1

Topic: localhost policy issues (DENIED ACCESS from IP 127.0.57.1)

==== Required information ====
- iRedMail version (check /etc/iredmail-release): iRedMail-0.9.4
- Linux/BSD distribution name and version: FreeBSD 10.2-RELEASE #0 r286666
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? iRedAdmin-Pro-SQL-2.3.1
- Related log if you're reporting an issue:
- EZJail? Yes
====

Issue: Mail won't deliver.

Suspects? DENIED ACCESS from IP 127.0.57.1

What is 127.0.57.1? It is the local IP address assigned to the jail to act as the loopback address on interface lo1.

What happens when you send mail locally on the server via Roundcube back to yourself? The server takes it but never delivers it back to me.

postfix/postscreen[6112]: CONNECT from [68.232.193.199]:51945 to [nn.nn.nn.nn]:25
Feb  2 11:50:16 mxs01 postfix/postscreen[6112]: PASS OLD [68.232.193.199]:51945
Feb  2 11:50:16 mxs01 postfix/smtpd[6115]: connect from mta.email.microsoftonline.com[68.232.193.199]
Feb  2 11:50:17 mxs01 postfix/smtpd[6115]: 18997A0E3D: client=mta.email.microsoftonline.com[68.232.193.199]
Feb  2 11:50:17 mxs01 postfix/cleanup[6118]: 18997A0E3D: message-id=<935316fa-2772-4fcd-8b03-19873c5e2365@xtnvmta109.xt.local>
Feb  2 11:50:17 mxs01 postfix/qmgr[6099]: 18997A0E3D: from=<bounce-108_HTML-684217549-322384-1014838-194274@bounce.email.microsoftonline.com>, size=7774, nrcpt=1 (queue active)
Feb  2 11:50:17 mxs01 amavis[5624]: (!)DENIED ACCESS from IP 127.0.57.1, policy bank ''
Feb  2 11:50:17 mxs01 postfix/smtp[6101]: 18997A0E3D: to=<censoreduser@censoreddomain.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.37, delays=0.36/0/0/0, dsn=4.4.2, status=deferred (lost connection with 127.0.0.1[127.0.0.1] while receiving the initial server greeting)

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: localhost policy issues (DENIED ACCESS from IP 127.0.57.1)

Try this:

*) Find setting '@inet_acl =' in Amavisd config file /usr/local/etc/amavisd.conf. If it doesn't exist, add one.
*) Append the IP address you want to allow access like this:

@inet_acl = qr(127.0.0.1 127.0.57.1);

*) Restart Amavisd service.