[SOLVED] Verify receivers (550) - accepted/bounced ?

Oct 8, 2020
9
0
1
45
Hello!

I can't understand why, if recipient verification is enabled (code 550), first a message is sent on behalf of double-bounce and if the recipient does not exist, the response "status = undeliverable" is returned and then the message is discarded - NOQUEUE: reject: RCPT from *: 550 5.1 .1 <*>: Recipient address rejected: undeliverable address -this is correct and should work

But some clients after "status = undeliverable host said: 550 5.1.1 <*>: Recipient address rejected" connect to the mail server and get bounced "status = bounced" and then postfix / bounce [953]: sender non-delivery notification
and Proxmox sends a return letter

I also noticed that if the domain is turned on the White List of the mail proxy, then the client immediately connects to the mail server without checking the recipient

I'm confused !
 

Stoiko Ivanov

Proxmox Staff Member
Staff member
May 2, 2018
6,171
861
148
Please provide the logs for both cases - as I'm not quite sure I understood the issue

Thanks!
 
Oct 8, 2020
9
0
1
45
Thanks for the answer!

If you look at the log, then: (More logs in the file)


Oct 8 19:15:54 pmg pmgpolicy [32511]: SPF says pass

recipient verification is turned on and should be like this (NOQUEUE: reject:):


(this is an example from another check). (domain name is replaced with *)

Oct 09 13:18:35 pmg postfix / smtpd [21973]: NOQUEUE: reject: RCPT from s1.bomanse.art [176.9.112.42]: 550 5.1.1 <tanechka@*>: Recipient address rejected: undeliverable address: Recipient address lookup failed; from = <emfoftl@holansty.art> to = <tanechka@*> proto = ESMTP helo = <mail.holansty.art>
Oct 09 13:18:35 pmg postfix / cleanup [21976]: DD8C04137F: message-id = <20201009101835.DD8C04137F@pmg>
Oct 09 13:18:35 pmg postfix / qmgr [1031]: DD8C04137F: from = <double-bounce@*>, size = 232, nrcpt = 1 (queue active)
Oct 09 13:18:35 pmg postfix / smtp [21994]: Anonymous TLS connection established to 192.168.0.3 [192.168.0.3]: 25: TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)
Oct 09 13:18:35 pmg postfix / smtp [21994]: DD8C04137F: to = <tanechka@*>, relay = 192.168.0.3 [192.168.0.3]: 25, delay = 0.06, delays = 0 / 0 / 0.06 / 0.01, dsn = 5.1.1, status = undeliverable (host 192.168.0.3 [192.168.0.3] said: 550 5.1.1 <tanechka@*>: Recipient address rejected: * (in reply to RCPT TO command))
Oct 09 13:18:35 pmg postfix / qmgr [1031]: DD8C04137F: removed

and then connecting to the mail server: (More logs in the file)

Oct 8 19:15:59 pmg postfix/smtp[943]: Anonymous TLS connection established to 192.168.0.3[192.168.0.3]:25: TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)



Thanks for the answer!
 

Attachments

  • log.pdf
    32.1 KB · Views: 7
Last edited:

sametileli

New Member
Aug 25, 2020
14
1
3
35
hello

what's your settings in
please check set
>>>>> mail proxy >>>>>Options >>>>>>Verify receivers >>>>>NO ?
 
Oct 8, 2020
9
0
1
45
No, in the settings YES

I also noticed that the recipient check (NOQUEUE: reject: RCPT from) is processed correctly in the based one, but in isolated cases the smtp client connects to the mail server, even if the recipient check was successful
Proxmox mail works for about a month
 

Attachments

  • 2020-10-09.png
    2020-10-09.png
    10.2 KB · Views: 21
Oct 8, 2020
9
0
1
45
Here is a quote from the Postfix instruction:

"Recipient address verification is relatively straightforward and there are no surprises. If a recipient probe fails, then Postfix rejects mail for the recipient address. If a recipient probe succeeds, then Postfix accepts mail for the recipient address"

My problem is that when checking the recipient Postfix should bounce mail, but it turns out that the client still connects to the downstream mail server
 

Stoiko Ivanov

Proxmox Staff Member
Staff member
May 2, 2018
6,171
861
148

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get your own in 60 seconds.

Buy now!