Page 1 of 1

Incoming mail deny if from my address but from other server

Posted: Fri Feb 20, 2015 1:32 pm
by kusspaprika.com
Hi there,

at first thank you for VestaCP.

If I send a Mail to an external mail-list with my mail-address in, I can't receive the mail from Maillist, because the other server sends the mail with my mail-address but other IP/Hostname.

This directive sorts it out. I think its good to do it so for preventing spam, but I would like to have a solution that does not answers with an Error message 550 ...
Commenting it out is no option for me.

Code: Select all

/etc/exim4/exim4.conf.template

deny    message       = smtp auth requried (<- misspelled, it has to be "required ")
       sender_domains =  local_domains
          !authenticated = *
I thought it must be possible to allow this mails if i send it from my account before.
Probably by parsing the mail-logs for same Title or same header information?

What do you think about?
Do you know a solution?

Regards
Jan

Re: Incoming mail deny if from my address but from other ser

Posted: Tue Nov 03, 2015 1:15 am
by jonn
I got the same error when email is sent to an aliases 550 smtp auth requried. Yes its a typo. but it still the error persists I went and reinstalled vesta OS to centos and got the same error.
Did you find a solution yet.

Re: Incoming mail deny if from my address but from other ser

Posted: Tue Nov 03, 2015 1:48 am
by jonn
I just commented out that part and now email can get through.
Do we need that part of exim config seeing its causing such a problem, spam is not routing anyway as far I can see in my logs everything looks normal, but I will look at logs all day today and get back to you if spam gets through some how with this commented out.

Code: Select all

#  deny    message       = smtp auth required
#         sender_domains = +local_domains
#         !authenticated = *

#  require verify        = recipient

Re: Incoming mail deny if from my address but from other ser

Posted: Tue Nov 03, 2015 3:00 pm
by kusspaprika.com
Hi jonn,

i didn't remember, but i looked for it. Here is my solution:

deny message = smtp auth requried
sender_domains = +local_domains
!authenticated = *

require verify = recipient

I didn't change anything...

Now I remember it was caused by an wrong configured external Mailing List. I set an own address for it on its domain and the problems were gone.
+ You see that the Mail is send by the Mailinglist and answers to it go to my address by redirecting from Mailing Lists address. That's the correct way i think.

It's better to let the code in, to prevent you from being a SPAMMER unwanted of course on your own server.
This kills mails who are send from an domain on your host but send from another host. That couldn't be. So no one on your server gets SPAM from outside but looks like it's from you.

Can you describe why you have external sending server with same Domain? Probably we find a better solution than commenting out a good important rule.

Best
Jan

Re: Incoming mail deny if from my address but from other ser

Posted: Thu Nov 05, 2015 6:04 am
by jonn
Yeah some spam started getting in today, 3 emails that usually gets captured by spam checkers.
Okay I tried again, If I uncomment this part mail from a reseller account on another server bounces all mail sent to aliases to the vesta server for example I have two aliases noreply@ and returnerror@, if my domain email address is the TO, and FROM and mail comes from the reseller system on the remote server it bounces all the emails with the error, I dont have this problem on my directadmin servers so why the problem happens on vesta servers.
I can shift through the da exim files to see if there is something of use.

Code: Select all


# ACCEPT EMAIL BEGINNING HERE
  # accept if address is in a local domain as long as recipient can be verified
  accept  domains = +local_domains
          endpass
	  message = "Unknown User"
          verify = recipient

# accept if address is in a domain for which we relay as long as recipient
# can be verified
  accept  domains = +relay_to_domains
          endpass
          verify = recipient

  accept  hosts = +relay_from_hosts
  accept  hosts = +untrusted_set_sender
          endpass
          message = authentication required
          authenticated = *
 
 deny    message = relay not permitted
This is few parts of spamblocker exim file on my Directadmin server.
I modified each to match vesta I will try it out.

Re: Incoming mail deny if from my address but from other ser

Posted: Thu Nov 05, 2015 7:15 am
by jonn
This might do the trick beginning of helo

Code: Select all

# accept mail originating on this server unconditionally
  accept  hosts = @[] : @

Re: Incoming mail deny if from my address but from other ser

Posted: Thu Nov 05, 2015 7:59 am
by jonn
Block if Subject and Body are both Empty.

Code: Select all

deny    message = REJECTED - No Subject or Body
        !condition = ${if def:h_Subject:}
        condition = ${if <{$body_linecount}{1}{true}{false}}