1

Topic: Amazon EC2 machine PTR Record not working for one domain

==== Required information ====
- iRedMail version = 0.9.2
- Linux/BSD distribution name and version = ubuntu 14.04 LTS on EC2
- Store mail accounts in which backend = MySQL
- Web server = Apache
- Manage mail accounts with iRedAdmin-Pro? = iRedAdmin
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hello again.

first of until now everything worked like a charm.
Last week we added a new domain and configured all DNS entries in amazons Route53.
This is the only domain on amazon the other domains are not kokal and are working.
So it seems there needs to be a special config of some kind to get it working.
My PTR DNS and MX are working are resolving as ok.
A dig command shows the right values. I can send mails from the server but cannot receive mails.
The error i get from gmail is 4.4.1 temporary delivery error.
The mail failed to deliver after 48 hours.
Do you have any experience how to set this up the right way?
I have no other log files for this isue.

While digging i found "http://bhargavamin.com/how-to-do/config … -route-53/"
Tried it so far without success.

mail.mydomain.com   -   A     -   192.168.0.1
mail.mydomain.com   -   MX   ---   192.168.0.1
mail.mydomain.com       PTR    ---  mail.mydomain.com

I hope this will suffice.

Many many thanks.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Amazon EC2 machine PTR Record not working for one domain

Hard to understand the issue. if you have any error message or log, please show us the original error message/log.

3

Re: Amazon EC2 machine PTR Record not working for one domain

The only thing I have at the moment. There is nothing in the log file or error.

Message not delivered

The response was:

The recipient server did not accept our requests to connect. Learn more at https://support.google.com/mail/answer/7720 [mydomain.com 52.58.204.183: timed out]

Final-Recipient: rfc822; info@mydomain.com
Action: failed
Status: 4.4.1
Diagnostic-Code: smtp; The recipient server did not accept our requests to connect. Learn more at https://support.google.com/mail/answer/7720
[mydomain.com 52.58.204.183: timed out]
Last-Attempt-Date: Sat, 14 Oct 2017 10:08:52 -0700 (PDT)


As mentioned in the first post. this server i s in use for 3 other domains nad is working fine.
The only difference is the new domain with this issue is hosted directly by amazon AWS.

this is the only thing i get out of this. No logs on amazon or elsewere. this is all i got.

4

Re: Amazon EC2 machine PTR Record not working for one domain

neozimpi@gmail.com wrote:

[mydomain.com 52.58.204.183: timed out]

Usually it means port 25 is not open, or there's some network issue which causes it cannot reach port 25. Check your firewall please.

5

Re: Amazon EC2 machine PTR Record not working for one domain

Its open the mail server is serving mail for the other domains. And its the same interface.

The PTR is resolving ok but nothing is coming in. There is also nothing in the log file.

6

Re: Amazon EC2 machine PTR Record not working for one domain

So for now we are using amazons workmail in bomcination with route53 wich is working.
But this is only a temporary solution. We want to use this domains like the other 4 on this server.

For this workaround however i faced another issue.
On our local server we use a per domain transfer to send mails to different smtp server based on the
/etc/postfix/relayhost_map

sample:

@mydomain   [smtp.mail.eu-west-1.awsapps.com]

password authentification is done via the passwd file.

SMTPS is enabled in master.cf:

smtps     inet  n       -       -       -       -       smtpd
  -o smtpd_tls_wrappermode=yes
  -o smtpd_sasl_auth_enable=yes

If i try to send the mail i get either

"(lost connection with smtp.mail.eu-west-1.awsapps.com[54.77.61.83] while receiving the initial server greeting)
"
or

" smtp.mail.eu-west-1.awsapps.com:25" connection timeout" << wich makes sense since its using port 25 and not SMTPS (SMTP, encrypted with TLS) with port 465.

How can i enable this for just one domain ?