554 5.7.1 Relay Access Denied Error

[hopak]

Hello,
I installed proxmox mail gateway. I configure that for mailenable.
I Get this error when sending mails. Can anyone help?
MailEnable SmartHost Settings: https://prnt.sc/7uI8rNTCbEzd

212.115.xx.xx = MailEnable Server
172.25.1.32 = Proxmox Local IP Address
176.xx.xx.xx = Proxmox Public IP Address
Default Relay: 212.115.xx.xx
Relay Port: 25
Protocol: SMTP
Smarthost: none

Relay Domains: xxx.com, mail.xxx.com, mailgw01.xxx.com(pmg dns address)

Ports;
External: 25
Internal: 26

Networks;
172.25.1.0/24
176.xx.xx.xx
212.115.xx.xx

DKIM;
https://prnt.sc/1LumH2kavAO1

Message Delivery Failure: https://prnt.sc/-vzPCZHLE8s5
Proxmox Logs;
Oct 3 13:51:35 mailgw01 postfix/postscreen[38828]: CONNECT from [212.115.xx.xx]:55033 to [172.25.1.32]:25
Oct 3 13:51:35 mailgw01 postfix/postscreen[38828]: WHITELISTED [212.115.xx.xx]:55033
Oct 3 13:51:35 mailgw01 postfix/smtpd[38771]: connect from mail.xxx.com[212.115.xx.xx]
Oct 3 13:51:35 mailgw01 postfix/smtpd[38771]: NOQUEUE: reject: RCPT from mail.xxx.com[212.115.xx.xx]: 554 5.7.1 <hopak40@gmail.com>: Relay access denied; from=<hakki.opak@xxx.com> to=<hopak40@gmail.com> proto=E>Oct 3 13:51:35 mailgw01 postfix/smtpd[38771]: disconnect from mail.xxx.com[212.115.xx.xx] ehlo=1 mail=1 rcpt=0/1 quit=1 commands=3/4

 

[mira]

This is an outgoing mail, right? In this case you have to send to port 26 and allow the sender in the `Trusted Networks` [0].


[0] https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#_mail_proxy_configuration (4.7.8)

 

[hopak]

Yes i did this.
Whitelist: https://prnt.sc/iLNpZle8UYo-
Mailenable redirect outgoing mails to 176.xx.xx.xx port 26.
But i don't know how to allow sender in the trusted networks. I Added the mail server's ip address here.

 

[mira]

Oct 3 13:51:35 mailgw01 postfix/postscreen[38828]: CONNECT from [212.115.xx.xx]:55033 to [172.25.1.32]:25
This IP that connected here, has to be allowed in the `Trusted Networks` if it is a trusted mail server. Simply add its IP/32 to the list of networks.

And make sure that the mail server connects to port 26 on your PMG.

 

[hopak]

Its allowed In Trusted networks

Oct 3 13:51:35 mailgw01 postfix/postscreen[38828]: CONNECT from [212.115.xx.xx]:55033 to [172.25.1.32]:25
This IP that connected here, has to be allowed in the `Trusted Networks` if it is a trusted mail server. Simply add its IP/32 to the list of networks.

And make sure that the mail server connects to port 26 on your PMG.