[SOLVED] relaying from host in same network denied

[lklg]

Hello,
I set up a new proxmox (test, but already bought subscription) mail gateway. It works fine for incomming mails, but I have some trouble with outgoing mails. The sender is in the same network and on the whitelist, but proxmox does not allow relaying??

Log:

Mar 29 08:31:39 mailgw02 postfix/postscreen[13644]: CONNECT from [192.168.0.101]:42792 to [192.168.0.130]:25
Mar 29 08:31:39 mailgw02 postfix/postscreen[13644]: WHITELISTED [192.168.0.101]:42792
Mar 29 08:31:39 mailgw02 postfix/smtpd[13645]: connect from froxlor01.dmz.lklg.net[192.168.0.101]
Mar 29 08:31:59 mailgw02 pmg-smtp-filter[10326]: starting database maintainance
Mar 29 08:31:59 mailgw02 pmg-smtp-filter[10326]: end database maintainance (12 ms)
Mar 29 08:32:03 mailgw02 postfix/smtpd[13645]: NOQUEUE: reject: RCPT from froxlor01.dmz.lklg.net[192.168.0.101]: 454 4.7.1 <******@gmx.de>: Relay access denied; from=<me@mydomain.de> to=<******@gmx.de> proto=ESMTP helo=<froxlor01.dmz.lklg.net>
Mar 29 08:32:05 mailgw02 postfix/smtpd[13645]: disconnect from froxlor01.dmz.lklg.net[192.168.0.101] ehlo=1 mail=1 rcpt=0/1 quit=1 commands=3/4

 

[mira]

Did you add it to the trusted networks? https://www.proxmox.com/images/download/pmg/docs/pmg-admin-guide.pdf 4.5.6
These networks are allowed to send on the internal port (where no checks are run).

 

[lklg]

yes, tried that. but the sending host is in the same network with the proxmox mail gateway, so it should be trusted without adding it to trusted networks

from the admin guide:

Note
Hosts in the same subnet with Proxmox can relay by default and it’s not needed to add them in this list.

 

[mira]

Yes, but only if you send on the internal port (26) not the external port (25). (or whichever ports you entered on both)

 

[karnz]

Add it to Trusted Network is making sure that your internal mail server can be sent through PMG to the world.
In my case, even internal mail server (same subnet,network,Class C) send to PMG on port 26 still unable to pass PMG. Add its IP to Trusted Network fix this issue.

 

[lklg]

/me = stupid
using the internal smtp port everything works

 

[Christian Budiman]

Did you add it to the trusted networks? https://www.proxmox.com/images/download/pmg/docs/pmg-admin-guide.pdf 4.5.6
These networks are allowed to send on the internal port (where no checks are run).

"no checks are run"
does it mean that there will be no spam check for those outgoing messages?

How to configure PMG so it will be able to relay outgoing emails while still blocking spam messages sent by internal networks?

 

[Stoiko Ivanov]

How to configure PMG so it will be able to relay outgoing emails while still blocking spam messages sent by internal networks?

* configure your sending server to use the internal port of PMG
* create a rule with has a What object with SPAM, and an appropriate action with direction 'in' or 'in & out'
* Test it and keep an eye on the logs

I hope this helps!

 

[ronsrussell]

* configure your sending server to use the internal port of PMG
* create a rule with has a What object with SPAM, and an appropriate action with direction 'in' or 'in & out'
* Test it and keep an eye on the logs

I hope this helps!

I do not understand how to create this rule. Please show an example.
thanks, Ron

 

[Stoiko Ivanov]

You can do so in the GUI (in the section Mail Filter) - check out the reference documentation: https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#chapter_mailfilter

I hope this helps!