• We value your experience with Plesk during 2024
    Plesk strives to perform even better in 2025. To help us improve further, please answer a few questions about your experience with Plesk Obsidian 2024.
    Please take this short survey:

    https://pt-research.typeform.com/to/AmZvSXkx
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Email problems - SPF/DNS - Message aborted

Red Paint

Basic Pleskian
Hello,

One of our domains is having problems receiving email from selected IP's.

This is happening for a selection of domains on our servers but a specific example can be found below:

From the maillog:

Code:
May  1 06:23:32 plesk spf filter[25550]: Error code: (26) DNS lookup failure
May  1 06:23:32 plesk spf filter[25550]: SPF result: tempfail
May  1 06:23:32 plesk /usr/lib64/plesk-9.0/psa-pc-remote[13289]: handlers_stderr: DEFER
May  1 06:23:32 plesk /usr/lib64/plesk-9.0/psa-pc-remote[13289]: DEFER during call 'spf' handler
May  1 06:23:32 plesk /usr/lib64/plesk-9.0/psa-pc-remote[13289]: Message aborted.
May  1 06:23:32 plesk postfix/cleanup[23168]: E461A66A71: milter-reject: END-OF-MESSAGE from eu1sys200aog103.obsmtp.com[207.126.144.115]: 4.7.1 Service unavailable - try again later; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<eu1sys200aog103.obsmtp.com>
May  1 06:23:32 plesk postfix/smtpd[10248]: disconnect from eu1sys200aog103.obsmtp.com[207.126.144.115]

I've tried an spf query and it spits back the following:

Code:
# /usr/bin/spfquery_static -ip 207.126.144.155 -sender [email protected] -rcpt-to [email protected]
pass
spfquery: domain of newsint.co.uk designates 207.126.144.155 as permitted sender
Received-SPF: pass (spfquery: domain of newsint.co.uk designates 207.126.144.155 as permitted sender) client-ip=207.126.144.155; [email protected];

/etc/postfix/main.cf looks like this:

Code:
virtual_mailbox_domains = $virtual_mailbox_maps, hash:/var/spool/postfix/plesk/virtual_domains
virtual_alias_maps = $virtual_maps, hash:/var/spool/postfix/plesk/virtual
virtual_mailbox_maps = hash:/var/spool/postfix/plesk/vmailbox
transport_maps = hash:/var/spool/postfix/plesk/transport
smtpd_tls_cert_file = /etc/postfix/postfix_default.pem
smtpd_tls_key_file = $smtpd_tls_cert_file
smtpd_tls_security_level = may
smtpd_use_tls = yes
smtp_tls_security_level = may
smtp_use_tls = no
smtpd_timeout = 3600s
smtpd_proxy_timeout = 3600s
disable_vrfy_command = yes
mynetworks = 127.0.0.0/8 [::1]/128 ......
smtpd_sender_restrictions = check_sender_access hash:/var/spool/postfix/plesk/blacklists, permit_sasl_authenticated, check_client_access pcre:/var/spool/postfix/plesk/non_auth.re, reject_unknown_sender_domain, warn_if_reject reject_unverified_sender
smtp_send_xforward_command = yes
smtpd_authorized_xforward_hosts = 127.0.0.0/8 [::1]/128
smtpd_sasl_auth_enable = yes
smtpd_recipient_restrictions = permit_mynetworks, check_client_access pcre:/var/spool/postfix/plesk/no_relay.re, permit_sasl_authenticated, reject_unauth_destination
virtual_mailbox_base = /var/qmail/mailnames
virtual_uid_maps = static:110
virtual_gid_maps = static:31
virtual_transport = plesk_virtual
plesk_virtual_destination_recipient_limit = 1
mailman_destination_recipient_limit = 1
smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_rbl_client sbl.spamhaus.org
myhostname = plesk.redpaint.co.uk
message_size_limit = 20480000
smtpd_milters = inet:localhost:12768
non_smtpd_milters = inet:localhost:12768
sender_dependent_default_transport_maps = hash:/var/spool/postfix/plesk/sdd_transport_maps

It's a strange one and I'm not sure what's going on but something is preventing these emails from being delivered.

Any thoughts?
 
This is still happening. Trying to understand and rectify the problem, are we the only ones experiencing this?
 
Back
Top