1 Topic by zachsaltzman (edited by zachsaltzman 2016-07-12 23:18:01)

  • zachsaltzman
  • Member
  • Offline
  • Registered: 2016-07-12
  • Posts: 2

Topic: 5.7.1 Access Denied - Dynamic IP issue on port 25

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.5-1
- Linux/BSD distribution name and version: Ubuntu 14.04
====

I'm able to send mail from a mail client without issue using port 587, but when I try to use port 25, I get the following error:

5.7.1 Helo command rejected: Access Denied. Your email was rejected because the sending mail server appears to be on a dynamic IP address...

As an FYI - I have disabled TLS on port 587 (no encryption needed or wanted), and as I mentioned, everything is working fine over port 587 to send mail. I have a requirement of an old device that must use port 25 when connecting, so I need to be able to send mail over port 25 as well.

Thoughts?

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,770

Re: 5.7.1 Access Denied - Dynamic IP issue on port 25

Suggestions:

*) Always use port 587 with starttls to send email.
*) If you have some old network devices which cannot use port 587, try this tutorial:
http://www.iredmail.org/docs/additional.smtp.port.html

3 Reply by zachsaltzman

  • zachsaltzman
  • Member
  • Offline
  • Registered: 2016-07-12
  • Posts: 2

Re: 5.7.1 Access Denied - Dynamic IP issue on port 25

ZhangHuangbin wrote:

Suggestions:

*) Always use port 587 with starttls to send email.
*) If you have some old network devices which cannot use port 587, try this tutorial:
http://www.iredmail.org/docs/additional.smtp.port.html

My mail-enabled devices do not give an option to specify SMTP port, they are hard coded to port 25, so is it possible to accept mail on port 25 in iRedMail? I understand the risks of not using TLS...

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,770

Re: 5.7.1 Access Denied - Dynamic IP issue on port 25

*) Disable postscreen in /etc/postfix/master.cf. http://www.postfix.org/POSTSCREEN_README.html#turnoff
*) Enable/Add settings in /etc/postfix/main.cf:

smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_tls_auth_only = yes