Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Level 1

15 points

can't send mail via iphone - blocked by zen.spamhaus.org

can anyone help me figure this one out...

I can send / receive email fine through my server from my desktop machine on a network, but when I try to send email from my iPhone via the 3G network my server blocks me using zen.spamhaus.org

this is the output from a postconf -n

allow untrustedrouting = no
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debug peerlevel = 2
delay warningtime = 6h
disable vrfycommand = yes
enable serveroptions = yes
fast flushdomains = $relay_domains
html_directory = no
inet_interfaces = all
local recipientmaps = proxy:unix:passwd.byname $alias_maps
luser_relay =
mail_owner = postfix
mailbox sizelimit = 0
mailbox_transport = cyrus
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
maps rbldomains =
maximal queuelifetime = 5d
message sizelimit = 0
mydestination = $myhostname,localhost.$mydomain,localhost
mydomain = kiwi.newzealand.co.nz
mydomain_fallback = localhost
myhostname = smtp.newzealand.co.nz
mynetworks = 127.0.0.1/32,192.168.1.0/24
newaliases_path = /usr/bin/newaliases
queue_directory = /private/var/spool/postfix
readme_directory = /usr/share/doc/postfix
sample_directory = /usr/share/doc/postfix/examples
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtpd clientrestrictions = permit saslauthenticated permit_mynetworks reject rblclient zen.spamhaus.org permit
smtpd datarestrictions = permit saslauthenticated, permit_mynetworks, reject unauthpipelining, permit
smtpd delayreject = no
smtpd error_sleeptime = 1s
smtpd hard_errorlimit = 20
smtpd helorequired = yes
smtpd helorestrictions = permit saslauthenticated, permit_mynetworks, check heloaccess hash:/etc/postfix/helo_access, reject non_fqdnhostname, reject invalidhostname, permit
smtpd pw_server_securityoptions = login,plain,cram-md5
smtpd recipientrestrictions = permit saslauthenticated, reject invalidhostname, reject non_fqdnsender, reject non_fqdnrecipient, permit_mynetworks, reject unauthdestination, reject unlistedrecipient, reject rblclient sbl-xbl.spamhaus.org, reject rblclient smtp.dnsbl.sorbs.net, permit
smtpd sasl_authenable = yes
smtpd senderrestrictions = permit saslauthenticated, permit_mynetworks, reject non_fqdnsender, permit
smtpd soft_errorlimit = 10
smtpd tlsCAfile = /etc/certificates/secure.newzealand.co.nz.chcrt
smtpd tls_certfile = /etc/certificates/Default.crt
smtpd tls_keyfile = /etc/certificates/Default.key
smtpd use_pwserver = yes
smtpd usetls = no
unknown local_recipient_rejectcode = 550
virtual aliasdomains = hash:/etc/postfix/virtual_domains
virtual aliasmaps = hash:/etc/postfix/virtual
virtual mailboxdomains = hash:/etc/postfix/virtual domainsdummy
virtual_transport = lmtp:unix:/var/imap/socket/lmtp

Dual G5 Xserve, Mac OS X (10.4.11)

Posted on Oct 22, 2009 9:25 PM

26 replies

jaydisc

Level 4

1,464 points

Oct 25, 2009 4:21 PM in response to reganyelcich

Those settings look fine. Are you saying that altering the blacklist settings has affected your ability to check your mail via POP? That would not make sense.

reganyelcich Author

Level 1

15 points

Oct 25, 2009 4:22 PM in response to jaydisc

no i just checked the connection doctor again and it pop'd ok.

reganyelcich Author

Level 1

15 points

Oct 25, 2009 4:23 PM in response to jaydisc

is there any way to output the settings in both master.cf and main.cf together to get ALL of the settings? maybe that would help.

jaydisc

Level 4

1,464 points

Oct 25, 2009 4:28 PM in response to reganyelcich

postconf -n is going to give you your non-default options in main.cf

And I supposed you could just use this to spit out master.cf as well:

cat /etc/postfix/master.cf

Did you check the outgoing server authentication on your iPhone?

reganyelcich Author

Level 1

15 points

Oct 25, 2009 4:55 PM in response to jaydisc

jaydisc - thanks for your help. do you want to send me an email and i'll post the output of cat to you direct? see if there's anything you can see I've stuffed up. see my profile.

pterobyte

Level 6

11,098 points

Oct 26, 2009 5:01 AM in response to reganyelcich

as soon as I get rid of:
zen.spamhaus.org
and replace it with:
sbl-xbl.spamhaus.org
smtp.dnsbl.sorbs.net
the iphone and desktop machine connect and send ok.
So it appears that the "permit saslauthenticated" option is ignored when I've got "zen.spamhaus.org" set in the junk mail rejection servers.

No, it simply means that the IP in question is not on the other RBLs.

As jaydisc pointed out, you are not authenticating when sending.

reganyelcich Author

Level 1

15 points

Oct 26, 2009 1:19 PM in response to pterobyte

hi pterobyte,

Do you know if there's an "Authenticating 101" anywhere that I can follow step by step to set it up?

If the problem is on the client end (my desktop machine and iphone), I've already gone over my Mail smtp settings a thousand times but still no go. 😟

pterobyte

Level 6

11,098 points

Oct 28, 2009 8:04 AM in response to reganyelcich

According to the configuration you posted it looks like a client side problem.
For the sake of troubleshooting you can keep using port 25 (assuming your postconf -n output is still the same). This eliminates your additional port's settings as a possible cause.

Make sure log level for SMTP is at "Information". Try to send and check mail.log

reganyelcich Author

Level 1

15 points

Oct 28, 2009 1:11 PM in response to pterobyte

Thanks to jaydisc for helping to solve this one.

The problem was on the server side. There was some authentication confusion happening between the various restrictions directives, so to tidy things up the restrictions have been limited to be within smtpd recipientrestrictions and smtpd datarestrictions only, along with those in master.cf as outlined above.

As soon as the changes were done both the iphone and desktop machine authenticated fine. 🙂

jaydisc

Level 4

1,464 points

Oct 28, 2009 3:31 PM in response to reganyelcich

To anyone interested in the reason, smtpddelayreject was set to no, meaning that when permitsaslauthenticated was assessed at the smtpd_client phase, the login hadn't yet occurred, and smtpd wasn't waiting, the messages were rejected at the smtpd_client phase.

pterobyte

Level 6

11,098 points

Oct 29, 2009 4:37 AM in response to jaydisc

Nice catch. 🙂 Thanks for sharing.

can't send mail via iphone - blocked by zen.spamhaus.org