Re: James SMTP

--------------Yd0EKd1vFPRvxRciGiyxUP7n
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit

Hi David.

yeah i check it with this service.

a little iproved my config. sorry for too many words here

just i have problem that some domains (mail servers) cant get our mail 
with error

/Hi. This is the James mail server at KPST-SRV-JAMES. I'm afraid I 
wasn't able to deliver your message to the following addresses. This is 
a permanent error; I've given up. Sorry it didn't work out. Below I 
include the list of recipients and the reason why I was unable to 
deliver your message. Original email subject: Проверка доступности с 
нового сервера Failed recipient(s): [email protected] Error message: 
Too many retries failure. Bouncing after 3 retries./

so i dont undertand what i do wrong. but mostly about 90% others our 
external clients works with our mail just fine

here config smtp

<smtpservers>
<smtpserver enabled="true">
     <jmxName>smtpserver-global</jmxName>
     <bind>0.0.0.0:25</bind>
     <authorizedAddresses>127.0.0.0/8, 172.16.149.0/24</authorizedAddresses>
     <auth>
         <announce>never</announce>
         <requireSSL>false</requireSSL>
         <plainAuthEnabled>false</plainAuthEnabled>
     </auth>
     <tls socketTLS="false" startTLS="true">
<privateKey>file://../cert/mail.kps-t.ru-key.pem</privateKey>
<certificates>file://../cert/mail.kps-t.ru-chain.pem</certificates>
     </tls>
     <connectiontimeout>360</connectiontimeout>
     <connectionLimit>0</connectionLimit>
     <connectionLimitPerIP>0</connectionLimitPerIP>
     <connectionBacklog>200</connectionBacklog>
     <verifyIdentity>false</verifyIdentity>
     <maxmessagesize>25M</maxmessagesize>
<addressBracketsEnforcement>false</addressBracketsEnforcement>
     <helloName autodetect="false">mail.kps-t.ru</helloName>
     <smtpGreeting>mail.kps-t.ru</smtpGreeting>
     <heloEnforcement>false</heloEnforcement>
     <handlerchain>
         <handler 
class="org.apache.james.smtpserver.fastfail.ValidRcptHandler"/>
         <handler class="org.apache.james.smtpserver.CoreCmdHandlerLoader"/>
     </handlerchain>
</smtpserver>
     <smtpserver enabled="true">
         <jmxName>smtpserver-TLS</jmxName>
         <bind>0.0.0.0:465</bind>
         <helloName autodetect="false">mail.kps-t.ru</helloName>
         <connectionBacklog>200</connectionBacklog>
         <tls socketTLS="true" startTLS="false">
<privateKey>file://../cert/mail.kps-t.ru-key.pem</privateKey>
<certificates>file://../cert/mail.kps-t.ru-chain.pem</certificates>
         </tls>
         <connectiontimeout>360</connectiontimeout>
         <connectionLimit>0</connectionLimit>
         <connectionLimitPerIP>0</connectionLimitPerIP>
         <auth>
             <announce>always</announce>
             <requireSSL>true</requireSSL>
             <plainAuthEnabled>true</plainAuthEnabled>
         </auth>
<authorizedAddresses>127.0.0.0/8</authorizedAddresses>
         <verifyIdentity>true</verifyIdentity>
         <maxmessagesize>100M</maxmessagesize>
<addressBracketsEnforcement>true</addressBracketsEnforcement>
         <smtpGreeting>mail.kps-t.ru</smtpGreeting>
         <handlerchain>
             <handler 
class="org.apache.james.smtpserver.fastfail.ValidRcptHandler"/>
             <handler 
class="org.apache.james.smtpserver.CoreCmdHandlerLoader"/>
         </handlerchain>
     </smtpserver>
     <smtpserver enabled="true">
         <jmxName>smtpserver-authenticated</jmxName>
         <bind>0.0.0.0:587</bind>
         <helloName autodetect="false">mail.kps-t.ru</helloName>
         <connectionBacklog>200</connectionBacklog>
         <tls socketTLS="false" startTLS="true">
<privateKey>file://../cert/mail.kps-t.ru-key.pem</privateKey>
<certificates>file://../cert/mail.kps-t.ru-chain.pem</certificates>
         </tls>
         <connectiontimeout>360</connectiontimeout>
         <connectionLimit>0</connectionLimit>
         <connectionLimitPerIP>0</connectionLimitPerIP>
         <auth>
             <announce>always</announce>
             <requireSSL>true</requireSSL>
             <plainAuthEnabled>true</plainAuthEnabled>
         </auth>
<authorizedAddresses>127.0.0.0/8</authorizedAddresses>
         <verifyIdentity>true</verifyIdentity>
         <maxmessagesize>100M</maxmessagesize>
<addressBracketsEnforcement>true</addressBracketsEnforcement>
         <smtpGreeting>mail.kps-t.ru</smtpGreeting>
         <handlerchain>
             <handler 
class="org.apache.james.smtpserver.fastfail.ValidRcptHandler"/>
             <handler 
class="org.apache.james.smtpserver.CoreCmdHandlerLoader"/>
         </handlerchain>
     </smtpserver>
</smtpservers>



29.04.2025 22:38, David Matthews пишет:
>> so my config for now is good?
>> can i send full smtp config to u? :)
>>
> hi
>
> You can confirm Quan's diagnosis at
>
> https://mxtoolbox.com/diagnostic.aspx
>
> These days (for the last 15 years at least) a mail exchanger configured as an open relay is considered a gross misconfiguration and your domain will likely get blocked for facilitating abuse.
>
> --
> David Matthews
> [email protected]
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail:[email protected]
> For additional commands, e-mail:[email protected]
>
-- 
С уважением,
Руководитель ИТ ООО <КПС-Технологии>
Терсков Илья Андреевич
Тел.: +7 (3843) 73-14-42
Моб.: +7-996-415-16-29
e-mail:[email protected]

--------------Yd0EKd1vFPRvxRciGiyxUP7n--