Hi David.
yeah i check it with this service.
a little iproved my config. sorry for too many words here
just i have problem that some domains (mail servers) cant get our mail
with error
/Hi. This is the James mail server at KPST-SRV-JAMES. I'm afraid I
wasn't able to deliver your message to the following addresses. This is
a permanent error; I've given up. Sorry it didn't work out. Below I
include the list of recipients and the reason why I was unable to
deliver your message. Original email subject: Проверка доступности с
нового сервера Failed recipient(s): sher...@belovskaya.ru Error message:
Too many retries failure. Bouncing after 3 retries./
so i dont undertand what i do wrong. but mostly about 90% others our
external clients works with our mail just fine
here config smtp
<smtpservers>
<smtpserver enabled="true">
<jmxName>smtpserver-global</jmxName>
<bind>0.0.0.0:25</bind>
<authorizedAddresses>127.0.0.0/8, 172.16.149.0/24</authorizedAddresses>
<auth>
<announce>never</announce>
<requireSSL>false</requireSSL>
<plainAuthEnabled>false</plainAuthEnabled>
</auth>
<tls socketTLS="false" startTLS="true">
<privateKey>file://../cert/mail.kps-t.ru-key.pem</privateKey>
<certificates>file://../cert/mail.kps-t.ru-chain.pem</certificates>
</tls>
<connectiontimeout>360</connectiontimeout>
<connectionLimit>0</connectionLimit>
<connectionLimitPerIP>0</connectionLimitPerIP>
<connectionBacklog>200</connectionBacklog>
<verifyIdentity>false</verifyIdentity>
<maxmessagesize>25M</maxmessagesize>
<addressBracketsEnforcement>false</addressBracketsEnforcement>
<helloName autodetect="false">mail.kps-t.ru</helloName>
<smtpGreeting>mail.kps-t.ru</smtpGreeting>
<heloEnforcement>false</heloEnforcement>
<handlerchain>
<handler
class="org.apache.james.smtpserver.fastfail.ValidRcptHandler"/>
<handler class="org.apache.james.smtpserver.CoreCmdHandlerLoader"/>
</handlerchain>
</smtpserver>
<smtpserver enabled="true">
<jmxName>smtpserver-TLS</jmxName>
<bind>0.0.0.0:465</bind>
<helloName autodetect="false">mail.kps-t.ru</helloName>
<connectionBacklog>200</connectionBacklog>
<tls socketTLS="true" startTLS="false">
<privateKey>file://../cert/mail.kps-t.ru-key.pem</privateKey>
<certificates>file://../cert/mail.kps-t.ru-chain.pem</certificates>
</tls>
<connectiontimeout>360</connectiontimeout>
<connectionLimit>0</connectionLimit>
<connectionLimitPerIP>0</connectionLimitPerIP>
<auth>
<announce>always</announce>
<requireSSL>true</requireSSL>
<plainAuthEnabled>true</plainAuthEnabled>
</auth>
<authorizedAddresses>127.0.0.0/8</authorizedAddresses>
<verifyIdentity>true</verifyIdentity>
<maxmessagesize>100M</maxmessagesize>
<addressBracketsEnforcement>true</addressBracketsEnforcement>
<smtpGreeting>mail.kps-t.ru</smtpGreeting>
<handlerchain>
<handler
class="org.apache.james.smtpserver.fastfail.ValidRcptHandler"/>
<handler
class="org.apache.james.smtpserver.CoreCmdHandlerLoader"/>
</handlerchain>
</smtpserver>
<smtpserver enabled="true">
<jmxName>smtpserver-authenticated</jmxName>
<bind>0.0.0.0:587</bind>
<helloName autodetect="false">mail.kps-t.ru</helloName>
<connectionBacklog>200</connectionBacklog>
<tls socketTLS="false" startTLS="true">
<privateKey>file://../cert/mail.kps-t.ru-key.pem</privateKey>
<certificates>file://../cert/mail.kps-t.ru-chain.pem</certificates>
</tls>
<connectiontimeout>360</connectiontimeout>
<connectionLimit>0</connectionLimit>
<connectionLimitPerIP>0</connectionLimitPerIP>
<auth>
<announce>always</announce>
<requireSSL>true</requireSSL>
<plainAuthEnabled>true</plainAuthEnabled>
</auth>
<authorizedAddresses>127.0.0.0/8</authorizedAddresses>
<verifyIdentity>true</verifyIdentity>
<maxmessagesize>100M</maxmessagesize>
<addressBracketsEnforcement>true</addressBracketsEnforcement>
<smtpGreeting>mail.kps-t.ru</smtpGreeting>
<handlerchain>
<handler
class="org.apache.james.smtpserver.fastfail.ValidRcptHandler"/>
<handler
class="org.apache.james.smtpserver.CoreCmdHandlerLoader"/>
</handlerchain>
</smtpserver>
</smtpservers>
29.04.2025 22:38, David Matthews пишет:
so my config for now is good?
can i send full smtp config to u? :)
hi
You can confirm Quan's diagnosis at
https://mxtoolbox.com/diagnostic.aspx
These days (for the last 15 years at least) a mail exchanger configured as an
open relay is considered a gross misconfiguration and your domain will likely
get blocked for facilitating abuse.
--
David Matthews
m...@dmatthews.org
---------------------------------------------------------------------
To unsubscribe, e-mail:server-user-unsubscr...@james.apache.org
For additional commands, e-mail:server-user-h...@james.apache.org
--
С уважением,
Руководитель ИТ ООО <КПС-Технологии>
Терсков Илья Андреевич
Тел.: +7 (3843) 73-14-42
Моб.: +7-996-415-16-29
e-mail:i.ters...@kps-t.ru
