Outgoing Mail Relay

[Whitehill]

When I set up my mail server a couple of months ago, I checked the box Relay outgoing mail through host: and entered the FQDN of my external server. This did not work because the server demands authentication. So I made some manual changes to /etc/postfix/main.cf:

relayhost = mail.xxxxxx.net
smtp_sasl_auth_enable=yes
smtp_sasl_password_maps=hash:/etc/postfix/saslpass
smtp_sasl_security_options=​

and the hash contains the single entry:

mail.xxxxxxxx.net whitehill@xxxxxxxx.netassword​

This all worked fine through 3/1. Yesterday 3/2 it stopped working. I didn't change anything and tech support at my service swears they haven't changed anything.

On one of my machines I reconfigured Mail to use the external server directly, bypassing my local server. It worked!!

So, what now? How can I see the low-level SMTP exchange for a simple message? Any other suggestions? Thanks.

 

[Kees Buijs]

When I set up my mail server a couple of months ago, I checked the box Relay outgoing mail through host: and entered the FQDN of my external server. This did not work because the server demands authentication. So I made some manual changes to /etc/postfix/main.cf:

There is almost never a good reason to relay mail through another server (unless you are blacklisted).

So do not relay outgoing mail, leave the option unchecked. Now your server will send the mail DIRECTLY to the receiving MAIL SERVER, otherwise you send it to your provider, who will send it for you to the receiving MAIL SERVER. This will only cause delays in MAIL delivery.


Good luck, Kees

 

[Whitehill]

Thanks, Kees. There is one good reason to relay: When you do not have a static IP address. That's me. I use a "dynamic DNS" service so folks can still access me from the outside world. Even so, it's usually OK not to relay. However, there are anal-retentive domains (yahoo, bellsouth) that require a back-verification before they will deliver a message. The verification fails when it comes back directly to me - succeeds when it hits my relay server.

 

[Kees Buijs]

Thanks, Kees. There is one good reason to relay: When you do not have a static IP address. That's me. I use a "dynamic DNS" service so folks can still access me from the outside world. Even so, it's usually OK not to relay. However, there are anal-retentive domains (yahoo, bellsouth) that require a back-verification before they will deliver a message. The verification fails when it comes back directly to me - succeeds when it hits my relay server.

Even with a dynamic ip you still can use outgoing mail without relay. Dynamic DNS service is only required for incoming mail. Does your provider does not offer an option to relay through them without password.

If you are sure everything is setup correctly, maybe you had a system software update which causes the problem.

Do myou can any messages over relaying in the logs? Maybe they can give us a clou what is wrong.

Good luck, Kees

 

[Whitehill]

Even with a dynamic ip you still can use outgoing mail without relay.

Except in the case, as I mentioned, when the recipient's provider does a reverse look up on my IP address and discovers that it is not bound to the domain of my e-mail address.

Does your provider does not offer an option to relay through them without password.

Nope. Feel free to complain to Wildblue.net - I have.

If you are sure everything is setup correctly, maybe you had a system software update which causes the problem.

Not on late 3/1 or early 3/2.

Do myou can any messages over relaying in the logs? Maybe they can give us a clou what is wrong.

I have the detail settings turned up as far as possible. All I see is "authentication error".

 

[Kees Buijs]

Nope. Feel free to complain to Wildblue.net - I have.

If they don't listen, maybe switch to another provider ?

I have the detail settings turned up as far as possible. All I see is "authentication error".

Maybe a case sensitivity or hidden character ?

If you set the mail program on the local mail server to the required settings *bypassing the local mail server" does that work ?


Kees

 

[Whitehill]

Problem is gone! Not solved, but gone.

On a non-server machine running 10.4.4, I configured Postfix via Webmin and then, by hand, made the /etc/postfix files as close as possible to those on my server. Result? It relays mail out through my external service, no problem!

Completely pissed off, I went back to the server, shut down the mail service, backed up /etc/postfix, copied same from the non-server, again made a few alterations by hand, and started up the mail service. All OK !?!

I think I'll take the rest of the weekend off.

 

[Kees Buijs]

Problem is gone! Not solved, but gone.

On a non-server machine running 10.4.4, I configured Postfix via Webmin and then, by hand, made the /etc/postfix files as close as possible to those on my server. Result? It relays mail out through my external service, no problem!

Completely pissed off, I went back to the server, shut down the mail service, backed up /etc/postfix, copied same from the non-server, again made a few alterations by hand, and started up the mail service. All OK !?!

I think I'll take the rest of the weekend off.

You deserve it ...