Greg Sims via Postfix-users:
> Hello,
>
> We found the following in our email logs this morning. I ran
> "collate" and here is the result:
>
> May 29 02:10:04 mail01.raystedman.org postfix/bounce[31220]:
> AFC7030537E6: postmaster non-delivery notification: 7A80D32EDB2C
> May 29 02:10:04 mail01.raystedman.org postfix/cleanup[31245]:
> 7A80D32EDB2C: message-id=<20240529091004.7a80d32ed...@mail01.raystedman.org>
> May 29 02:10:04 mail01.raystedman.org postfix/qmgr[27525]:
> 7A80D32EDB2C: from=<double-bou...@mail01.raystedman.org>, size=3380,
> nrcpt=1 (queue active)
> May 29 02:10:04 mail01.raystedman.org postfix/t122/smtp[31017]:
> Trusted TLS connection established to
> aspmx.l.google.com[142.250.141.27]:25: TLSv1.3 with cipher
> TLS_AES_256_GCM_SHA384 (256/2
> 56 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest
> SHA256
> May 29 02:10:05 mail01.raystedman.org postfix/t122/smtp[31017]:
> 7A80D32EDB2C: host aspmx.l.google.com[142.250.141.27] said: 421-4.7.26
> Your email has been rate limited because it is unauthenticated. Gmail
> 421-4.7.26 requires all senders to authenticate with either SPF or
> DKIM. 421-4.7.26 421-4.7.26 Authentication results: 421-4.7.26 DKIM
> = did not pass 421-4.7.26 SPF [mail01.raystedman.org] with ip:
> [209.73.152.122] = did not pass 421-4.7.26 421-4.7.26 For
> instructions on setting up authentication, go to 421 4.7.26
> https://support.google.com/mail/answer/81126#authentication
> d2e1a72fcca58-6f8fc04d880si9913771b3a.16 - gsmtp (in reply to end of
> DATA command)
> May 29 02:10:05 mail01.raystedman.org postfix/t122/smtp[31017]:
> Trusted TLS connection established to
> alt2.aspmx.l.google.com[74.125.126.26]:25: TLSv1.3 with cipher
> TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519
> server-signature ECDSA (P-256) server-digest SHA256
> May 29 02:10:05 mail01.raystedman.org postfix/t122/smtp[31017]:
> 7A80D32EDB2C: to=<bou...@raystedman.org>, orig_to=<bounce>,
> relay=alt2.aspmx.l.google.com[74.125.126.26]:25, delay=1.2,
> delays=0/0/0.92/0.3, dsn=4.7.26, status=deferred (host
> alt2.aspmx.l.google.com[74.125.126.26] said: 421-4.7.26 Your email has
> been rate limited because it is unauthenticated. Gmail 421-4.7.26
> requires all senders to authenticate with either SPF or DKIM.
> 421-4.7.26 421-4.7.26 Authentication results: 421-4.7.26 DKIM = did
> not pass 421-4.7.26 SPF [mail01.raystedman.org] with ip:
> [209.73.152.122] = did not pass 421-4.7.26 421-4.7.26 For
> instructions on setting up authentication, go to 421 4.7.26
> https://support.google.com/mail/answer/81126#authentication
> ca18e2360f4ac-7e9c1b21032si328213139f.60 - gsmtp (in reply to end of
> DATA command))
>
> main.cf contains:
>
> # 24-05-28
> # email comes from raystedman.org instead of mail0.raystedman.org
> # note: the mail01 subdomain does not need a SPF record in DNS as a result
> myorigin = raystedman.org
>
> I hoped this would allow the message being sent to be
> from=<double_bou...@raystedman.org>. Please note the qmgr record
> above shows the name of the sending machine -- mail01.raystedman.org.
How about using sender_canoical_maps?
sender_canonical_maps = inline:{
{ double-bou...@mail01.raystedman.ora = double_bou...@raystedman.org } }
Why are you sending these notifications to Google?
Wietse
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
