Hello,

in your configuration, you're relaying your emails to yourself.

action "relay" relay host"smtps://humaaraartha.in"  mail-from "@humaaraartha.in"

from smtpd.conf(5) :

host _relay-url_
                     Do not perform MX lookups but relay messages to the relay
                     host described by relay-url.

Since you're on a residential IP, i would suggest you to find a machine with a public v4/v6 address to use as a SMTP relay for both incoming and outcoming e-mails. (or you could use it directly to host your main opensmtpd instance)

Jarod G.

Le 06/09/2023 à 20:40, Sagar Acharya a écrit :
I checked all network settings. They are perfect. Here is my conf below 
exactly. There's some issue with it.

========== smtpd.conf ==========
table aliasesfile:/etc/smtpd/aliases
table whitelistfile:/etc/smtpd/whitelist

pki humaaraartha.in cert "path_to_fullchain"
pki humaaraartha.in key "path_to_privkey"

listen on 0.0.0.0 tls pki humaaraartha.in
listen on 0.0.0.0 smtps pki humaaraartha.in

action "local" maildir alias <aliases>
action "relay" relay host"smtps://humaaraartha.in"  mail-from "@humaaraartha.in"

match from mail-from <whitelist> for domain "humaaraartha.in" action "local"
match for any action "relay"
match for local action local
#match from any reject
=================

====== whitelist =====
sagaracha...@tutanota.com
anotherm...@gmail.com===================

Network error on destination MXs.
I cannot send mails. I can receive them.
Thanking you
Sagar Acharya
https://humaaraartha.in



3 Sept 2023, 22:26 byalex.misc...@web.de:

Hello Sagar,


is the port reachable from your system? Check with netcat:


nc -v mydomain.com 465



Is the certificate chain complete and are you trusting the root CA?
Verify with openssl:


openssl s_client -connect  mydomain.com:465



(I assume "mydomain.com" is the anonymized form of your actual domain)




Also, as has been requested before: If people here offer their help you
should at least be posting your smtpd.conf file



Kind regards,


Alex




On 03.09.23 16:00, Sagar Acharya wrote:

I have set spf records, TXT as follows:

"v=spf1 ipv4:{myipv4address} -all"

You can dig them at humaaraartha.in

Everything looks spick and span and the error of

smtp-out: No valid route for 
[connector:[]->[relay:mydomain.com,port=465,smtps,mx],0x0]

still remains.
Thanking you
Sagar Acharya
https://humaaraartha.in



3 Sept 2023, 16:45 bys...@gamindustri.fr:

Hello,

Port 465 with implicit TLS for Submissions isn't outdated since RFC 8314, it's 
even the recommended way to use Submissions as STARTTLS (mostly used on 
tcp/587) is a security nightmare.

More details in this PR i made two months ago :
https://github.com/stalwartlabs/website/pull/1#issue-1812289068

Jarod G.

Le 03/09/2023 à 00:26, Reio Remma a écrit :

Port 465 is the deprecated SMTPS submission port, you can't send mail to that.

If you're trying to send out e-mail from a residential IP (even with an 
unblocked outoing port 25), you'll find more problems e.g. receiving servers 
not accepting your e-mails because of your IP having no FCrDNS etc.

Good luck
Reio

On 02.09.2023 21:56, Sagar Acharya wrote:

Port 25 outgoing is blocked. You were correct. I swotched to port 465 with 
config

action "relay" relay hostsmtps://mydomain.com

Such is the error message:
Again there is "Network error on destination MXs"

mta connecting address=smtps://{ipv4}:465 host={xyz}
mta error reason=IO Error: Connection refused
smtp-out: Disabling route [] <-> {ipv4} for 15s
smtp-out: No valid route for 
[connector:[]->[relay:mydomain.com,port=465,smtps,mx],0x0]

DNS

mydomain.com     MX       10 mydomain.com
Port 465 is perfectly open from ISP.
Thanking you
Sagar Acharya
https://humaaraartha.in



2 Sept 2023, 19:58 bytphil...@potion-studios.com:

I tested all of the IPs from your output, and all of them listen on port 25 and 
a smtp server is answering. So if you are relaying to those via port 25, and 
you get a network error (I guess a timeout), then I guess your outgoing port 25 
is blocked. This is relatively common with residential uplinks, ask your ISP to 
open port 25 for you.

That said... I'm only guessing here.


On Sat, Sep 02, 2023 at 03:52:37PM +0200, Sagar Acharya wrote:

I made some progress. I am able to receive mails now but when I send mail 
fromu...@mydomain.com  tosagaracha...@tutanota.com  using mutt , I get,

result="TempFail" stat="Network error on destination MXs"
smtp-out: Enabling route [] <-> 81.3.6.162 (w1.tutanota.de) smtp-out: Enabling route [] 
<-> 185.205.69.211 (185.205.69.211) smtp-out: Enabling route [] <-> 81.3.6.165 
(w4.tutanota.de)
mta error reason=Connection timeout


DNS

mydomain.com.    86400      IN        MX        10 mail.mydomain.com.

Thanking you
Sagar Acharya
https://humaaraartha.in



2 Sept 2023, 05:45 bybub...@live.de:

Hello, pls show your config file.

Mit freundlichen Grüßen, V.Bubnov

01.09.2023, в 21:43, Sagar Acharya<sagaracha...@tutanota.com>  написал(а):

To enable being able to send mails from my server, I added tls certs.

Now when I send from this email id tou...@mydomain.com  , I get the error below.

530
5.5.1 Invalid command: Must issue an AUTH command first (in reply to MAIL FROM 
command)

Since STARTTLS is working on 25, I think things should go smoothly but it isn't 
so. Please help. Thanking you
Sagar Acharya
https://humaaraartha.in



1 Sept 2023, 20:52 bysagaracha...@tutanota.com:

I used mutt for accessing mail. I still am unable to send mail using my server. 
I can receive mails.

I also completed the whitelist. How can I do this?

I want to allow access only upto 25MB attachments from whitelisted emails and 
allow only 1email (only text based) per day from non-whitelisted emails. How do 
I do that?

How do I limit overall size of mailbox and auto-delete old mails?

Thanking you
Sagar Acharya
https://humaaraartha.in



1 Sept 2023, 14:04 bytphil...@potion-studios.com:

  From the doc (smtpd.conf(5)):

maildir [pathname [junk]]
Deliver the message to the maildir in pathname if
specified, or by default to ~/Maildir.

So given your config, you seem to get exactly what you configured.

For your "whitelist", create the match rules for your domains, and for 
everything else use a reject rule at the end.




On Fri, Sep 01, 2023 at 09:59:31AM +0200, Sagar Acharya wrote:

I got a mail, which lies in Maildir, however no mailbox is configured. Is there 
a default mailbox in alpine and how do I access the mail contents in

~/Maildir

My mails are under

~/Maildir/new/

Also, how do I whitelist email ids, say, I want mails only from

f...@bar.com
f...@bar2.com
f...@bar3.com

That's it, no other mails.
Thanking you
Sagar Acharya
https://humaaraartha.in



1 Sept 2023, 12:42 bysagaracha...@tutanota.com:

How do I do that? What CLI tool do I use?

While starting the daemon, the configuration is OK as given in prompt.

With the DNS configuration I have, where can I send a mail, atu...@mydomain.com 
 or atu...@mail.mydomain.com  ?

Thanking you
Sagar Acharya
https://humaaraartha.in



31 Aug 2023, 01:06 bystu...@gathman.org:

On Wed, 30 Aug 2023, Sagar Acharya wrote:

I'm facing an issue similar to a person a while ago available on archive. I use 
alpine, and the conf is as below

There is nothing in the mailbox.

Are you looking with alpine, or with CLI tools like ls?  Use CLI tools to check 
that you've configured smtpd to store incoming mail where you think you have.

I go so far as to use raw IPv6 for personal mailbox on various overlay mesh 
vpns like Cjdns and Yggdrasil (giving you personal authenticated IPs 
independent of any ISP).  I just caught up with an online friend that moved 
from Hawaii to New York.  Still works despite changes in ISP and ICANN domains.

Reply via email to