Topic: Bounced Bounced Mail

[alex_kain]

I have a sme box 6.01 with a dedicated isdn 128k conection with fixed ip, behind the box, have 40 win pc machines and 2 linux servers.
I have a hosting email server in a third party provider outside my network. This email server use user autentification.
The qmail in a sme box delivery / intercept the 25 port, and when a email bounced, the qmail not delivery it to the user, an this mail hold in /home/e-smith/Maildir/new.

This is the head of a bounced bounced mail (i had remplace the original ip and user mail for security reasons):

Code: [Select]


Hi. This is the qmail-send program at intranet [the workgroup for my internal net].
I tried to deliver a bounce message to this address, but the bounce bounced!

<user@externalserver.com.ar>:
Connected to [ip for external server] but sender was rejected.
Remote host said: 501 Syntax: MAIL FROM: <address>

--- Below this line is the original bounce.

Return-Path: <>
Received: (qmail 18326 invoked for bounce); 5 Oct 2005 06:23:44 -0000
Date: 5 Oct 2005 06:23:44 -0000
From: MAILER-DAEMON@intranet
To: user@externalserver.com.ar
Subject: failure notice

Hi. This is the qmail-send program at intranet.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<user@speedy.com.ar>:
CNAME lookup failed temporarily. (#4.4.3)
I'm not going to try again; this message has been in the queue too long.

--- Below this line is a copy of the message.


I see in those forums a patch to deleted the bounced mail .
I need to deactivate qmail or fixed it to send the bounced mail to the user. I have more of 50 mail user, and it´s a very hard work check the box and send manualy the bounced bounced mail to the users.

Thanks and excuses for my poor english.

[Franco]

I'm not sure if I understand your needs, but messages coming from internal users to unknown users DO get returned to the propper user.
For the bounce bounce problem check this:
http://mirror.contribs.org/smeserver/contribs/rmitchell/smeserver/howto/double%20bounce%20message%20deletion%20HOWTO%20for%20sme%20server.htm

In the panel you can configure how to handle the messages to unknown users.

[alex_kain]

Thanks for your reply stuntshell, but i not use the internal email server of the box, i use the box as firewall / proxy to my local network. I don´t want to erase the bounced bounced mail. I use a external email server hosted in a remote site. But the qmail server in a box hold the bounced mail form the remote email server but qmail don´t send the "MAIL FROM" information and the remote server generate a 501 error (see the first thread).

[Franco]

All configurations of qmail go into /var/qmail/control/
There you can modify the files to your needs, tell it who should get what when.
 If you don't want qmail acting, you can modify the runlevels using chckconfig.

[Franco]

http://lifewithqmail.org/lwq.html

Must Have link!

[alex_kain]

I read several times this document, and don't appear a option what i need.
I´m try to kill the qmail services in interactive boot and the 25 port is closed (check it with other machine with nmap), when i try to open a remote ip (outside my lan) in the 25 port, the firewall of the sme block the conecction.

Any Sugestion ??

PD: how to use chckconfig ??

[Jon_Reynolds]

Hi Alex,

If I understand you right, you have an external email server at your ISP that handles your mail for you. The SME server with qmail is intercepting your messages and not letting them be delivered, correct?

I believe what you want to do is go into the Server-Manger of the SME box and in the 'Email' section add your ISP's mail server into the area titled 'Delegate mail servers'.

Hope that helps,

Jon

[alex_kain]

I try this option, but don´t have effect.
I can stop the qmail service, but the sme box leave closed (or blocked) by default the 25 port.
Somebody can explain me, how to set the iptables to don´t block 25 port to external connections from the lan to the wan.

[Franco]

I just found that most of services on SME do not support chkconfig  

Code: [Select]

[root@sme]#chkconfig --list qmail
service qmail does not support chkconfig
On a normal linux box that's how you control what to start at different runlevels.
[/code]

[NickR]

I try this option, but don´t have effect.
I can stop the qmail service, but the sme box leave closed (or blocked) by default the 25 port.
Somebody can explain me, how to set the iptables to don´t block 25 port to external connections from the lan to the wan.

It's not a block, it's actually smtpfront-qmail doing proxying.  To disable this feature:

/sbin/e-smith/db configuration setprop smtpfront-qmail Proxy disabled

/sbin/e-smith/signal-event email-update

It shouldn't be neccessary to fiddle with qmail services if all you want to do it send mail out directly from connected hosts by bypassing the SME as described above.

[raem]

Alex

Keep in mind that disabling the smtp proxy will allow your LAN users to send mail directly to the Internet. If your workstations get a virus infection, then those "programs" can act as mail clients and send lots of virus infected messages and spam messages etc.

With the smtp proxy enabled, all of those virus infected or spam outgoing messages will be stopped as the virus will not know to use the sme server smtp proxy to send mail via.

Your server then possibily gets listed as as spammer on RBL's etc.

Think twice about the benefits of using the smtp proxy before disabling it.


The "correct" way is to send outgoing mail via the sme server smtp server (& proxy), but configure the ISP's smtp server details in the server manager email panel.

[NickR]

Ray

I'm not advising anyone that this is a good idea, I was merely giving alex_kain the solution to the question he appears to be asking (at least, that's my interpretation of his problem).

I totally agree that disabling the smtp proxy isn't a good idea!

[raem]

NickR

Sorry Nick, I meant to address my post to alex_kain


> ..at least, that's my interpretation of his problem

I also cannot quite understand what his problem actually is !

[raem]

alex_kain

Doublebounce messages DO NOT get delivered to the sender by default.
Doublebounce messages DO get delivered to the admin user as standard. You can specify in the server manager email panel the address for the admin user if it is not admin on your sme server.

Doublebounce messages can safely be automatically deleted using the contrib or howto instructions.
They are usually a result of viruses or spammers with invalid return addresses and as such are unimportant. It's a wsste of time reading them.

Undeliverable messages (single bounce) do get returned to sender by default.

[alex_kain]

Thanks a lot to NickR, your reply IS the solution what i want.
To RayMitchell in my 6.01 Sme box, Doublebounce messages  don't delivered to the user. I´m not use a smtp for my isp, i have a remote hosting - mail server in a third party provider. I try to set the ip direction for the mailserver of this provider in a control panel, but this solution do not function.
My ISP is very expensive and my broadband is limited to a 128k simetric connection (not adsl), in this site of my country cost 412 U$s (us dolars) plus taxes (31.5%) gives a total of 515 U$S by month. With this limited bandwith, i don't use a webserver - mail of the smebox, why have a lot traffic in the web and the mail services.

Thanks a lot for all for your's replies