[SOLVED] error sending to gmail?

[killmasta93]

HI,
I was wondering if someone else has gotten this issue before, currently im sending though proxmox and i get this error

connect to aspmx.l.google.com[2607:f8b0:400c:c15::1a]:25: Network is unreachable

.

I tried adding
/var/lib/pmg/templates/main.cf.in

inet_protocols = ipv4

and restarting postfix but not sure why its not working or did i miss something?

Thank you

 

[Stoiko Ivanov]

does sending work afterwards? (to my knowledge postfix connects to v4 if v6 is not reachable)

do you have any ipv6 addresses configured on the PMG?

ip -6 a
ip -6 r

should show that

does disabling ipv6 via sysctl help?
( net.ipv6.conf.all.disable_ipv6 and net.ipv6.conf.default.disable_ipv6)

 

[killmasta93]

Thanks for the reply,
this is what i get

root@mail:~# ip -6 a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 state UNKNOWN qlen 1000
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: ens18: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
inet6 fe80::b82d:a9ff:fed0:f03f/64 scope link
valid_lft forever preferred_lft forever
root@mail:~# ip -6 r
::1 dev lo proto kernel metric 256 pref medium
fe80::/64 dev ens18 proto kernel metric 256 pref medium

what i did try was inside of /etc/postfix/main.cf added the inet ipv4

restarted and reflush but now im getting this

status=deferred (connect to aspmx4.googlemail.com[172.217.218.26]:25: Connection timed out)

prob gmail greylisted me for a while?

 

[Stoiko Ivanov]

ahh - ok - I think I recall that - sometimes the error-message in the log is a bit misleading - at least for DNS lookups it only prints the one it tried first (ipv6) - I think in that case it is similar - it cannot reach gmail on either v6 or v4, and prints only the v6 message.


the error message does not look like greylisting (connection timeout is usually on layer 4, greylisting happens on layer 7 (within the SMTP dialog)

can you connect to the ip in question?:

 nc -v 172.217.218.26 25

 

[killmasta93]

thanks for the reply, so odd i get this error

root@mail:~# nc -v 172.217.218.26 25
172.217.218.26: inverse host lookup failed: Host name lookup failure

 

[killmasta93]

so i have another email server with different IP same config of PMG

172.217.218.26: inverse host lookup failed: Host name lookup failure
(UNKNOWN) [172.217.218.26] 25 (smtp) open
220 mx.google.com ESMTP y8si9360365edw.59 - gsmtp

seems that with my IP cannot telnet 25 but on another IP i can so this might be a blockage?

 

[Stoiko Ivanov]

seems that with my IP cannot telnet 25 but on another IP i can so this might be a blockage?

could be - you can check with tcptraceroute to port 25 where it happens (not always 100% reliable, since quite a few routers drop the icmp ttl exceeded packages - but still) - maybe there's a firewall rule in your environment which causes the connection time out?

 

[killmasta93]

thanks for the reply, this is what i get

root@mail:~# tcptraceroute 172.217.218.26 25
Running:
traceroute -T -O info -p 25 172.217.218.26
traceroute to 172.217.218.26 (172.217.218.26), 30 hops max, 60 byte packets
1 10.141.95.1 (10.141.95.1) 8.634 ms 8.392 ms 14.976 ms
2 10.166.43.209 (10.166.43.209) 17.669 ms 17.617 ms 17.518 ms
3 10.166.41.245 (10.166.41.245) 22.748 ms 22.734 ms 22.670 ms
4 10.166.42.121 (10.166.42.121) 17.628 ms 17.596 ms 17.567 ms
5 * * *
6 * * *
7 * * *
8 * * *
9 * * *
10 * * *
11 * * *
12 * * *
13 * * *
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24 * * *
25 * * *
26 * * *
27 * * *
28 * * *
29 * * *
30 * * *

 

[Stoiko Ivanov]

would seem there is a network problem on your side (the last address in traceroute is a rfc1918 private ip) - maybe check the router/firewall

 

[killmasta93]

thanks for the reply, i did a traceroute from the firewall which im running pfsense

1 10.141.95.1 6.624 ms 9.707 ms 9.452 ms
2 10.166.43.209 12.691 ms 24.668 ms 13.433 ms
3 10.166.41.245 21.713 ms 13.083 ms 9.061 ms
4 10.166.42.121 9.598 ms 9.953 ms 7.606 ms
5 74.125.147.120 27.030 ms
74.125.118.246 19.112 ms 17.427 ms
6 108.170.253.212 14.539 ms
108.170.253.215 21.864 ms
108.170.253.200 18.973 ms
7 216.239.56.234 17.644 ms
172.253.79.10 15.788 ms
172.253.67.39 48.347 ms
8 108.170.253.215 25.475 ms
216.239.46.213 56.450 ms
108.170.253.215 29.264 ms
9 142.250.225.22 78.848 ms
142.250.61.154 62.883 ms
142.250.226.24 68.167 ms
10 216.239.50.99 76.887 ms
209.85.254.107 85.998 ms
216.239.51.39 76.990 ms
11 142.250.59.183 162.131 ms
142.250.59.185 154.637 ms
142.250.59.183 156.383 ms
12 108.170.237.242 161.796 ms
108.170.234.118 164.244 ms
209.85.245.230 158.597 ms
13 172.253.66.15 169.256 ms
72.14.236.18 161.903 ms
172.253.66.13 168.245 ms
14 108.170.231.142 167.824 ms
216.239.46.222 166.056 ms
209.85.245.230 158.126 ms
15 216.239.47.47 170.404 ms
72.14.236.18 160.663 ms
172.253.66.17 176.195 ms
16 209.85.142.190 173.183 ms * *
17 * 216.239.42.5 162.842 ms *
18 * * *

 

[killmasta93]

but whats odd is that i run it from PMG gateway i get this so maybe something on the PMG?

root@mail:~# tcptraceroute 172.217.218.26 25
Running:
    traceroute -T -O info -p 25 172.217.218.26
traceroute to 172.217.218.26 (172.217.218.26), 30 hops max, 60 byte packets
 1  10.141.95.1 (10.141.95.1)  11.579 ms  11.288 ms  11.257 ms
 2  10.166.43.209 (10.166.43.209)  13.286 ms  13.228 ms  13.297 ms
 3  10.166.41.245 (10.166.41.245)  12.642 ms  13.143 ms  13.153 ms
 4  10.166.42.121 (10.166.42.121)  44.722 ms  44.692 ms  45.201 ms
 5  * * *
 6  * * *
 7  * * *
 8  * * *
 9  * * *
10  * * *
11  * * *
12  * * *
13  * * *
14  * * *
15  * * *
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  * * *
26  * * *
27  * * *
28  * * *
29  * * *
30  * * *

 

[Stoiko Ivanov]

hm - PMG does not set any firewall rules by itself - and the tcptraceroute works here from my installation.

maybe the firewall just drops the TTL exceeded packets...

 

[killmasta93]

its seems that it was a gmail issue automaticly it started to work so odd