. So unless you are very sure to remove iptables, I would recommend try to...

pls run apt search iptables | grep installed in terminal and provide the output.

@Spirog , follow step 6 to enable recidive filter, customize it base on your requirement. Below are default recidive setting from /etc/fail2ban/jail.conf. It will ban recurrent IP hit with in 1 day for 1 week. [recidive] logpath = /var/log/fail2ban.log banaction = %(banaction_allports)s...

@Spirog if your PVE use iptables instead of nftables, just ignore step 2 as fail2ban use iptables by default. Configure step 4 to use pvedaemon instead of pmgdaemon. Try wrongly log in your pve web and run command tail -f /var/log/fail2ban.log to view fail2ban in action or error.

@Spirog, follow https://pve.proxmox.com/wiki/Fail2ban to setup for PVE. Double check PVE is using iptables or nftables and adjust the filter accordingly.

Have you provide the full log? pmg-smtp-filter should show the mail filter rule which have process the mail delivery as example below. Dec 9 13:17:00 mail pmg-smtp-filter[31674]: 3C148E61B2481949054: accept mail to <cartera@mydomain.com> (E90AD3C14AD) (rule: default-accept) Dec 9 13:17:00 mail...

Try add Accept action to your 84 rule.

show your who object rules and the syslog.