I have a cluster of two nodes, with which I am having a problem for certain IPs from which I need to receive emails, one of the nodes always rejects emails from those IPs with an error message, while the master node accepts emails without issue.
Even adding these IPs to the whitelist the error still occurs.
I had the problem in version 6 and I did a clean installation of version 7 restoring the backup, but the problem continues
I relate the records of two tests carried out both to the main node and to the secondary node, with the IP outside the whitelist and then including it in the whitelist
Telnet main node
Telnet secondary node
Telnet main node with whitelisted IP
Telnet secondary node with whitelisted IP
The postfix configuration files were compared and no difference is evident between the nodes, the postscreen cache was also cleared, but the problem continues.
Thank you for the help you could provide me
Even adding these IPs to the whitelist the error still occurs.
I had the problem in version 6 and I did a clean installation of version 7 restoring the backup, but the problem continues
I relate the records of two tests carried out both to the main node and to the secondary node, with the IP outside the whitelist and then including it in the whitelist
Telnet main node
Code:
telnet pmg.domain.com 25
Trying x.x.x.x...
Connected to pmg.domain.com.
Escape character is '^]'.
220-pmg.domain.com ESMTP Company
220 pmg.domain.com ESMTP Company
EHLO pve1611.corp.company2.com
250-pmg.domain.com
250-SIZE 52428800
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250-SMTPUTF8
250 CHUNKING
MAIL FROM:<root@pve1611.corp.company2.com>
250 2.1.0 Ok
Bash:
Jan 11 13:25:23 pmg postfix/postscreen[1278508]: CONNECT from [x.x.x.x]:60194 to [x.x.x.x]:25
Jan 11 13:25:23 pmg postfix/dnsblog[1279768]: addr x.x.x.x listed by domain b.barracudacentral.org as 127.0.0.2
Jan 11 13:25:29 pmg postfix/postscreen[1278508]: DNSBL rank 1 for [x.x.x.x]:60194
Telnet secondary node
Code:
telnet pmg1.domain.com 25
Trying x.x.x.x...
Connected to pmg1.domain.com.
Escape character is '^]'.
220 pmg1.domain.com ESMTP Company
EHLO pve1611.corp.company2.com
250-pmg1.domain.com
250-SIZE 20971520
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 SMTPUTF8
MAIL FROM:<root@pve1611.corp.company2.com>
550 5.5.0 Invalid EHLO/HELO domain.
Bash:
Jan 11 13:29:54 pmg1 postfix/postscreen[163670]: CONNECT from [x.x.x.x]:32995 to [x.x.x.x]:25
Jan 11 13:29:54 pmg1 postfix/dnsblog[163714]: addr x.x.x.x listed by domain b.barracudacentral.org as 127.0.0.2
Jan 11 13:30:00 pmg1 postfix/postscreen[163670]: DNSBL rank 1 for [x.x.x.x]:32995
Telnet main node with whitelisted IP
Code:
telnet pmg.domain.com 25
Trying x.x.x.x...
Connected to pmg.domain.com.
Escape character is '^]'.
220 pmg.domain.com ESMTP Company
EHLO pve1611.corp.company2.com
250-pmg.domain.com
250-PIPELINING
250-SIZE 52428800
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-SMTPUTF8
250 CHUNKING
MAIL FROM:<root@pve1611.corp.company2.com>
250 2.1.0 Ok
Bash:
Jan 11 13:37:16 pmg postfix/postscreen[1296377]: CONNECT from [x.x.x.x]:60196 to [x.x.x.x]:25
Jan 11 13:37:16 pmg postfix/postscreen[1296377]: WHITELISTED [x.x.x.x]:60196
Jan 11 13:37:16 pmg postfix/smtpd[1296381]: warning: hostname xxxxx-xxxxxx-x-xx-xx.xxx.xxx does not resolve to address x.x.x.x
Jan 11 13:37:16 pmg postfix/smtpd[1296381]: connect from unknown[x.x.x.x]
Telnet secondary node with whitelisted IP
Code:
telnet pmg1.domain.com 25
Trying x.x.x.x...
Connected to pmg1.domain.com.
Escape character is '^]'.
220 pmg1.domain.com ESMTP Company
EHLO pve1611.corp.company2.com
250-pmg1.domain.com
250-SIZE 20971520
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 SMTPUTF8
MAIL FROM:<root@pve1611.corp.company2.com>
550 5.5.0 Invalid EHLO/HELO domain.
Bash:
Jan 11 13:43:27 pmg1 postfix/postscreen[188555]: CONNECT from [x.x.x.x]:27551 to [x.x.x.x]:25
Jan 11 13:43:27 pmg1 postfix/postscreen[188555]: WHITELISTED [x.x.x.x]:27551
Jan 11 13:43:27 pmg1 postfix/smtpd[188569]: warning: hostname xxxxx-xxxxxx-x-xx-xx.xxx.xxx does not resolve to address x.x.x.x
Jan 11 13:43:27 pmg1 postfix/smtpd[188569]: connect from unknown[x.x.x.x]
Jan 11 13:44:17 pmg1 postfix/smtpd[188569]: lost connection after EHLO from unknown[x.x.x.x]
Jan 11 13:44:17 pmg1 postfix/smtpd[188569]: disconnect from unknown[x.x.x.x] ehlo=1 commands=1
The postfix configuration files were compared and no difference is evident between the nodes, the postscreen cache was also cleared, but the problem continues.
Thank you for the help you could provide me
Last edited: