reject emails

General eFa discussion
Post Reply
fatima2007
Posts: 32
Joined: 03 Jan 2018 11:14

reject emails

Post by fatima2007 »

i got this error after all settings :




what is my problem. just one email showed in my efa web consol. all others got error
what is my problem. please help.
Attachments
Screenshot (85).png
Screenshot (85).png (313.37 KiB) Viewed 4928 times
User avatar
pdwalker
Posts: 1553
Joined: 18 Mar 2015 09:16

Re: reject emails

Post by pdwalker »

From what I see there, everything looks normal. Is your system still not receiving any mail?

Also, if you could post the log as text, rather than a low resolution screenshot next time, it'd make it much easier to help you with your problem.
User avatar
pdwalker
Posts: 1553
Joined: 18 Mar 2015 09:16

Re: reject emails

Post by pdwalker »

Longer answer:

#1 NOQUEUE: this message was rejected because the sender was listed in zen.spamhaus.org as a spammer.

#2 NOQUEUE: the sender looks valid, but they were greylisted because the system has never seen them before. If it's a valid sender, the email will be resent at a later time, probably within the next 5-10 minutes.

#3 NOQUEUE: as #2

#4 NOQUEUE: as #2

#5 NOQUEUE: the sender was trying to send a message to a recipient with an unknown domain (@stu.nut.ac.ir). Either this means there is a domain name resolution problem, or the spammer is trying to send mail to a non existant domain, i.e. spam.

If you have a new system, then the greylisting will cause all mail to be delayed initially. However, as the valid senders continue to resend the mail, the greylisting system will recognize them as valid senders and accept the mail immediately in the future. Depending on how much mail you get, this could take some time.

Also, the immediate rejects are because of the RBLs that postfix uses to drop junk before accepting it. If a message clearly comes from a known spammer, then there is no point in accepting and scanning the message.

Check your logs now - do you see any entries like "Spam Checks: Starting"? If you do, that means your system is accepting mail.
fatima2007
Posts: 32
Joined: 03 Jan 2018 11:14

Re: reject emails

Post by fatima2007 »

thanks a lot
i have a domain and sub domain in my exchange. @x.com and y.x.com
now i have add domain y.x.com to efa-configure setting in mail setting>> transport setting.
i think it will works and @ y.x.com emails will not rejected . not?
Last edited by fatima2007 on 14 Mar 2018 11:41, edited 1 time in total.
fatima2007
Posts: 32
Joined: 03 Jan 2018 11:14

Re: reject emails

Post by fatima2007 »

please help
fatima2007
Posts: 32
Joined: 03 Jan 2018 11:14

Re: reject emails

Post by fatima2007 »

i have a exchange server with a domain @x.com and @y.x.com
i config efa in transport setting and set x.com and y.x.com
but my email to destination y.x.com are rejected when they go to efa.
note: befor using efa my emails to both domain and sub domain were received but now i have problem
pleaseeeeeee help me. this is very important problem
User avatar
pdwalker
Posts: 1553
Joined: 18 Mar 2015 09:16

Re: reject emails

Post by pdwalker »

hi fatima2007,

So let me see if I understand you correctly.

Question 1:
mail to user@x.com works correctly, but mail to user@y.x.com is rejected?

The first thing I would check is your DNS. Your DNS server should be able to resolve your domains MX record. If it cannot resolve the domain, or the domain has no MX record, then it's hard to deliver mail.

See the following:
$ nslookup
> set type=mx
> gmail.com
Server: 10.10.1.1
Address: 10.10.1.1#53

Non-authoritative answer:
gmail.com mail exchanger = 10 alt1.gmail-smtp-in.l.google.com.
gmail.com mail exchanger = 20 alt2.gmail-smtp-in.l.google.com.
gmail.com mail exchanger = 5 gmail-smtp-in.l.google.com.
gmail.com mail exchanger = 30 alt3.gmail-smtp-in.l.google.com.
gmail.com mail exchanger = 40 alt4.gmail-smtp-in.l.google.com.
This shows I can properly resolve the gmail.com domain and find the MX records.

Now let's check your x.com domain for comparison
> x.com
Server: 10.10.1.1
Address: 10.10.1.1#53

Non-authoritative answer:
x.com mail exchanger = 10 www.efa.x.com.
x.com mail exchanger = 10 efal.x.com.
So, your x.com domain is resolving properly and I can find the mx records, and those mx records should resolve to an IP address properly

Let's test that shall we?
> set type=A
> www.efa.x.com
Server: 10.10.1.1
Address: 10.10.1.1#53

Non-authoritative answer:
Name: www.efa.x.com
Address: 217.219.165.17
> efal.x.com
Server: 10.10.1.1
Address: 10.10.1.1#53

** server can't find efal.x.com: NXDOMAIN
> efal.x.com
Server: 10.10.1.1
Address: 10.10.1.1#53

** server can't find efal.x.com: NXDOMAIN
So efal.x.com doesn't exist. Is that a typo?
> efa.x.com
;; Got SERVFAIL reply from 10.10.1.1, trying next server
Server: 10.10.1.11
Address: 10.10.1.11#53

Non-authoritative answer:
Name: efa.x.com
Address: 217.219.165.17
So yes, I think that's a typo.

Given your mx records are of equal weight, then half the time a mail system is going to have issues with delivering your mail to x.com. Fix this.


Now your domain y.x.com is acting a bit strange
> y.x.com
;; Got SERVFAIL reply from 10.10.1.1, trying next server
Server: 10.10.1.11
Address: 10.10.1.11#53

Non-authoritative answer:
y.x.com mail exchanger = 10 mail.x.com.
It resolves, eventually, but not before getting an error, so it seems to me that there is a DNS configuration problem for your subdomain. Exactly what, I'm not sure. It doesn't seem to happen all the time, but intermittently.

Let's have a closer look:
$ nslookup
> set type=ns
> x.com
;; Got SERVFAIL reply from 10.10.1.1, trying next server
Server: 10.10.1.11
Address: 10.10.1.11#53

Non-authoritative answer:
nit.ac.ir nameserver = dns4.x.com.
nit.ac.ir nameserver = dns1.x.com.
nit.ac.ir nameserver = dns2.x.com.
nit.ac.ir nameserver = ftpservertakmil.
nit.ac.ir nameserver = dns3.x.com.
Question 2:
So, one of your name servers defined for this domain does not look like the others. Is that a mistake? Is ftpservertakmil one of your domain name servers?

The moral of this story is - first make sure your domain is correctly configured before trying to debug problems with EFA.

Let me know what you find out.

(PS: if you want to use x.com and y.x.com, you might want to edit your post above and remove the domains you actually listed.)
fatima2007
Posts: 32
Joined: 03 Jan 2018 11:14

Re: reject emails

Post by fatima2007 »

thanks very very much. my problem was in my dns mx record. now i add mx for y.x.com and it works.
Post Reply