Helo command rejected: Access denied

[daanse]

Hi,
i have Plesk 12.5 and installed everything fine.
Emails are working perfekt / EXCEPT when i'm trying to Email to Vodafone.
Than i get "smtp; 554 5.7.1 - Helo command rejected: Access denied"

What can i do?

Reporting-MTA: dns; my-pleskserver.com
X-Postfix-Queue-ID: 05A96812FC
X-Postfix-Sender: rfc822; [email protected]
Arrival-Date: Mon, 14 Mar 2016 15:30:55 +0100 (CET)

Final-Recipient: rfc822; [email protected]
Original-Recipient: rfc822;[email protected]
Action: failed
Status: 5.7.1
Remote-MTA: dns; smtp-04.vodafone.de
Diagnostic-Code: smtp; 554 5.7.1 <my-pleskserver.com>: Helo command
    rejected: Access denied

 

[IgorG]

I suppose that you should ask Vodafone support about this issue. It looks like that they thinks that you are spammer.

 

[daanse]

They won't answer

I checked Blacklists, its fine. No Blacklisting

 

[IgorG]

They won't answer

Really so bad and unresponsive Vodafone support? Strange...

 

[daanse]

Yes Sir.
As my customer already tried to reach them and now it was my goal to email them.
No answer at all.

 

[trialotto]

@Daka Media KG

The

Helo command rejected: Access denied

is often the result of a missing FQDN or a wrong PTR or DNS record.

In Plesk, you should be able to send mail to [email protected] when using a normal mailbox, i.e. sending mail from an existing domain.

If you are able to do so and the mail server of Vodafone accepts the mail, then you should probably have a look at your hostname setup (read: verify that it is a FQDN).

If the hostname is a FQDN and the Vodafone mail server still rejects the mail, then it (essentially) fails to authenticate your mail as "belonging to your mail server", which often boils down to a missing A record pointing to the FQDN and/or an inappropriate PTR record.

In short, with some simple tests you can discover why the Vodafone mail server rejects your mail and, with the results from those tests, the issue can be resolved.

Regards....

 

[daanse]

@Daka Media KG

In short, with some simple tests you can discover why the Vodafone mail server rejects your mail and, with the results from those tests, the issue can be resolved.

Hi Trialotto,
thanks for your help.
i ran some tests mentionet on this Site: https://easyengine.io/tutorials/mail/fqdn-reverse-dns-ptr-mx-record-checks/
and with the Command:

dig +short ptr 103.254.241.192.in-addr.arpa

(dig command for reverse-DNS/PTR lookup)
i had some output which i don't Notice.
The Output i should get would be the Host or Domain?
Maybe thats my Problem?
the output was "mz3ip136.mii.jp."
have no clue what that is :O

 

[trialotto]

@Daka Media KG

You should run: dig +short ptr <reverse IP>.in-addr.arpa (with the reverse IP for your server, not the 103.254.241.192 reverse IP!)

I have checked your reverse IP (both of them) and they point to web-host04.scp-manager.com.

In short, that is the reason why Vodafone does not accept mail: the PTR record does not correspond to the FQDN (i.e. hostname), implying that the Vodafone mail server rejects mail.

It is as simple as that.

Regards.....

PS You should be aware of the fact that any mail from a regular mailbox will be accepted. It is very likely that you are running a script, that is generating mail, which is send with the FQDN header, instead of a normal header. You can work-around this by using a (PHP) mail library, such as PHPMailer, who acts as a SMTP client and will hence connect to a (local) mail server in Plesk, in order to send mail properly. This method is to be preferred anyway, it is more secure and will also prevent situations like the situation with the Vodafone mail server.

 

[daanse]

uhm, i dont understand.
"web-host04.scp-manager.com" is my hostname? This URL is mine for Plesk.
i replaced the IP out of the Example with mine, im not stupid xD
and than there was .... this strange thing.. uhm
So PTR looks fine cause it points to web-host04.scp-manager.com? Or is it wrong that it points to web-host04.scp-manager.com (Hostname) ?

 

[trialotto]

@Daka Media KG

Be open and clear: what is the hostname of your server? Are you domainname holder of scp-manager.com (probably not, but I have to ask anyway)? And what are the A records?

 

[daanse]

Yes i am Domain owner.
Yes Hostname of Server is: web-host04.scp-manager.com
A record points to IPv4 and
AAAA record points to IPv6

 

[trialotto]

@Daka Media KG

Ehm, scp-manager is belonging to PrivateName Services Inc., according to the Whois (and, in contrast, your other domains are on your name).

Moreover, the A record of scp-manager.com is not pointed to your server, but to an IP of your hosting provider (Interprovider Ltd, aka myloc.de).

Furthermore, most of your domains are pointing to the A record of your hosting provider and/or have problems with DNS resolving.

Really, I cannot make any sense of the whole situation, neither can you, otherwise you would not have this (and many other) questions.

I would strongly recommend you to rethink your whole setup/configuration (including DNS configuration), otherwise you will keep on having (minor and major) issues.

Regards.......

 

[daanse]

Hi @trialotto ,
as i already said, this Domain belongs to me, i have control of the DNS etc.
And web-host04.scp-manager.com is pointing to the correct server/IP we are talking about.
I thought i can work with Subdomains? Its nothing unusual?
Or does the Domain "scp-manager.com" it self should also point to that IP? That would be ... weird cause i have other Subdomains to other IP's with this Domain.
I think this is okay regarding to other big webhoster, using also subdomains sometimes...

 

[trialotto]

@Daka Media KG

The short answer: there are many issues with your setup/configuration.

Again, rethink your whole setup/configuration.

Regards

 

[daanse]

Hi,

yes this is recommended quit often. Even if Server works fine and or for every Server i set up freshly.
So wondering why i should install new Plesk just after i installed a NEW PLESK
This makes no sense to me.

Out of the mailog i got this one:

Mar 30 20:41:25 web-host04 spamd[22940]: spamd: clean message (0.0/6.0) for [email protected]:30 in 0.3 seconds, 2881 bytes.
Mar 30 20:41:25 web-host04 spamd[22940]: spamd: result: . 0 - NO_RELAYS,URIBL_BLOCKED scantime=0.3,size=2881,[email protected],uid=30,required_score=6.0,rhost=web-host04.scp-manager.com,raddr=::1,rport=47733,mid=<[email protected]>,autolearn=ham autolearn_force=no
Mar 30 20:41:25 web-host04 spamd[10660]: prefork: child states: II
Mar 30 20:41:25 web-host04 dovecot: service=lda, [email protected], ip=[]. msgid=<[email protected]>: saved mail to INBOX
Mar 30 20:41:25 web-host04 postfix/pipe[24984]: D6BB05862422: to=<[email protected]>, relay=plesk_virtual, delay=0.66, delays=0.09/0/0/0.57, dsn=2.0.0, status=sent (delivered via plesk_virtual service)
Mar 30 20:41:25 web-host04 postfix/qmgr[22759]: D6BB05862422: removed

This is what i get on the log if i write to that Email Address from "vodafone".
They still don't answer to any of my Mails uhm...