Not sending email

[danielv86]

OS: ubuntu 18.04
Mail: dovecot+exim+clamav+spamassassin

My problem is that I receive mails but I cannot send emails. Please help.

roundcube


thunderbird


mainlog

[dreiggy]

Hi,
check if your SPF record is correct. Additionally check dkim too. And if your server ip is not blacklisted: https://mxtoolbox.com/blacklists.aspx

[danielv86]

Hello, thank you for reply! I tried everything I found in the forum...
IP is correct.

[dreiggy]

Try to check if you have any issues in mail-tester: https://www.mail-tester.com/

[danielv86]

I don't understand.... :(

[dreiggy]

Your reverse DNS not resolving:

Code: Select all

# dig -x 185.208.224.189

; <<>> DiG 9.9.4-RedHat-9.9.4-73.el7_6 <<>> -x 185.208.224.189
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40431
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;189.224.208.185.in-addr.arpa.  IN      PTR

;; AUTHORITY SECTION:
224.208.185.in-addr.arpa. 3600  IN      SOA     dns1.cpserver.net. hostmaster.cpserver.net. 2019040302 10800 3600 3600000 3600

;; Query time: 120 msec
;; SERVER: 213.133.99.99#53(213.133.99.99)
;; WHEN: Tue Apr 09 19:43:59 EEST 2019
;; MSG SIZE  rcvd: 121

Ask your server provider to check reverse DNS entry.

[danielv86]

Thank you for helping!
I can send a message already.

Mail tester results:

Code: Select all

Your DKIM signature is not valid
We check if the server you are sending from is authenticated
-1
[SPF] pixelweb.hu does not allow your server 185.208.224.189 to use [email protected]
Sender Policy Framework (SPF) is an email validation system designed to prevent email spam by detecting email spoofing, a common vulnerability, by verifying sender IP addresses.
You do not have a SPF record, please add the following one to your domain pixelweb.hu:

v=spf1 a mx ip4:185.208.224.189 ~all
The Name Server handling the domain name pixelweb.hu is ns.tdns1.net.

Need guidance? View guides for each host.



Verification details:

dig +short TXT pixelweb.hu :
dig +short SPF @ns.tdns1.net. pixelweb.hu :
spfquery --scope mfrom --id [email protected] --ip 185.208.224.189 --helo-id vps.pixelweb.hu :
none
pixelweb.hu: No applicable sender policy available
pixelweb.hu: No applicable sender policy available
Received-SPF: none (pixelweb.hu: No applicable sender policy available) receiver=ns303428.ip-94-23-206.eu; identity=mailfrom; envelope-from="[email protected]"; helo=vps.pixelweb.hu; client-ip=185.208.224.189

Code: Select all

Your DKIM signature is not valid
DomainKeys Identified Mail (DKIM) is a method for associating a domain name to an email message, thereby allowing a person, role, or organization to claim some responsibility for the message.
The DKIM signature of your message is:

	v=1;
	a=rsa-sha256;
	q=dns/txt;
	c=relaxed/relaxed;
	d=pixelweb.hu;
	s=mail;
	h=Message-ID:Subject:To:From:Date:Content-Transfer-Encoding:Content-Type:MIME-Version:Sender:Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=4VikEgWa8ABzZjKtKc7M8Bh3DPFFpJE16w41ou/xJao=;
	b=pamt49iMJyyll5y9ve2KtZlTsbn9Oi6pad/dMCq6W6VfOAGpgZooMdEVTuIDRBCFFMwKetQVqUoWWBXxoVtf81+awbpOtuzYhS5FwKd6iYiKF0ZK9XrZ/w3cmpQAF6H1J4E6mBYh34NmYwp0IWpy3UPdjtOxR5n/86QxcsnqCbA=;
	
We were not able to retrieve your public key.
Please ensure that you inserted your DKIM TXT DNS record on your domain pixelweb.hu using the selector mail.
If you recently modified your DNS, please be patient and test again your Newsletter in 12 hours, it may take some time for the DNS to be propagated

Code: Select all

You do not have a DMARC record
A DMARC policy allows a sender to indicate that their emails are protected by SPF and/or DKIM, and give instruction if neither of those authentication methods passes. Please be sure you have a DKIM and SPF set before using DMARC.
You do not have a DMARC record, please add a TXT record to your domain _dmarc.pixelweb.hu with the following value:

v=DMARC1; p=none
Verification details:

mail-tester.com; dkim=fail reason="key not found in DNS" (0-bit key; unprotected) header.d=pixelweb.hu [email protected] header.b=pamt49iM; dkim-atps=neutral
mail-tester.com; dmarc=none header.from=pixelweb.hu
mail-tester.com; dkim=fail reason="key not found in DNS" (0-bit key; unprotected) header.d=pixelweb.hu [email protected] header.b=pamt49iM; dkim-atps=neutral
From Domain: pixelweb.hu
DKIM Domain: pixelweb.hu

Code: Select all

Your server 185.208.224.189 is successfully associated with vps.pixelweb.hu
Reverse DNS lookup or reverse DNS resolution (rDNS) is the determination of a domain name that is associated with a given IP address.
Some companies such as AOL will reject any message sent from a server without rDNS, so you must ensure that you have one.
You cannot associate more than one domain name with a single IP address.
Here are the tested values for this check:
IP: 185.208.224.189
HELO: vps.pixelweb.hu
rDNS: vps.pixelweb.hu
Your domain name pixelweb.hu is assigned to a mail server.
We check if there is a mail server (MX Record) behind your domain name pixelweb.hu.
MX records (pixelweb.hu) : 
10 mail.pixelweb.hu.
Your hostname vps.pixelweb.hu is assigned to a server.
We check if there is a server (A Record) behind your hostname vps.pixelweb.hu.
A records (vps.pixelweb.hu) : 
185.208.224.189

Vestacp DNS settings:

Code: Select all

LISTING PIXELWEB.HU
mail._domain...TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCzDM5y+l05eqJM+Z1F5f8jqnzkIhT1b5r+5vl1ZKTRoxJMebttkYjHiItACzvA16/ivMnpcjMzPLZ88VkPrLHxL0znp4xiV3knhsOw1SFo+kN7T+NcqpjC/etJg4ZetDJU+hq7OslXNSy4LOYzlEgkpbCr5I51snWHPqq......"
_domainkeyTXT "t=y; o=~;"
_dmarcTXT "v=DMARC1; p=none"
@TXT "v=spf1 a mx ip4:185.208.224.189 ~all"
@MX10 mail.pixelweb.hu.
imapA 185.208.224.189
popA 185.208.224.189
smtpA 185.208.224.189
mailA 185.208.224.189
ftpA 185.208.224.189
wwwA 185.208.224.189
@A 185.208.224.189
@NS ns2.domain.tld.
@NS ns1.domain.tld.

[dreiggy]

As I see your NS servers seems different:

;; ANSWER SECTION:
pixelweb.hu. 3600 IN NS ns.tdns2.net.
pixelweb.hu. 3600 IN NS ns.tdns1.net.

Where are you editing DNS zone of your domain? Compare zone in vestacp and in your domain dns management.

[danielv86]

Thank you for helping!!!!

[dreiggy]

Nice :) I'm glad to help you :) Mark this topic as resolved ;)