Topic: How do I whitelist a mailserver that does not return a helo

[mercyh]

Hi,

I have a system that send reports nightly to my SME mail server. The system is not set up correctly to be a mailserver and does not return a helo. Following is a snippet of my /var/log/qpsmtpd/current:

2008-04-01 10:22:30.444558500 31503 dispatching MAIL FROM:<DYEND075@ZZZZ.COM>
2008-04-01 10:22:30.444562500 31503 full from_parameter: FROM:<DYEND075@ZZZZ.COM>
2008-04-01 10:22:30.444564500 31503 from email address : [<DYEND075@ZZZZ.COM>]
2008-04-01 10:22:30.444566500 31503 running plugin (mail): require_resolvable_fromhost
2008-04-01 10:22:30.444567500 31503 trying to get config for invalid_resolvable_fromhost
2008-04-01 10:22:30.444569500 31503 trying to get config for require_resolvable_fromhost
2008-04-01 10:22:30.611429500 31503 Plugin require_resolvable_fromhost, hook mail returned DENYSOFT,
                                    Could not resolve ZZZZ.COM (#4.4.3)
2008-04-01 10:22:30.611828500 31503 running plugin (deny): logging::logterse
2008-04-01 10:22:30.612312500 31503 logging::logterse plugin: ` XX.XXX.XXX.XX   Unknown ZZZZ.COM
                                    require_resolvable_fromhost  902     Could not resolve ZZZZ.COM (#4.4.3)
                                    msg denied before queued
2008-04-01 10:22:30.612682500 31503 Plugin logging::logterse, hook deny returned DECLINED,
2008-04-01 10:22:30.613136500 31503 denysoft mail from <DYEND075@ZZZZ.COM> (Could not resolve ZZZZ.COM (#4.4.3)
2008-04-01 10:22:30.613440500 31503 450 Could not resolve ZZZZ.COM (#4.4.3)

Is there a way to whitelist this sender so I can receive mail?

I do not want to turn off require_resolvable_fromhost completely as it is a very effective antispam tool.

Thanks

Royce Holdeman

[pfloor]

The easiest way is to set up the server to use the ISP's mail server to send email in the Server-Manager>E-mail>Change email delivery settings panel.

[mercyh]

PFloor,

That would be true if I had control of the system that is sending the mail and does not return the HELO, however that unit is not in my control. I only have the receiving mail server to work with.

I know I can get the mail through by turning off the require_resolvable_fromhost plugin but I would really like to leave it on. All the whitelisting I see for qpsmtpd uses the information returned from the helo sequence to identify the sender. I have whitelisted the IP address that this mail is coming from but that still doesn't let it through the helo stage.


Thanks for your time and suggestion,

Royce

[pfloor]

Is the sending machine not an SME server?

[mercyh]

It is an IBM AS400 that does not have it's mail server fully configured. It is automatically mailing a report at dayend of it's activities. I do not control it and the people who do are not "able" to configure it correctly.

I have to deal with the issues on the receiving end (My SME7.3 mail server).

Thanks again for your time,

Royce

[mercyh]

EDIT: post removed referenced the wrong plugin 

[CharlieBrady]

I have a system that send reports nightly to my SME mail server. The system is not set up correctly to be a mailserver and does not return a helo.

'helo' has nothing to do with it. The logs indicate that mail is being refused because the From: address is invalid. Either change the from address on the email messages, or make the address valid by setting it up in DNS.

[CharlieBrady]

I know I can get the mail through by turning off the require_resolvable_fromhost plugin but I would really like to leave it on.

One solution would be for you to write a plugin which re-writes the From: address to a valid domain before require_resolvable_fromhost runs (and rejects the message). But surely it makes more sense to get someone to configure the AS400 to use valid email addresses.

[mercyh]

Charlie,

Got it.

Thanks a lot,

Royce