Scrollout F1 530 error

aleMau5 · Post by **aleMau5** » 2016-03-04 20:06

Does anyone knows about a particular reason why Scrollout F1 doesn't work with HMS?

Every time F1 tries to deliver an email to HMS I get "530 SMTP authentication is required", I've done some testing with a little SMTP email sender tool, and here is what I know so far:

-My HMS is receiving external email just fine.
-If I send an email with the SMTP tool from a machine on my internal servers subnet, directly to HMS it gets delivered OK (without auth. It acts just as an external sender email address).
-If I send the same email from the same machine, to F1. F1 receives it then tries to send it to HMS, it gets the 530 error.
-If I send, the same email again, but this time from the same machine that is hosting my HMS, to F1. F1 gets it, then connects to HMS and delivers it just fine.

I've tried adding mi F1 IP Range, without auth. required, adding as an incoming relay. Nothing seems to work.

Has anyone tried this?, any suggestions?

Thanks!

jimimaseye · Post by **jimimaseye** » 2016-03-04 20:10

The cause will be with your IP RANGES and/or ROUTES.

Please show screenshots of all.

all post a log showing the SMTP section of an email being received/bounced.

aleMau5 · Post by **aleMau5** » 2016-03-04 20:44

Thanks for the quick reply...

Here's the log for when I tried sending an email from gmail, thru F1

on HMS:

Code: Select all

"SMTPD"	5324	1615	"2016-03-04 12:36:05.436"	"173.201.193.172"	"RECEIVED: QUIT"
"SMTPD"	5324	1615	"2016-03-04 12:36:05.436"	"173.201.193.172"	"SENT: 221 goodbye"
"DEBUG"	5920	"2016-03-04 12:36:05.436"	"Ending session 1615"
"DEBUG"	5324	"2016-03-04 12:36:06.996"	"Creating session 1633"
"TCPIP"	5324	"2016-03-04 12:36:06.996"	"TCP - 192.168.1.30 connected to 192.168.1.121:143."
"DEBUG"	5324	"2016-03-04 12:36:06.996"	"TCP connection started for session 1630"
"DEBUG"	8368	"2016-03-04 12:36:07.028"	"Ending session 1630"
"DEBUG"	5324	"2016-03-04 12:36:11.974"	"Creating session 1634"
"TCPIP"	5324	"2016-03-04 12:36:11.974"	"TCP - 192.168.1.30 connected to 192.168.1.121:143."
"DEBUG"	5324	"2016-03-04 12:36:11.974"	"TCP connection started for session 1633"
"DEBUG"	5920	"2016-03-04 12:36:12.036"	"Ending session 1633"
"DEBUG"	8368	"2016-03-04 12:36:21.523"	"Ending session 1628"
"DEBUG"	5920	"2016-03-04 12:36:21.538"	"Ending session 1627"
"DEBUG"	5324	"2016-03-04 12:36:24.362"	"Creating session 1635"

ON F1 (192.168.1.121 is my HMS):

Code: Select all

Mar 4 12:35:58 mailguard postfix/postscreen[12985]: CONNECT from [209.85.213.50]:35490 to [192.168.1.30]:25
Mar 4 12:35:58 mailguard postfix/postscreen[12985]: WHITELISTED [209.85.213.50]:35490
Mar 4 12:36:08 mailguard postfix/smtpd[12986]: connect from mail-vk0-f50.google.com[209.85.213.50]
Mar 4 12:36:08 mailguard postfix/smtpd[12986]: Anonymous TLS connection established from mail-vk0-f50.google.com[209.85.213.50]: TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)
Mar 4 12:36:14 mailguard postfix/smtpd[12986]: NOQUEUE: reject: RCPT from mail-vk0-f50.google.com[209.85.213.50]: 550 5.1.1 aferrari@grupoayre.com: Recipient address rejected: undeliverable address: host 192.168.1.121[192.168.1.121] said: 530 SMTP authentication is required. (in reply to RCPT TO command); from=mXXXXXX@gmail.com to=aXXXXX@mydomain.com proto=ESMTP helo=mail-vk0-f50.google.com
Mar 4 12:36:14 mailguard postfix/smtpd[12986]: disconnect from mail-vk0-f50.google.com[209.85.213.50]
Mar 4 12:40:54 mailguard postfix/anvil[13325]: statistics: max connection rate 1/180s for (smtpd:209.85.213.50) at Mar 4 12:36:08
Mar 4 12:40:54 mailguard postfix/anvil[13325]: statistics: max connection count 1 for (smtpd:209.85.213.50) at Mar 4 12:36:08
Mar 4 12:40:54 mailguard postfix/anvil[13325]: statistics: max message rate 1/180s for (smtpd:209.85.213.50) at Mar 4 12:36:09
Mar 4 12:40:54 mailguard postfix/anvil[13325]: statistics: max recipient rate 1/180s for (smtpd:209.85.213.50) at Mar 4 12:36:09
Mar 4 12:40:54 mailguard postfix/anvil[13325]: statistics: max newtls rate 1/180s for (smtpd:209.85.213.50) at Mar 4 12:36:08
Mar 4 12:40:54 mailguard postfix/anvil[13325]: statistics: max cache size 1 at Mar 4 12:36:08

I don't have entries on my SMTP routes.

Thanks again for your help!

jimimaseye · Post by **jimimaseye** » 2016-03-04 20:56

That log file has no smtp entries. Enable smtp logging, try to send in an email and then post the log. And post your diagnostic report please.

aleMau5 · Post by **aleMau5** » 2016-03-04 21:02

It was enabled, for some reason it's not even logging the transaction...

jimimaseye · Post by **jimimaseye** » 2016-03-04 21:15

jimimaseye wrote:And post your diagnostic report please.

aleMau5 · Post by **aleMau5** » 2016-03-04 21:25

jimimaseye wrote:
jimimaseye wrote:And post your diagnostic report please.

SMTP logging was enabled on the first log I posted. I cleaned the log, sent the email... and that's all that was posted on the log files.

jimimaseye · Post by **jimimaseye** » 2016-03-04 21:31

That isnt the DIAGNOSTIC report.

Go in to UTILITIES - DIAGNOSTICS, choose your domain from the drop down and then run the report ("start") and then click 'copy to clipboard' and paste it here.

Also confirm:

What IP RANGES do you have?
Is your domain " grupoayre.com " ? (look at the spelling)

aleMau5 · Post by **aleMau5** » 2016-03-04 21:47

jimimaseye wrote:That isnt the DIAGNOSTIC report.

Go in to UTILITIES - DIAGNOSTICS, choose your domain from the drop down and then run the report ("start") and then click 'copy to clipboard' and paste it here.

Also confirm:

What IP RANGES do you have?
Is your domain " grupoayre.com " ? (look at the spelling)

Oh, my bad... It's been a long day

Mi IP Ranges, are the default (I just checked out external to external, on INTERNET range) Like I said, I tried adding my mail gateway IP range, with authentication off, without luck.

This HMS has been running fine, for the past 4 years-ish. And I do have SPAM and virus protection on it. But I really want to add the email gateway, so the HMS host only focus on the email processing part. (and maybe it will help someone else)

This isn't my first try with Scrollout F1, I tried it about two years ago, and ran into the same issue, I thought somebody would know a bit more about it by now.

Thanks again for your help!

(I do plan to fix the "Full Paths" issue BTW

)

jimimaseye · Post by **jimimaseye** » 2016-03-04 21:55

That DIAG shows it is trying to connect to itself on 127.0.0.1 from the MX records.

Something isnt right there. Take a look at you DNS MX records from within your lan. Do you have internal DNS zones set? (Currently that doesnt help us diagnose).

Anyway.... silly question but have you double checked the configuration of the F1 wotsit on how it relays to HMS? Can you detail the configuration?

(It doesnt make sense HMS not reporting anything in the logs if you say that F1 is actually communicating with it).

aleMau5 · Post by **aleMau5** » 2016-03-04 22:12

jimimaseye wrote:That DIAG shows it is trying to connect to itself on 127.0.0.1 from the MX records.

Something isnt right there. Take a look at you DNS MX records from within your lan. Do you have internal DNS zones set? (Currently that doesnt help us diagnose).

Anyway.... silly question but have you double checked the configuration of the F1 wotsit on how it relays to HMS? Can you detail the configuration?

(It doesnt make sense HMS not reporting anything in the logs if you say that F1 is actually communicating with it).

Whoops, there was an entry on the local HOSTS file

Is it looking better now? (I sent another email from gmail, going thru the F1, and again, it didn't showed up in the logs)

jimimaseye · Post by **jimimaseye** » 2016-03-04 22:19

It should be showing the wan side address.

aleMau5 · Post by **aleMau5** » 2016-03-04 22:34

jimimaseye wrote:It should be showing the wan side address.

Well If I change my internal DNS record to point to the external IP of HMS , It won't connect (?)

Is setting a gateway so hard? Scrollout F1 said 30 minutes, and I've been trying for almost two years

:$ Maybe POSTFIX is really jealous of HMS.

aleMau5 · Post by **aleMau5** » 2016-03-04 22:36

jimimaseye wrote:It should be showing the wan side address.

Oh, I forgot to mention, if I use F1 as a SMTP sending relay to HMS, it works OK.

mattg · Post by **mattg** » 2016-03-05 01:42

aleMau5 wrote:... and again, it didn't showed up in the logs)

No logs means no connection

aleMau5 wrote: If I change my internal DNS record to point to the external IP of HMS , It won't connect (?)

Yes it should.
This is called 'loopback' and is fairly standard with gateways... Even many home grade modem routers do this

aleMau5 wrote:Whoops, there was an entry on the local HOSTS file

Anything else in your hosts file.

With a local DNS, or by using loopback, you shouldn't need to use the hosts file

aleMau5 · Post by **aleMau5** » 2016-03-05 18:26

mattg wrote: No logs means no connection

But it is showing in the logs (In some ways, at least) 192.168.1.30 being F1

Code: Select all

"DEBUG"   5324   "2016-03-04 12:36:06.996"   "Creating session 1633"
"TCPIP"   5324   "2016-03-04 12:36:06.996"   "TCP - 192.168.1.30 connected to 192.168.1.121:143."
"DEBUG"   5324   "2016-03-04 12:36:06.996"   "TCP connection started for session 1630"
"DEBUG"   8368   "2016-03-04 12:36:07.028"   "Ending session 1630"
"DEBUG"   5324   "2016-03-04 12:36:11.974"   "Creating session 1634"
"TCPIP"   5324   "2016-03-04 12:36:11.974"   "TCP - 192.168.1.30 connected to 192.168.1.121:143."
"DEBUG"   5324   "2016-03-04 12:36:11.974"   "TCP connection started for session 1633"
"DEBUG"   5920   "2016-03-04 12:36:12.036"   "Ending session 1633"

mattg wrote:
Yes it should.
This is called 'loopback' and is fairly standard with gateways... Even many home grade modem routers do this

Why should I point all my clients inside our LAN network, to use the external IP of my firewall with a DNS record, when I can simply point them directly to HMS? I'm sorry, I'm a bit confused on that.

mattg wrote: With a local DNS, or by using loopback, you shouldn't need to use the hosts file

Like I said, "whoops"

MAybe I was testing something I left that there... It's gone now.

jimimaseye · Post by **jimimaseye** » 2016-03-05 18:36

aleMau5 wrote: But it is showing in the logs (In some ways, at least) 192.168.1.30 being F1

Code: Select all

"DEBUG"   5324   "2016-03-04 12:36:06.996"   "Creating session 1633"
"TCPIP"   5324   "2016-03-04 12:36:06.996"   "TCP - 192.168.1.30 connected to 192.168.1.121:143."
"DEBUG"   5324   "2016-03-04 12:36:06.996"   "TCP connection started for session 1630"
"DEBUG"   8368   "2016-03-04 12:36:07.028"   "Ending session 1630"
"DEBUG"   5324   "2016-03-04 12:36:11.974"   "Creating session 1634"
"TCPIP"   5324   "2016-03-04 12:36:11.974"   "TCP - 192.168.1.30 connected to 192.168.1.121:143."
"DEBUG"   5324   "2016-03-04 12:36:11.974"   "TCP connection started for session 1633"
"DEBUG"   5920   "2016-03-04 12:36:12.036"   "Ending session 1633"

Those logs show the F1Scroll connecting by IMAP (port 143), not SMTP. You need your gateway to pass by SMTP. Otherwise it looks like you have your Scroll trying to 'read HMS' (just like a mail client) and that assumes HMS has therefore already received the email. Which it hasnt. Surely it should be

WORLD ---SMTP port 25 ---> gateway [f1Scroll port 25...scan and sanitise] ---> smtp port 25 (or whatever you choose) ----> HMS <---IMAP 143 ---- email clients

aleMau5 wrote: Why should I point all my clients inside our LAN network, to use the external IP of my firewall with a DNS record, when I can simply point them directly to HMS? I'm sorry, I'm a bit confused on that.

You dont point email clients to your MX records, you point them to your mailserver via another internal dns record (host file or A or CNAME records etc). MX records are for WAN side DNS servers for the worlds external mail servers to be able to find your mail server and must be pointing to the external ip address. You dont need MX records on your LAN side at all.

aleMau5 · Post by **aleMau5** » 2016-03-05 19:18

jimimaseye wrote: Those logs show the F1Scroll connecting by IMAP (port 143), not SMTP. You need your gateway to pass by SMTP. Otherwise it looks like you have your Scroll trying to 'read HMS' (just like a mail client) and that assumes HMS has therefore already received the email. Which it hasnt. Surely it should be

WORLD ---SMTP port 25 ---> gateway [f1Scroll port 25...scan and sanitise] ---> smtp port 25 (or whatever you choose) ----> HMS <---IMAP 143 ---- email clients

This is exactly what I'm trying to do. If I route incoming emails from 'WORLD' directly to HMS, they get delivered. If I route them to F1, F1 gets them, but fails on delivering them to HMS. Even after setting up F1 internal LAN IP as no authentication needed. It doesn't happen the other way around tho, HMS sends messages fine, using F1 as a relay.

F1 has an special account on HMS, which is used for SPAM training, maybe It was trying to read that (143 port on the logs). I know the routes and the ports are OK because, like I said, If I send an email, to an account on MHS, directly to F1, from the server that is hosting HMS. It goes to F1, then comes back to HMS just fine.

jimimaseye wrote: You dont point email clients to your MX records, you point them to your mailserver via another internal dns record (host file or A or CNAME records etc). MX records are for WAN side DNS servers for the worlds external mail servers to be able to find your mail server and must be pointing to the external ip address. You dont need MX records on your LAN side at all.

This is the way that I have it, right now. And it has been working really good for the past 4 years...

This issue doesn't let me sleep at night.

jimimaseye · Post by **jimimaseye** » 2016-03-05 19:24

aleMau5 wrote:
jimimaseye wrote: Those logs show the F1Scroll connecting by IMAP (port 143), not SMTP. You need your gateway to pass by SMTP. Otherwise it looks like you have your Scroll trying to 'read HMS' (just like a mail client) and that assumes HMS has therefore already received the email. Which it hasnt. Surely it should be

WORLD ---SMTP port 25 ---> gateway [f1Scroll port 25...scan and sanitise] ---> smtp port 25 (or whatever you choose) ----> HMS <---IMAP 143 ---- email clients
This is exactly what I'm trying to do. If I route incoming emails from 'WORLD' directly to HMS, they get delivered. If I route them to F1, F1 gets them, but fails on delivering them to HMS.

Im afraid my answer wont be a popular one: I guess you need to contact support forums for Scroll F1 on how to configure it then. Clearly it is not currently configured properly. Sorry.

aleMau5 · Post by **aleMau5** » 2016-03-05 19:41

jimimaseye wrote: Im afraid my answer wont be a popular one: I guess you need to contact support forums for Scroll F1 on how to configure it then. Clearly it is not currently configured properly. Sorry.

*Sighs*

I guess that's my only choice I guess... Thanks a lot for trying

You know what, I'm actually going to setup another fresh install of HMS on new server, just to test if this isn't an issue that's been carried, due to migration from older versions of HMS. Will post the results later. (Maybe they'll be useful to someone, some day...)

Thanks, again!

jimimaseye · Post by **jimimaseye** » 2016-03-05 19:47

I am confident that this is ZERO to do with HMS and is purely a configuration error (of your firewalls, DNS, ports or ScrollF1). HMS can only be at fault by doing something wrongly - and it cant do anything if it doesnt receive things in the first place. Its logs only report what it receives and it isnt receiving anything

jimimaseye · Post by **jimimaseye** » 2016-03-05 19:56

Out of interest, can you post your "traffic" screenshot (like this):

https://e9f530f0-a-85489448-s-sites.goo ... raffic.jpg

aleMau5 · Post by **aleMau5** » 2016-03-05 20:10

jimimaseye wrote:Out of interest, can you post your "traffic" screenshot (like this):

https://e9f530f0-a-85489448-s-sites.goo ... raffic.jpg

Sure, it's nothing special, really.

jimimaseye · Post by **jimimaseye** » 2016-03-05 20:15

Have you actually entered and authenticating username and password on that screen?

aleMau5 · Post by **aleMau5** » 2016-03-05 20:29

jimimaseye wrote:Have you actually entered and authenticating username and password on that screen?

No, you need to add an account on HMS, which Scrollout F1 will use to deliver reports, and quarantined emails (Which then you move to special "Good" and "BAD" folders, so F1 learns about them). F1 sets the password you need to use for this account. And that's working ok.

As for external email coming to F1, HMS should treat it as regular external email, after all; F1 is only sending it to HMS based on the domain, and not specifically to the users inbox.

jimimaseye · Post by **jimimaseye** » 2016-03-05 20:35

aleMau5 wrote: As for external email coming to F1, HMS should treat it as regular external email, after all; F1 is only sending it to HMS based on the domain, and not specifically to the users inbox.

Yes, but HMS is simply not being contacted and delivered anything by SMTP (only IMAP). Scrollout F1 support required.

aleMau5 · Post by **aleMau5** » 2016-03-05 20:53

jimimaseye wrote:
aleMau5 wrote: Yes, but HMS is simply not being contacted and delivered anything by SMTP (only IMAP). Scrollout F1 support required.

*Only sometimes, let me show a log from HMS. This was a message I sent to F1 , from the HMS host:

Code: Select all

"SMTPD"	12760	16917	"2016-03-05 12:47:49.236"	"192.168.1.30"	"SENT: 220 Bienvenido al sistema de correos de Grupo Ayre Mail Server"
"SMTPD"	12684	16917	"2016-03-05 12:47:49.236"	"192.168.1.30"	"RECEIVED: EHLO mailguard.grupoayre.com"
"SMTPD"	12684	16917	"2016-03-05 12:47:49.236"	"192.168.1.30"	"SENT: 250-mail.grupoayre.com[nl]250-SIZE 50480000[nl]250-AUTH LOGIN PLAIN[nl]250 HELP"
"SMTPD"	12452	16917	"2016-03-05 12:47:49.236"	"192.168.1.30"	"RECEIVED: MAIL FROM:<imimaseye@test.com>"
"SMTPD"	12452	16917	"2016-03-05 12:47:49.236"	"192.168.1.30"	"SENT: 250 OK"
"SMTPD"	12760	16917	"2016-03-05 12:47:49.236"	"192.168.1.30"	"RECEIVED: RCPT TO:<admin@grupoayre.com>"
"SMTPD"	12760	16917	"2016-03-05 12:47:49.236"	"192.168.1.30"	"SENT: 250 OK"
"SMTPD"	12684	16917	"2016-03-05 12:47:49.236"	"192.168.1.30"	"RECEIVED: DATA"
"SMTPD"	12684	16917	"2016-03-05 12:47:49.236"	"192.168.1.30"	"SENT: 354 OK, send."
"SMTPD"	12784	16917	"2016-03-05 12:48:02.606"	"192.168.1.30"	"SENT: 250 Queued (13.312 seconds)"
"SMTPD"	5500	16917	"2016-03-05 12:48:02.622"	"192.168.1.30"	"RECEIVED: QUIT"
"SMTPD"	5500	16917	"2016-03-05 12:48:02.622"	"192.168.1.30"	"SENT: 221 goodbye"

This just doesn't happen if the email is coming from anywhere else.

jimimaseye · Post by **jimimaseye** » 2016-03-05 20:58

Yes.

Defo config problems somewhere.

How does the Scrollout log for that successful email compare to the one you posted at the top of the thread?

aleMau5 · Post by **aleMau5** » 2016-03-05 21:06

jimimaseye wrote:Yes.

Defo config problems somewhere.

How does the Scrollout log for that successful email compare to the one you posted at the top of the thread?

Code: Select all

Mar 5 12:47:05 mailguard postfix/postscreen[19136]: CONNECT from [192.168.1.121]:63853 to [192.168.1.30]:25
Mar 5 12:47:05 mailguard postfix/postscreen[19136]: WHITELISTED [192.168.1.121]:63853
Mar 5 12:47:15 mailguard postfix/smtpd[15690]: connect from ayre-tgu-apps.grupoayre.com[192.168.1.121]
Mar 5 12:47:20 mailguard postfix/smtpd[15690]: 3qHZfw41JQz11dj: client=ayre-tgu-apps.grupoayre.com[192.168.1.121]
Mar 5 12:47:20 mailguard postfix/cleanup[16158]: 3qHZfw41JQz11dj: message-id=
Mar 5 12:47:20 mailguard postfix/qmgr[24639]: 3qHZfw41JQz11dj: from=imimaseye@test.com, size=440, nrcpt=1 (queue active)
Mar 5 12:47:49 mailguard from_filter/smtpd[20465]: connect from localhost.localdomain[127.0.0.1]
Mar 5 12:47:49 mailguard from_filter/smtpd[20465]: 3qHZgT6kVnz129l: client=localhost.localdomain[127.0.0.1], orig_queue_id=3qHZfw41JQz11dj, orig_client=ayre-tgu-apps.grupoayre.com[192.168.1.121]
Mar 5 12:47:49 mailguard post_filter/cleanup[20469]: 3qHZgT6kVnz129l: info: header X-Spam-Status: No, score=0.57 tagged_above=-1000 required=5??tests=[ALL_TRUSTED=-0.6, FSL_HELO_NON_FQDN_1=0.001, MISSING_MID=0.14,??NO_DNS_FOR_FROM=0.379, SO_NON_FQDN_HELO=0.65]??autolearn=no autolear from ayre-tgu-apps.grupoayre.com[192.168.1.121]; from=imimaseye@test.com to=admin@grupoayre.com proto=ESMTP helo=AYRE-TGU-APPS: [ALL_TRUSTED=-0.6, FSL_HELO_NON_FQDN_1=0.001, MISSING_MID=0.14,??NO_DNS_FOR_FROM=0.379, SO_NON_FQDN_HELO=0.65]??autolearn=no autolearn_force=no
Mar 5 12:47:49 mailguard post_filter/cleanup[20469]: 3qHZgT6kVnz129l: info: header Subject: Test from ayre-tgu-apps.grupoayre.com[192.168.1.121]; from=imimaseye@test.com to=admin@grupoayre.com proto=ESMTP helo=AYRE-TGU-APPS
Mar 5 12:47:49 mailguard post_filter/cleanup[20469]: 3qHZgT6kVnz129l: message-id=
Mar 5 12:47:50 mailguard postfix/qmgr[24639]: 3qHZgT6kVnz129l: from=imimaseye@test.com, size=1181, nrcpt=1 (queue active)
Mar 5 12:47:50 mailguard amavis[26447]: (26447-01) Passed CLEAN {RelayedInternal}, LOCAL [192.168.1.121]:63853 [192.168.1.121] imimaseye@test.com - admin@grupoayre.com, Queue-ID: 3qHZfw41JQz11dj, mail_id: y3wMYvEQaxmf, Hits: 0.57, size: 440, queued_as: 3qHZgT6kVnz129l, 29403 ms
Mar 5 12:47:50 mailguard to_filter/lmtp[16159]: 3qHZfw41JQz11dj: to=admin@grupoayre.com, relay=127.0.0.1[127.0.0.1]:10024, delay=34, delays=5.1/0/0.01/29, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 3qHZgT6kVnz129l)
Mar 5 12:47:50 mailguard postfix/qmgr[24639]: 3qHZfw41JQz11dj: removed
Mar 5 12:47:50 mailguard postfix/sign[20505]: 3qHZgT6kVnz129l: Message saved.
Mar 5 12:47:50 mailguard postfix/pickup[1869]: 3qHZgV1TYCz129x: uid=65534 from=imimaseye@test.com
Mar 5 12:47:50 mailguard postfix/cleanup[16158]: 3qHZgV1TYCz129x: message-id=
Mar 5 12:47:50 mailguard postfix/sign[20551]: 3qHZgT6kVnz129l: Message re-queued.
Mar 5 12:47:50 mailguard postfix/sign[20561]: 3qHZgT6kVnz129l: Message removed.

jimimaseye · Post by **jimimaseye** » 2016-03-05 21:44

Try turning off TLS support on Scrollout and send in another test.

mattg · Post by **mattg** » 2016-03-06 01:01

aleMau5 wrote:
mattg wrote:This is called 'loopback' and is fairly standard with gateways... Even many home grade modem routers do this
Why should I point all my clients inside our LAN network, to use the external IP of my firewall with a DNS record, when I can simply point them directly to HMS? I'm sorry, I'm a bit confused on that.

I thought that you were trying to use scrollout to filter all mail.

there are other reasons why you would ALWAYS point your mail clients to the external mx record...
1. a Laptop, smart phone or other portable device that will work from both within the LAN and from outside it. If you don't do loopback here, you will need 2 configurations for these devices
2. it is just easier to administer if all mail client installations are the same, whether internal to the LAN or external to the LAN
3. It is likely exactly the same number of traceRT type steps either way, and the same machine that does loopback, probably also does DNS lookups, unless you have a dedicated DNS in your network (not many people actually need these. I only installed one for Spamassassin lookups.) And so no 'time or processor' cost
4. No need to use hosts file, which are individual to computers and (as shown) easily forgotten about

mattg · Post by **mattg** » 2016-03-06 01:19

jimimaseye wrote:Try turning off TLS support on Scrollout and send in another test.

I think that the TLS connection initially is a StartTLS connection from google.com, not an internal LAN connection between the F1 and the hMailserver

aleMau5 wrote:

jimimaseye wrote:
aleMau5 wrote: Yes, but HMS is simply not being contacted and delivered anything by SMTP (only IMAP). Scrollout F1 support required.

*Only sometimes, let me show a log from HMS. This was a message I sent to F1 , from the HMS host:

Code: Select all

"SMTPD"	12760	16917	"2016-03-05 12:47:49.236"	"192.168.1.30"	"SENT: 220 Bienvenido al sistema de correos de Grupo Ayre Mail Server"
"SMTPD"	12684	16917	"2016-03-05 12:47:49.236"	"192.168.1.30"	"RECEIVED: EHLO mailguard.grupoayre.com"
"SMTPD"	12684	16917	"2016-03-05 12:47:49.236"	"192.168.1.30"	"SENT: 250-mail.grupoayre.com[nl]250-SIZE 50480000[nl]250-AUTH LOGIN PLAIN[nl]250 HELP"
"SMTPD"	12452	16917	"2016-03-05 12:47:49.236"	"192.168.1.30"	"RECEIVED: MAIL FROM:<imimaseye@test.com>"
"SMTPD"	12452	16917	"2016-03-05 12:47:49.236"	"192.168.1.30"	"SENT: 250 OK"
"SMTPD"	12760	16917	"2016-03-05 12:47:49.236"	"192.168.1.30"	"RECEIVED: RCPT TO:<admin@grupoayre.com>"
"SMTPD"	12760	16917	"2016-03-05 12:47:49.236"	"192.168.1.30"	"SENT: 250 OK"
"SMTPD"	12684	16917	"2016-03-05 12:47:49.236"	"192.168.1.30"	"RECEIVED: DATA"
"SMTPD"	12684	16917	"2016-03-05 12:47:49.236"	"192.168.1.30"	"SENT: 354 OK, send."
"SMTPD"	12784	16917	"2016-03-05 12:48:02.606"	"192.168.1.30"	"SENT: 250 Queued (13.312 seconds)"
"SMTPD"	5500	16917	"2016-03-05 12:48:02.622"	"192.168.1.30"	"RECEIVED: QUIT"
"SMTPD"	5500	16917	"2016-03-05 12:48:02.622"	"192.168.1.30"	"SENT: 221 goodbye"

This just doesn't happen if the email is coming from anywhere else.

That message is sent from 192.168.1.30 (your Scrollout F1 device?) via your hMailserver. Unsure if that is a local hMailserver recipient or an external recipient. The next few log lines will define that.

Your earlier logs

aleMau5 wrote:Here's the log for when I tried sending an email from gmail, thru F1

on HMS:

Code: Select all

"SMTPD"	5324	1615	"2016-03-04 12:36:05.436"	"173.201.193.172"	"RECEIVED: QUIT"
"SMTPD"	5324	1615	"2016-03-04 12:36:05.436"	"173.201.193.172"	"SENT: 221 goodbye"
"DEBUG"	5920	"2016-03-04 12:36:05.436"	"Ending session 1615"
"DEBUG"	5324	"2016-03-04 12:36:06.996"	"Creating session 1633"
"TCPIP"	5324	"2016-03-04 12:36:06.996"	"TCP - 192.168.1.30 connected to 192.168.1.121:143."
"DEBUG"	5324	"2016-03-04 12:36:06.996"	"TCP connection started for session 1630"
"DEBUG"	8368	"2016-03-04 12:36:07.028"	"Ending session 1630"
"DEBUG"	5324	"2016-03-04 12:36:11.974"	"Creating session 1634"
"TCPIP"	5324	"2016-03-04 12:36:11.974"	"TCP - 192.168.1.30 connected to 192.168.1.121:143."
"DEBUG"	5324	[b]"2016-03-04 12:36:11.974"	[/b]"TCP connection started for session 1633"
"DEBUG"	5920	[b]"2016-03-04 12:36:12.036"[/b]	"Ending session 1633"
"DEBUG"	8368	"2016-03-04 12:36:21.523"	"Ending session 1628"
"DEBUG"	5920	"2016-03-04 12:36:21.538"	"Ending session 1627"
"DEBUG"	5324	"2016-03-04 12:36:24.362"	"Creating session 1635"

ON F1 (192.168.1.121 is my HMS):

Code: Select all

Mar 4 12:35:58 mailguard postfix/postscreen[12985]: CONNECT from [209.85.213.50]:35490 to [192.168.1.30]:25
Mar 4 12:35:58 mailguard postfix/postscreen[12985]: WHITELISTED [209.85.213.50]:35490
Mar 4 12:36:08 mailguard postfix/smtpd[12986]: connect from mail-vk0-f50.google.com[209.85.213.50]
Mar 4 12:36:08 mailguard postfix/smtpd[12986]: Anonymous TLS connection established from mail-vk0-f50.google.com[209.85.213.50]: TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)
Mar 4 12:36:14 mailguard postfix/smtpd[12986]: NOQUEUE: reject: RCPT from mail-vk0-f50.google.com[209.85.213.50]: 550 5.1.1 aferrari@grupoayre.com: Recipient address rejected: undeliverable address: [b]host 192.168.1.121[192.168.1.121] said: 530 SMTP authentication is required.[/b] (in reply to RCPT TO command); from=mXXXXXX@gmail.com to=aXXXXX@mydomain.com proto=ESMTP helo=mail-vk0-f50.google.com
Mar 4 12:36:14 mailguard postfix/smtpd[12986]: disconnect from mail-vk0-f50.google.com[209.85.213.50]
Mar 4 12:40:54 mailguard postfix/anvil[13325]: statistics: max connection rate 1/180s for (smtpd:209.85.213.50) at Mar 4 12:36:08
Mar 4 12:40:54 mailguard postfix/anvil[13325]: statistics: max connection count 1 for (smtpd:209.85.213.50) at Mar 4 12:36:08
Mar 4 12:40:54 mailguard postfix/anvil[13325]: statistics: max message rate 1/180s for (smtpd:209.85.213.50) at Mar 4 12:36:09
Mar 4 12:40:54 mailguard postfix/anvil[13325]: statistics: max recipient rate 1/180s for (smtpd:209.85.213.50) at Mar 4 12:36:09
Mar 4 12:40:54 mailguard postfix/anvil[13325]: statistics: max newtls rate 1/180s for (smtpd:209.85.213.50) at Mar 4 12:36:08
Mar 4 12:40:54 mailguard postfix/anvil[13325]: statistics: max cache size 1 at Mar 4 12:36:08

My guess is that the time is different on these two machines,
The F! log entry certainly looks like hMailsevrer responding, bu that doesn't show in your hMailserver logs.

Check you hmailserver logs for SMPTD lines that detail the F1 IP address

kevin@wine.co.za · Post by **kevin@wine.co.za** » 2016-10-28 15:08

Did you ever resolve this issue?

I just spent two days on this and my conclusion is that the problem is the discusion between ScrollOut and HMS - it appears that even if you set up a route correctly - and the mailbox definately exists, HMS always sends a 550 when it gets a request from ScrollOut or MailCleaner

HMS does not do SMTP authentication from ScrollOut
I have tried using MailCleaner and get the same error

The route is definately set up to not authenticate from ScrollOuts IP

HMS LOG - from SCROLLOUT
"2016-10-28 13:19:19.802" "196.201.6.67" "SENT: 220 welcome to wine.co.za"
"SMTPD" 4080 50 "2016-10-28 13:19:19.802" "196.201.6.67" "RECEIVED: EHLO scroll.wine.co.za"
"SMTPD" 4080 50 "2016-10-28 13:19:19.802" "196.201.6.67" "SENT: 250-email.wine.co.za[nl]250-SIZE 20000000[nl]250-AUTH LOGIN PLAIN[nl]250 HELP"
"SMTPD" 4040 50 "2016-10-28 13:19:19.802" "196.201.6.67" "RECEIVED: MAIL FROM:<root@wine.co.za>"
"SMTPD" 4040 50 "2016-10-28 13:19:19.802" "196.201.6.67" "SENT: 250 OK"
"SMTPD" 3660 50 "2016-10-28 13:19:19.802" "196.201.6.67" "RECEIVED: RCPT TO:<kevin@winenet.co.za>"
"SMTPD" 3660 50 "2016-10-28 13:19:19.802" "196.201.6.67" "SENT: 550 Delivery is not allowed to this address."
"SMTPD" 3660 50 "2016-10-28 13:19:19.818" "196.201.6.67" "RECEIVED: RSET"
"SMTPD" 3660 50 "2016-10-28 13:19:19.818" "196.201.6.67" "SENT: 250 OK"
"SMTPD" 4040 50 "2016-10-28 13:19:19.818" "196.201.6.67" "RECEIVED: QUIT"

HMS LOG from MailCleaner
"41.56.249.156" "SENT: 220 welcome to wine.co.za"
"SMTPD" 2060 385 "2016-10-28 13:32:12.538" "41.56.249.156" "RECEIVED: EHLO welcome to wine.co.za"
"SMTPD" 2060 385 "2016-10-28 13:32:12.538" "41.56.249.156" "SENT: 250-email.wine.co.za[nl]250-SIZE 20000000[nl]250-AUTH LOGIN PLAIN[nl]250 HELP"
"SMTPD" 1576 385 "2016-10-28 13:32:12.585" "41.56.249.156" "RECEIVED: MAIL FROM:<>"
"SMTPD" 1576 385 "2016-10-28 13:32:12.585" "41.56.249.156" "SENT: 250 OK"
"SMTPD" 1352 385 "2016-10-28 13:32:12.632" "41.56.249.156" "RECEIVED: RCPT TO:<postmaster@southafricanwine.co.za>"
"SMTPD" 1352 385 "2016-10-28 13:32:12.632" "41.56.249.156" "SENT: 550 Delivery is not allowed to this address."
"SMTPD" 2060 385 "2016-10-28 13:32:12.679" "41.56.249.156" "RECEIVED: QUIT"
"SMTPD" 2060 385 "2016-10-28 13:32:12.679" "41.56.249.156" "SENT: 221 goodbye"

jimimaseye · Post by **jimimaseye** » 2016-10-28 15:30

kevin@wine.co.za wrote:Did you ever resolve this issue?

I just spent two days on this and my conclusion is that the problem is the discusion between ScrollOut and HMS - it appears that even if you set up a route correctly - and the mailbox definately exists, HMS always sends a 550 when it gets a request from ScrollOut or MailCleaner

HMS does not do SMTP authentication from ScrollOut
I have tried using MailCleaner and get the same error

The route is definately set up to not authenticate from ScrollOuts IP.....

HMS LOG - from SCROLLOUT
"2016-10-28 13:19:19.802" "196.201.6.67" "SENT: 220 welcome to wine.co.za"
"SMTPD" 4080 50 "2016-10-28 13:19:19.802" "196.201.6.67" "RECEIVED: EHLO scroll.wine.co.za"
"SMTPD" 4080 50 "2016-10-28 13:19:19.802" "196.201.6.67" "SENT: 250-email.wine.co.za[nl]250-SIZE 20000000[nl]250-AUTH LOGIN PLAIN[nl]250 HELP"
.
.
.

HMS LOG from MailCleaner
"41.56.249.156" "SENT: 220 welcome to wine.co.za"
"SMTPD" 2060 385 "2016-10-28 13:32:12.538" "41.56.249.156" "RECEIVED: EHLO welcome to wine.co.za"
"SMTPD" 2060 385 "2016-10-28 13:32:12.538" "41.56.249.156" "SENT: 250-email.wine.co.za[nl]250-SIZE 20000000[nl]250-AUTH LOGIN PLAIN[nl]250 HELP"
"SMTPD" 1576 385 "2016-10-28 13:32:12.585" "41.56.249.156" "RECEIVED: MAIL FROM:<>"
.
.
.

2 things:

1, you do not state your personal setup details
2, please start a new thread of your own with your details and logs so we can concentrate on your problem specifically.

kevin@wine.co.za · Post by **kevin@wine.co.za** » 2016-10-28 20:17

I was just trying to help anyone in the future who might want to use ScrollOut with hmail - and they might stumble on this post
It does not work - period.

jimimaseye · Post by **jimimaseye** » 2016-10-28 21:31

I doubt that's true.

e-d-i-t · Post by **e-d-i-t** » 2016-12-27 19:51

Hmm, must admit..
I have trouble getting Scrollout F1 working here too...
But it is a Scrollout thing, for sure!
I am not getting it to work with unsecure local connections, a very basic setup, trying to replace EFA-3.

It nags probably about DNS issues, refusing connections etc etc
Too bad...

Scrollout F1 530 error

Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error

Re: Scrollout F1 530 error