2016-05-19 06:51:20 -05:00
<!DOCTYPE html>
2015-02-01 20:58:34 -06:00
< html >
< head >
< meta http-equiv = "Content-Type" content = "text/html; charset=utf-8" / >
< title > Errors you may see while maintaining iRedMail server< / title >
2015-07-31 23:14:52 -05:00
< link rel = "stylesheet" type = "text/css" href = "./css/markdown.css" / >
2015-02-01 20:58:34 -06:00
< / head >
< body >
< div id = "navigation" >
2016-04-19 12:48:51 -05:00
< a href = "/index.html" target = "_blank" >
< img alt = "iRedMail web site"
src="./images/logo-iredmail.png"
style="vertical-align: middle; height: 30px;"
/>
< span > iRedMail< / span >
< / a >
2016-02-29 02:15:19 -06:00
// < a href = "./index.html" > Document Index< / a > < / div > < h1 id = "errors-you-may-see-while-maintaining-iredmail-server" > Errors you may see while maintaining iRedMail server< / h1 >
2015-02-01 20:58:34 -06:00
< div class = "toc" >
< ul >
< li > < a href = "#errors-you-may-see-while-maintaining-iredmail-server" > Errors you may see while maintaining iRedMail server< / a > < ul >
2015-02-01 21:27:26 -06:00
< li > < a href = "#postfix" > Postfix< / a > < ul >
2016-07-29 21:45:36 -05:00
< li > < a href = "#intended-policy-rejection-please-try-again-later" > Intended policy rejection, please try again later< / a > < / li >
2015-02-25 05:39:38 -06:00
< li > < a href = "#sender-address-rejected-not-logged-in" > Sender address rejected: not logged in< / a > < / li >
2015-02-01 21:27:26 -06:00
< li > < a href = "#sender-address-rejected-not-owned-by-user-userdomainltd" > Sender address rejected: not owned by user user@domain.ltd< / a > < / li >
2015-02-12 07:39:44 -06:00
< li > < a href = "#unreasonable-virtual_alias_maps-map-expansion-size-for-userdomaincom" > unreasonable virtual_alias_maps map expansion size for user@domain.com< / a > < / li >
2015-02-01 21:27:26 -06:00
< / ul >
< / li >
2015-02-01 20:58:34 -06:00
< li > < a href = "#amavisd" > Amavisd< / a > < ul >
< li > < a href = "#connect-to-12700112700110024-connection-refused" > connect to 127.0.0.1[127.0.0.1]:10024: Connection refused< / a > < / li >
< / ul >
< / li >
< / ul >
< / li >
< / ul >
< / div >
2015-02-01 21:27:26 -06:00
< h2 id = "postfix" > Postfix< / h2 >
2016-07-29 21:45:36 -05:00
< h3 id = "intended-policy-rejection-please-try-again-later" > Intended policy rejection, please try again later< / h3 >
< p > Sample error message in Postfix log file:< / p >
< blockquote >
< p > Jul 24 06:43:08 mx0 postfix/smtpd[12719]: NOQUEUE: reject: RCPT from sender.com[xx.xx.xx.xx]: 451 4.7.1 < a href = "mailto:recipient@my-domain.com" > r e c i p i e n t @ m y - d o m a i n . c o m < / a > : Recipient address rejected: < strong class = "red" > Intentional policy rejection, please try again later< / strong > ; from=< a href = "mailto:sender@sender-domain.com" > s e n d e r @ s e n d e r - d o m a i n . c o m < / a > to=< a href = "mailto:recipient@my-domain.com" > r e c i p i e n t @ m y - d o m a i n . c o m < / a > proto=SMTP helo=< mx2.sender.com > < / p >
< / blockquote >
< p > This error is caused by greylisting service, sender server will retry to
deliver the same email, and your server will accept it after few retries.< / p >
< ul >
< li > For more technical details about Greylisting, please visit:< ul >
< li > < a href = "http://greylisting.org" > Homepage: What is greylisting?< / a > < / li >
< li > < a href = "http://greylisting.org/articles/" > Articles about greylisting< / a > < / li >
< / ul >
< / li >
< li > To manage greylisting service, please read iRedAPD tutorial: < a href = "./manage.iredapd.html#feature-greylisting" > Manage iRedAPD: Greylisting< / a > < / li >
< / ul >
2015-02-25 05:39:38 -06:00
< h3 id = "sender-address-rejected-not-logged-in" > Sender address rejected: not logged in< / h3 >
< p > Sample error message in Postfix log file:< / p >
< blockquote >
< p > Jun 24 11:57:13 mx1 postfix/smtpd[2667]: NOQUEUE: reject: RCPT from
2016-07-29 21:45:36 -05:00
mail.mydomain.com[1.2.3.4]: 553 5.7.1 < sombody@my-domain.com>: < strong class = "red" > Sender address
rejected: not logged in< / strong > ; from=< sombody@my-domain.com>
2015-02-25 05:39:38 -06:00
to=< receipent@receipentdomain.com> proto=ESMTP helo=< client_helo.com>< / p >
< / blockquote >
< p > This error is caused by incorrectly configured mail client application, not a
server issue.< / p >
< p > All mail users are forced to perform SMTP auth before sending email, so you
must configure your mail client applications (Outlook, Thunderbird, ...) to
enable SMTP authentication.< / p >
2015-02-01 21:27:26 -06:00
< h3 id = "sender-address-rejected-not-owned-by-user-userdomainltd" > Sender address rejected: not owned by user user@domain.ltd< / h3 >
< p > This error is caused by restriction rule < code > reject_sender_login_mismatch< / code > in
Postfix parameter < code > smtpd_recipient_restrictions< / code > , in file < code > /etc/postfix/main.cf< / code > :< / p >
< pre > < code > smtpd_recipient_restrictions =
...
reject_sender_login_mismatch,
...
< / code > < / pre >
< p > It will reject the request when $smtpd_sender_login_maps specifies an owner
for the MAIL FROM address, but the client is not (SASL) logged in as that MAIL
FROM address owner; or when the client is (SASL) logged in, but the client
login name doesn't own the MAIL FROM address according to $smtpd_sender_login_maps.
Check < a href = "http://www.postfix.org/postconf.5.html#reject_sender_login_mismatch" > manual page of Postfix configuration file< / a > for more details.< / p >
< p > Removing < code > reject_sender_login_mismatch< / code > and restarting Postfix service fixes
this issue.< / p >
2016-04-02 08:21:14 -06:00
< div class = "admonition note" >
< p class = "admonition-title" > Note< / p >
2015-02-01 21:27:26 -06:00
< p > If you want to allow some users to send as other users, or allow all users
to send as their alias addresses, or allow member of mail list/alias to send
as mail list/alias, you should try iRedAPD plugin < code > reject_sender_login_mismatch< / code >
instead (requires iRedAPD-1.4.4 or later releases).< / p >
< p > Read comments in file < code > /opt/iredapd/plugins/reject_sender_login_mismatch.py< / code > ,
then enable it in iRedAPD config file < code > /opt/iredapd/settings.py< / code > (< code > plugins =< / code > ),
restart iRedAPD service. That's all.< / p >
2016-04-02 08:21:14 -06:00
< / div >
2015-02-12 07:39:44 -06:00
< h3 id = "unreasonable-virtual_alias_maps-map-expansion-size-for-userdomaincom" > unreasonable virtual_alias_maps map expansion size for user@domain.com< / h3 >
2015-02-25 05:39:38 -06:00
< p > Sample error message in Postfix log file:< / p >
2015-02-12 07:39:44 -06:00
< blockquote >
< p > Feb 11 19:59:06 mail postfix/cleanup[30575]: warning: 23C334232FB3:
2016-07-29 21:45:36 -05:00
< strong class = "red" > unreasonable virtual_alias_maps map expansion size< / strong > for
user@domain.com -- deferring delivery< / p >
2015-02-12 07:39:44 -06:00
< / blockquote >
< p > It means the maximal number of addresses that virtual alias expansion produces
from each original recipient exceeds hard limit, please either increase the
hard limit (default is 1000), or reduce alias members.< / p >
< p > To increase the limit to, for example, 1500, please add below setting in
Postfix config file < code > /etc/postfix/main.cf< / code > :< / p >
< pre > < code > virtual_alias_expansion_limit = 1500
< / code > < / pre >
< p > Reference: < a href = "http://www.postfix.org/postconf.5.html#virtual_alias_expansion_limit" > Postfix Configuration Parameters< / a > < / p >
2015-02-01 20:58:34 -06:00
< h2 id = "amavisd" > Amavisd< / h2 >
< h3 id = "connect-to-12700112700110024-connection-refused" > connect to 127.0.0.1[127.0.0.1]:10024: Connection refused< / h3 >
< p > This error means Amavisd service is not running, please try to start it first.< / p >
< ul >
2016-03-23 00:56:22 -06:00
< li > RHEL/CentOS/FreeBSD: < code > # service amavisd restart< / code > < / li >
2015-02-01 20:58:34 -06:00
< li > Debian/Ubuntu: < code > # service amavis restart< / code > < / li >
2016-03-23 00:56:22 -06:00
< li > OpenBSD: < code > # /etc/rc.d/amavisd restart< / code > or < code > # rcctl restart amavisd< / code > < / li >
2015-02-01 20:58:34 -06:00
< / ul >
< p > After restarted amavisd service, please check its
< a href = "./file.locations.html#amavisd" > log file< / a > to make sure it's running.< / p >
< p > Notes:< / p >
< ul >
2015-10-05 01:22:05 -05:00
< li > At least 2GB memory is required for a low traffic mail server. If your
server doesn't have enough memory, Amavisd and ClamAV may be not able to
start, or stop running automatically after running for a while. If it's just
a testing server, you can follow
< a href = "./completely.disable.amavisd.clamav.spamassassin.html" > our tutorial< / a > to
disable some features of Amavisd to keep it running, or disable it completely.< / li >
2016-05-19 06:51:20 -05:00
< / ul > < div class = "footer" >
< p style = "text-align: center; color: grey;" > All documents are available in < a href = "https://bitbucket.org/zhb/iredmail-docs/src" > BitBucket repository< / a > , and published under < a href = "http://creativecommons.org/licenses/by-nd/3.0/us/" target = "_blank" > Creative Commons< / a > license. You can < a href = "https://bitbucket.org/zhb/iredmail-docs/get/tip.tar.bz2" > download the latest version< / a > for offline reading. If you found something wrong, please do < a href = "http://www.iredmail.org/contact.html" > contact us< / a > to fix it.< / p >
< / div >
< script type = "text/javascript" >
2015-02-05 07:02:53 -06:00
(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
})(window,document,'script','//www.google-analytics.com/analytics.js','ga');
ga('create', 'UA-3293801-21', 'auto');
ga('send', 'pageview');
2015-02-01 20:58:34 -06:00
< / script >
< / body > < / html >
