Resolved Mails not sending

[mgsolidus]

Hi.

I'm having an issue with Roundcube and Horde. Email is received but cannot be sent, here's some error info.

maillog

Apr 13 13:34:02 wwef postfix/qmgr[26920]: 02F04C40442: from=<[email protected]>, size=742, nrcpt=1 (queue active)
Apr 13 13:34:02 wwef postfix/smtp[27311]: 02F04C40442: host mx01.gmx.net[212.227.17.4] refused to talk to me: 554-gmx.net (mxgmx110) Nemesis ESMTP Service not available 554-No SMTP service 554-Bad DNS PTR resource record. 554 For explan$
Apr 13 13:34:02 wwef postfix/smtp[27311]: 02F04C40442: to=<[email protected]>, relay=mx00.gmx.net[212.227.15.10]:25, delay=1815, delays=1815/0.01/0.44/0, dsn=4.0.0, status=deferred (host mx00.gmx.net[212.227.15.10] refused to talk to me:$
Apr 13 13:34:25 wwef postfix/smtpd[27318]: connect from 19010728228.ip69.static.mediacommerce.com.co[190.107.28.228]
Apr 13 13:34:25 wwef plesk_saslauthd[27321]: listen=6, status=5, dbpath='/var/spool/postfix/plesk/passwd.db', keypath='/var/spool/postfix/plesk/passwd_db_key', chroot=0, unprivileged=1
Apr 13 13:34:25 wwef plesk_saslauthd[27321]: privileges set to (89:89) (effective 89:89)
Apr 13 13:34:25 wwef plesk_saslauthd[27321]: failed mail authenticatication attempt for user '[email protected]' (password len=13)
Apr 13 13:34:25 wwef postfix/smtpd[27318]: warning: 19010728228.ip69.static.mediacommerce.com.co[190.107.28.228]: SASL LOGIN authentication failed: authentication failure
Apr 13 13:34:25 wwef postfix/smtpd[27318]: lost connection after AUTH from 19010728228.ip69.static.mediacommerce.com.co[190.107.28.228]
Apr 13 13:34:25 wwef postfix/smtpd[27318]: disconnect from 19010728228.ip69.static.mediacommerce.com.co[190.107.28.228]
Apr 13 13:34:29 wwef dovecot: imap-login: Login: user=<[email protected]>, method=DIGEST-MD5, rip=::1, lip=::1, mpid=27326, secured, session=<lmO3vA9NaIcAAAAAAAAAAAAAAAAAAAAB>
Apr 13 13:34:29 wwef dovecot: service=imap, [email protected], ip=[::1]. Logged out rcvd=50, sent=505
Apr 13 13:34:55 wwef plesk_saslauthd[27321]: select timeout, exiting
Apr 13 13:35:29 wwef dovecot: imap-login: Login: user=<[email protected]>, method=DIGEST-MD5, rip=::1, lip=::1, mpid=27356, secured, session=<e99NwA9NTIgAAAAAAAAAAAAAAAAAAAAB>
Apr 13 13:35:29 wwef dovecot: service=imap, [email protected], ip=[::1]. Logged out rcvd=50, sent=505
Apr 13 13:36:29 wwef dovecot: imap-login: Login: user=<[email protected]>, method=DIGEST-MD5, rip=::1, lip=::1, mpid=27373, secured, session=<mDnjww9NaokAAAAAAAAAAAAAAAAAAAAB>
Apr 13 13:36:29 wwef dovecot: service=imap, [email protected], ip=[::1]. Logged out rcvd=50, sent=505
Apr 13 13:37:29 wwef dovecot: imap-login: Login: user=<[email protected]>, method=DIGEST-MD5, rip=::1, lip=::1, mpid=27391, secured, session=<4KBxxw9NHIoAAAAAAAAAAAAAAAAAAAAB>
Apr 13 13:37:29 wwef dovecot: service=imap, [email protected], ip=[::1]. Logged out rcvd=50, sent=505
Apr 13 13:37:45 wwef postfix/anvil[27320]: statistics: max connection rate 1/60s for (smtp:190.107.28.228) at Apr 13 12:34:25
Apr 13 13:37:45 wwef postfix/anvil[27320]: statistics: max connection count 1 for (smtp:190.107.28.228) at Apr 13 12:34:25
Apr 13 13:37:45 wwef postfix/anvil[27320]: statistics: max cache size 1 at Apr 13 12:34:25
Apr 13 13:38:29 wwef dovecot: imap-login: Login: user=<[email protected]>, method=DIGEST-MD5, rip=::1, lip=::1, mpid=28325, secured, session=<ISMFyw9NpooAAAAAAAAAAAAAAAAAAAAB>
Apr 13 13:38:29 wwef dovecot: service=imap, [email protected], ip=[::1]. Logged out rcvd=50, sent=505
Apr 13 13:38:52 wwef postfix/smtpd[28335]: connect from mta108.spmta.com[52.37.119.196]
Apr 13 13:38:53 wwef postfix/smtpd[28335]: 4E2FAC40B1E: client=mta108.spmta.com[52.37.119.196]
Apr 13 13:38:53 wwef postfix/cleanup[28339]: 4E2FAC40B1E: message-id=<[email protected]>
Apr 13 13:38:53 wwef postfix/qmgr[26920]: 4E2FAC40B1E: from=<[email protected]>, size=3446, nrcpt=1 (queue active)
Apr 13 13:38:53 wwef spamd[4674]: spamd: connection from localhost [::1]:36890 to port 783, fd 6
Apr 13 13:38:53 wwef spamd[4674]: spamd: using default config for [email protected]: /var/qmail/mailnames/wweforums.net/admin/.spamassassin/user_prefs
Apr 13 13:38:53 wwef spamd[4674]: spamd: processing message <[email protected]> for [email protected]:30
Apr 13 13:38:59 wwef postfix/smtpd[28335]: disconnect from mta108.spmta.com[52.37.119.196]
Apr 13 13:39:00 wwef spamd[4674]: spamd: clean message (-0.1/3.0) for [email protected]:30 in 6.7 seconds, 3758 bytes.
Apr 13 13:39:00 wwef spamd[4674]: spamd: result: . 0 - DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,URIBL_BLOCKED scantime=6.7,size=3758,[email protected],uid=30,required_score=3.0,rhost=localhost,raddr=::1,rport=36890,mid=<d0b7c50bf0e18$
Apr 13 13:39:00 wwef spamd[14096]: prefork: child states: II
Apr 13 13:39:00 wwef postfix/pipe[28345]: 4E2FAC40B1E: to=<[email protected]>, relay=plesk_virtual, delay=8, delays=1.2/0/0/6.8, dsn=2.0.0, status=sent (delivered via plesk_virtual service)
Apr 13 13:39:00 wwef postfix/qmgr[26920]: 4E2FAC40B1E: removed
Apr 13 13:39:02 wwef postfix/qmgr[26920]: 21CC6C40481: from=<[email protected]>, size=806, nrcpt=1 (queue active)
Apr 13 13:39:03 wwef postfix/smtp[28356]: 21CC6C40481: host mx00.gmx.net[212.227.15.10] refused to talk to me: 554-gmx.net (mxgmx016) Nemesis ESMTP Service not available 554-No SMTP service 554-Bad DNS PTR resource record. 554 For expla$
Apr 13 13:39:03 wwef postfix/smtp[28356]: 21CC6C40481: to=<[email protected]>, relay=mx01.gmx.net[212.227.17.4]:25, delay=515, delays=515/0.01/0.62/0, dsn=4.0.0, status=deferred (host mx01.gmx.net[212.227.17.4] refused to talk to me: 554$
Apr 13 13:39:29 wwef dovecot: imap-login: Login: user=<[email protected]>, method=DIGEST-MD5, rip=::1, lip=::1, mpid=28380, secured, session=<eLeYzg9N0IsAAAAAAAAAAAAAAAAAAAAB>
Apr 13 13:39:29 wwef dovecot: service=imap, [email protected], ip=[::1]. Logged out rcvd=318, sent=1562

Gmail returns a bounce email to me.
Any ideas?

Thanks!

 

[UFHH01]

Hi mgsolidus,

Gmail returns a bounce email to me.
Any ideas?

Pls. see in your logs:

Bad DNS PTR resource record

Current checks:

=> wweforums.net Domain Health
and
=> DNS Lookup for mail.wweforums.net
=> Reverse DNS Lookup for 172.93.99.202

point directly to your issue:

"mail.wweforums.net" points to the IP "172.93.99.202",
but in reverse,
"172.93.99.202" points to "hosted-by.reliablesite.net"

... and your SPF entry states clear:

v=spf1 +a +mx +a:wwef.wweforums.net -all​

​

 

[Frank.P]

Domain wweforums.net not have valid dns ptr record and have wrong reverse dns.

Check your cloudflare.com dns record and ask to your hosting provider a valid reverse dns.

 

[mgsolidus]

Hi mgsolidus,



Pls. see in your logs:

Current checks:

=> wweforums.net Domain Health
and
=> DNS Lookup for mail.wweforums.net
=> Reverse DNS Lookup for 172.93.99.202

point directly to your issue:

"mail.wweforums.net" points to the IP "172.93.99.202",
but in reverse,
"172.93.99.202" points to "hosted-by.reliablesite.net"

... and your SPF entry states clear:

v=spf1 +a +mx +a:wwef.wweforums.net -all​

So, the reverse dns is wrong? What should it be?
Also, should my SPF record be
v=spf1 +a +mx +a:mail.wweforums.net -all

and not

v=spf1 +a +mx +a:wwef.wweforums.net -all

 

[mgsolidus]

Domain wweforums.net not have valid dns ptr record and have wrong reverse dns.

Check your cloudflare.com dns record and ask to your hosting provider a valid reverse dns.

I had this same RDNS record on my last server with them, and it worked great.

 

[Frank.P]

SFP is not DNSr

http : //ping.eu/rev-lookup/

Check ip : 172.93.99.202
Wrong Result: hosted-by.reliablesite.net
Right result: wweforums.net

You cannot change this, you must ask to your hosting provider for change that.

 

[mgsolidus]

I can change this, ReliableSite provides RDNS management for me. I will make that change.
So, what other changes to dns records must I make?

 

[UFHH01]

Hi mgsolidus,

pls. note, that your current server hostname has no current "A" - entry:

=> DNS Lookup for wwef.wweforums.net

... but you included it in your SPF - entry as a valid "A" - entry.


I would recommend a SPF - entry as :

v=spf1 +mx +a a:wwef.wweforums.net ip4:172.93.99.202 ?all

This less strict ( "?all" ) and you will experience less issues.

 

[mgsolidus]

Okay, I've made these changes.

1) Changed reverse dns for 172.93.99.202 from hosted-by.reliablesite.net to wweforums.net

2) Edited TXT record in Plesk and CloudFlare

Old record:

v=spf1 +a +mx +a:wwef.wweforums.net -all

New record:

v=spf1 +mx +a a:wwef.wweforums.net ip4:172.93.99.202 ?all

anything else?

 

[mgsolidus]

Well, emails are sending now!
Now there are just 4 warnings here: wweforums.net Domain Health
Are those anything to worry about? Easy fix?

Thanks for helping!

 

[Frank.P]

SOA Serial is not good: 2024377670 (This can be ok, but is better change)
Change to : 2017041300

Do not worry , these 3 warnings are typical

SOA Expire Value out of recommended range
Reverse DNS does not contain the hostname
Reverse DNS is not a valid Hostname

 

[mgsolidus]

How can I change SOA Serial?
Edit: And what should I change it to?

 

[UFHH01]

Hi mgsolidus,

anything else?

Pls. check: => DNS Lookup for wwef.wweforums.net

Are those anything to worry about? Easy fix?

I always recommend to learn the meaning of issues/errors/problems, instead of blindly following suggestions from others.

First you should be aware, that CHANGING DNS - entries may take up to 24-48 hours, untill all worldwide nameservers are synced. When you modify DNS - entries, pls. check at least 24 hours later for actual results, when you use mxtoolbox.com .

At the moment, "mxtoolbox.com" complains as well about "Reverse DNS is not a valid Hostname" ( but you included the hostname of your server, which is the actual response, when connecting to your mail - server... Example:

Transcript: Connecting to 172.93.99.202

Transcript:

Transcript: 220 wwef.wweforums.net ESMTP Postfix [703 ms]

This is no serious notice/warning, but could be corrected with a correct SPF - entry AND the corresponding "A" entry for "wwef.wweforums.net". "mxtoolbox.com" will still complain, because it doesn't re-check correct SPF - entries and mail - servers answers.

 

[Frank.P]

How can I change SOA Serial?
Edit: And what should I change it to?

Steps
KB Plesk: Is it possible to change the SOA record values in domain zone files?