• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Plesk 12.5 - Mailmain can't send mail when SPF check is turned on

NitkoN

New Pleskian
Hi,

When I turn on SPF verification in plesk, mailman can't send any mails anymore.
Error that shows up in the log is
**********
Feb 12 21:58:21 plesk01 /usr/lib64/plesk-9.0/psa-pc-remote[2624]: handlers_stderr: SKIP
Feb 12 21:58:21 plesk01 /usr/lib64/plesk-9.0/psa-pc-remote[2624]: SKIP during call 'check-quota' handler
Feb 12 21:58:21 plesk01 spf filter[6428]: Starting spf filter...
Feb 12 21:58:21 plesk01 spf filter[6428]: Wrong HELO hostname: localhost.localdomain
Feb 12 21:58:21 plesk01 /usr/lib64/plesk-9.0/psa-pc-remote[2624]: handlers_stderr: REJECT
Feb 12 21:58:21 plesk01 /usr/lib64/plesk-9.0/psa-pc-remote[2624]: REJECT during call 'spf' handler
Feb 12 21:58:21 plesk01 postfix/cleanup[6352]: 7896621A19: milter-reject: END-OF-MESSAGE from localhost[127.0.0.1]: 5.7.1 Command rejected; from=<mailmain e-mail goes here> to=<my e-mail goes here> proto=ESMTP helo=<localhost.localdomain>
Feb 12 21:58:21 plesk01 postfix/smtpd[6353]: disconnect from localhost[127.0.0.1]
**********

I searched the forums and found that some people sorted this by removing
non_smtpd_milters from the main.cf
I did that but it didn't help out. What helped was removing smtpd_milters but then, that same as turning all checks off.

I tried adding server IP's to the mynetworks but it didn't help.
I also tried moving server hostname to the first line in the hosts file so it would be picked instead of the localhost.localdomain but again without luck.

Did something change again if the fix that people suggested before is not working anymore ?

posconf -n output
*********
alias_maps = hash:/etc/aliases, hash:/var/spool/postfix/plesk/aliases
config_directory = /etc/postfix
disable_vrfy_command = yes
inet_interfaces = all
inet_protocols = ipv4
mailman_destination_recipient_limit = 1
message_size_limit = 26214400
milter_default_action = accept
milter_protocol = 6
mydestination = localhost.$mydomain, localhost, localhost.localdomain
mynetworks = 127.0.0.0/8
plesk_virtual_destination_recipient_limit = 1
sender_dependent_default_transport_maps = hash:/var/spool/postfix/plesk/sdd_transport_maps
smtp_send_xforward_command = yes
smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
smtp_tls_security_level = may
smtp_use_tls = no
smtpd_authorized_xforward_hosts = 127.0.0.0/8
smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_rbl_client zen.spamhaus.org, reject_rbl_client dnsbl.sorbs.net
smtpd_milters = inet:127.0.0.1:12768
smtpd_proxy_timeout = 3600s
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sender_restrictions = check_sender_access hash:/var/spool/postfix/plesk/blacklists, permit_sasl_authenticated
smtpd_timeout = 3600s
smtpd_tls_cert_file = /etc/postfix/postfix_default.pem
smtpd_tls_key_file = $smtpd_tls_cert_file
smtpd_tls_mandatory_protocols = !SSLv2,!SSLv3
smtpd_tls_security_level = may
smtpd_use_tls = yes
transport_maps = , hash:/var/spool/postfix/plesk/transport
virtual_alias_maps = $virtual_maps, hash:/var/spool/postfix/plesk/virtual
virtual_gid_maps = static:31
virtual_mailbox_base = /var/qmail/mailnames
virtual_mailbox_domains = $virtual_mailbox_maps, hash:/var/spool/postfix/plesk/virtual_domains
virtual_mailbox_maps = , hash:/var/spool/postfix/plesk/vmailbox
virtual_transport = plesk_virtual
virtual_uid_maps = static:110
*********


p.s.
http://kb.odin.com/en/124414 <---- This is what I tried first. But it didn't change anything.
 
Last edited:
I'v opened up ticket about this if anyone could have a look at it and see if there is solution to this problem
#2045172
It would be much appreciated.
 
I'v opened up ticket about this if anyone could have a look at it and see if there is solution to this problem
#2045172
It would be much appreciated.
As far as I see this ticket still under support team investigation. Let's wait solution.
 
Hi,
I was the same problem and I've find in file /etc/postfix/main.cf:
myhostname = localhost.localdomain
I've commented this line and now it don't see helo wrong sending mail.
I hope this helps
 
Back
Top