Hi,
When I turn on SPF verification in plesk, mailman can't send any mails anymore.
Error that shows up in the log is
**********
Feb 12 21:58:21 plesk01 /usr/lib64/plesk-9.0/psa-pc-remote[2624]: handlers_stderr: SKIP
Feb 12 21:58:21 plesk01 /usr/lib64/plesk-9.0/psa-pc-remote[2624]: SKIP during call 'check-quota' handler
Feb 12 21:58:21 plesk01 spf filter[6428]: Starting spf filter...
Feb 12 21:58:21 plesk01 spf filter[6428]: Wrong HELO hostname: localhost.localdomain
Feb 12 21:58:21 plesk01 /usr/lib64/plesk-9.0/psa-pc-remote[2624]: handlers_stderr: REJECT
Feb 12 21:58:21 plesk01 /usr/lib64/plesk-9.0/psa-pc-remote[2624]: REJECT during call 'spf' handler
Feb 12 21:58:21 plesk01 postfix/cleanup[6352]: 7896621A19: milter-reject: END-OF-MESSAGE from localhost[127.0.0.1]: 5.7.1 Command rejected; from=<mailmain e-mail goes here> to=<my e-mail goes here> proto=ESMTP helo=<localhost.localdomain>
Feb 12 21:58:21 plesk01 postfix/smtpd[6353]: disconnect from localhost[127.0.0.1]
**********
I searched the forums and found that some people sorted this by removing
non_smtpd_milters from the main.cf
I did that but it didn't help out. What helped was removing smtpd_milters but then, that same as turning all checks off.
I tried adding server IP's to the mynetworks but it didn't help.
I also tried moving server hostname to the first line in the hosts file so it would be picked instead of the localhost.localdomain but again without luck.
Did something change again if the fix that people suggested before is not working anymore ?
posconf -n output
*********
alias_maps = hash:/etc/aliases, hash:/var/spool/postfix/plesk/aliases
config_directory = /etc/postfix
disable_vrfy_command = yes
inet_interfaces = all
inet_protocols = ipv4
mailman_destination_recipient_limit = 1
message_size_limit = 26214400
milter_default_action = accept
milter_protocol = 6
mydestination = localhost.$mydomain, localhost, localhost.localdomain
mynetworks = 127.0.0.0/8
plesk_virtual_destination_recipient_limit = 1
sender_dependent_default_transport_maps = hash:/var/spool/postfix/plesk/sdd_transport_maps
smtp_send_xforward_command = yes
smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
smtp_tls_security_level = may
smtp_use_tls = no
smtpd_authorized_xforward_hosts = 127.0.0.0/8
smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_rbl_client zen.spamhaus.org, reject_rbl_client dnsbl.sorbs.net
smtpd_milters = inet:127.0.0.1:12768
smtpd_proxy_timeout = 3600s
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sender_restrictions = check_sender_access hash:/var/spool/postfix/plesk/blacklists, permit_sasl_authenticated
smtpd_timeout = 3600s
smtpd_tls_cert_file = /etc/postfix/postfix_default.pem
smtpd_tls_key_file = $smtpd_tls_cert_file
smtpd_tls_mandatory_protocols = !SSLv2,!SSLv3
smtpd_tls_security_level = may
smtpd_use_tls = yes
transport_maps = , hash:/var/spool/postfix/plesk/transport
virtual_alias_maps = $virtual_maps, hash:/var/spool/postfix/plesk/virtual
virtual_gid_maps = static:31
virtual_mailbox_base = /var/qmail/mailnames
virtual_mailbox_domains = $virtual_mailbox_maps, hash:/var/spool/postfix/plesk/virtual_domains
virtual_mailbox_maps = , hash:/var/spool/postfix/plesk/vmailbox
virtual_transport = plesk_virtual
virtual_uid_maps = static:110
*********
p.s.
http://kb.odin.com/en/124414 <---- This is what I tried first. But it didn't change anything.
When I turn on SPF verification in plesk, mailman can't send any mails anymore.
Error that shows up in the log is
**********
Feb 12 21:58:21 plesk01 /usr/lib64/plesk-9.0/psa-pc-remote[2624]: handlers_stderr: SKIP
Feb 12 21:58:21 plesk01 /usr/lib64/plesk-9.0/psa-pc-remote[2624]: SKIP during call 'check-quota' handler
Feb 12 21:58:21 plesk01 spf filter[6428]: Starting spf filter...
Feb 12 21:58:21 plesk01 spf filter[6428]: Wrong HELO hostname: localhost.localdomain
Feb 12 21:58:21 plesk01 /usr/lib64/plesk-9.0/psa-pc-remote[2624]: handlers_stderr: REJECT
Feb 12 21:58:21 plesk01 /usr/lib64/plesk-9.0/psa-pc-remote[2624]: REJECT during call 'spf' handler
Feb 12 21:58:21 plesk01 postfix/cleanup[6352]: 7896621A19: milter-reject: END-OF-MESSAGE from localhost[127.0.0.1]: 5.7.1 Command rejected; from=<mailmain e-mail goes here> to=<my e-mail goes here> proto=ESMTP helo=<localhost.localdomain>
Feb 12 21:58:21 plesk01 postfix/smtpd[6353]: disconnect from localhost[127.0.0.1]
**********
I searched the forums and found that some people sorted this by removing
non_smtpd_milters from the main.cf
I did that but it didn't help out. What helped was removing smtpd_milters but then, that same as turning all checks off.
I tried adding server IP's to the mynetworks but it didn't help.
I also tried moving server hostname to the first line in the hosts file so it would be picked instead of the localhost.localdomain but again without luck.
Did something change again if the fix that people suggested before is not working anymore ?
posconf -n output
*********
alias_maps = hash:/etc/aliases, hash:/var/spool/postfix/plesk/aliases
config_directory = /etc/postfix
disable_vrfy_command = yes
inet_interfaces = all
inet_protocols = ipv4
mailman_destination_recipient_limit = 1
message_size_limit = 26214400
milter_default_action = accept
milter_protocol = 6
mydestination = localhost.$mydomain, localhost, localhost.localdomain
mynetworks = 127.0.0.0/8
plesk_virtual_destination_recipient_limit = 1
sender_dependent_default_transport_maps = hash:/var/spool/postfix/plesk/sdd_transport_maps
smtp_send_xforward_command = yes
smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
smtp_tls_security_level = may
smtp_use_tls = no
smtpd_authorized_xforward_hosts = 127.0.0.0/8
smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_rbl_client zen.spamhaus.org, reject_rbl_client dnsbl.sorbs.net
smtpd_milters = inet:127.0.0.1:12768
smtpd_proxy_timeout = 3600s
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sender_restrictions = check_sender_access hash:/var/spool/postfix/plesk/blacklists, permit_sasl_authenticated
smtpd_timeout = 3600s
smtpd_tls_cert_file = /etc/postfix/postfix_default.pem
smtpd_tls_key_file = $smtpd_tls_cert_file
smtpd_tls_mandatory_protocols = !SSLv2,!SSLv3
smtpd_tls_security_level = may
smtpd_use_tls = yes
transport_maps = , hash:/var/spool/postfix/plesk/transport
virtual_alias_maps = $virtual_maps, hash:/var/spool/postfix/plesk/virtual
virtual_gid_maps = static:31
virtual_mailbox_base = /var/qmail/mailnames
virtual_mailbox_domains = $virtual_mailbox_maps, hash:/var/spool/postfix/plesk/virtual_domains
virtual_mailbox_maps = , hash:/var/spool/postfix/plesk/vmailbox
virtual_transport = plesk_virtual
virtual_uid_maps = static:110
*********
p.s.
http://kb.odin.com/en/124414 <---- This is what I tried first. But it didn't change anything.
Last edited: