Re[2]: James SMTP
Терсков Иль я Андреевич <[email protected]> Mon, 18 Aug 2025 02:09:55 +0000
| Newsgroups | gmane.comp.jakarta.james.user |
|---|---|
| Message-ID | <[email protected]> |
--------=_MB9701A2B4-32BC-49C1-BCEE-014A7668C526 Content-Type: multipart/alternative; boundary="------=_MB7EAF0564-DEED-4E97-86DA-A24C707918DF" --------=_MB7EAF0564-DEED-4E97-86DA-A24C707918DF Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Hi Cryptearth, I=E2=80=99ve invested a lot of time and effort into the Apache James projec= t,=20 but I=E2=80=99ve grown tired of the constant struggle with its limitations.= =20 Despite being a mature product with over 22 years on the market, the=20 documentation often lacks depth, making it difficult to find answers.=20 While James is fast and powerful, it still suffers from surprising gaps=20 and issues =E2=80=94 for example, there=E2=80=99s no straightforward suppor= t for bulk=20 mailing, modifying the database has led to memory leaks, and there are=20 odd behaviors when dealing with servers using self-signed certificates,=20 among other things I=E2=80=99ve already lost track of. At this point, I=E2=80=99m simply exhausted from fighting and fine-tuning a= =20 product that still feels far from stable and predictable. I initially migrated from Microsoft Exchange to James, and later moved=20 to Stalwart for production use. I=E2=80=99m genuinely impressed =E2=80=94 a= fter only=20 three years of development, Stalwart has proven remarkably stable. It=E2=80= =99s=20 been running smoothly for four months now without a single issue, and I=20 can hardly believe such a young project delivers this level of=20 reliability. I genuinely like Apache James, especially its CLI and API =E2=80=94 so much = that=20 I even wrote simple scripts and a small application for managing users=20 and aliases. Its configuration options are also quite solid and=20 feature-rich. I might return to it one day, but only when it truly=20 becomes a production- or enterprise-ready solution. =D0=A1 =D1=83=D0=B2=D0=B0=D0=B6=D0=B5=D0=BD=D0=B8=D0=B5=D0=BC, =D0=A0=D1=83=D0=BA=D0=BE=D0=B2=D0=BE=D0=B4=D0=B8=D1=82=D0=B5=D0=BB=D1=8C= =D0=98=D0=A2 =D0=9E=D0=9E=D0=9E =C2=AB=D0=9A=D0=9F=D0=A1-=D0=A2=D0=B5=D1=85=D0=BD=D0=BE= =D0=BB=D0=BE=D0=B3=D0=B8=D0=B8=C2=BB =D0=A2=D0=B5=D1=80=D1=81=D0=BA=D0=BE=D0=B2 =D0=98=D0=BB=D1=8C=D1=8F =D0=90= =D0=BD=D0=B4=D1=80=D0=B5=D0=B5=D0=B2=D0=B8=D1=87 =D0=A2=D0=B5=D0=BB.: +7 (3843) 73-14-42 =D0=9C=D0=BE=D0=B1.: +7 (996) 415-16-29 E-mail: [email protected] ------ =D0=98=D1=81=D1=85=D0=BE=D0=B4=D0=BD=D0=BE=D0=B5 =D1=81=D0=BE=D0=BE= =D0=B1=D1=89=D0=B5=D0=BD=D0=B8=D0=B5 ------ =D0=9E=D1=82 "cryptearth" <[email protected]> =D0=9A=D0=BE=D0=BC=D1=83 [email protected] =D0=94=D0=B0=D1=82=D0=B0 17.08.2025 2:34:56 =D0=A2=D0=B5=D0=BC=D0=B0 Re: James SMTP >Hi everyone, > >sorry for not being active for some time. Anyway - after reading up I'd li= ke to give my thoughts for those you may still seek for them or at least fo= r the archive. > >Hey Ilja, > >from what I get your issue back in late april was that you struggled with= some target smtp servers not accepting your mails. >As by the bounce message your shared usually there's either an additional= information or an attachement with an error description what exactly failed= . This could be from the domain can't get resolved or doesn't have a proper = MX record (usually James then falls back to a simple A record and tries th= at instead), is temporarily out of service (down for maintenance) or has bl= ocked your server for some reason. > >To start with diagnostics as the postmaster I recommend first checking the = health of your domain, using mxtoolbox https://mxtoolbox.com/emailhealth o= r similar services (there was another tool with even more tests but I forge= t its name). >So I checked your domain which, as you use cloudflare, only got me 2 warni= ngs and 0 errors (and with this is even better than my own which currently= results in 2 errors (1 for my backup out of service (waiting for opensuse 1= 6) and 1 for my server being level 3 blocked for my hoster OVH not getting= spam in my area under control). Given you can exchange most mails without i= ssues I assume the fault is not at your end. > >Then I checked the given example of belovskaya.ru which returns a few erro= rs - noteably some DNS issues. I guess the main cause with that domain in p= articular and likely with others you have trouble with are DNS realted issu= es which have to be fixed by the respective domain admins. The issue seems= the run a mix of delegated nameservers and thier own: NS belovskaya.ru retu= rns a few NS of nic.ru as well as one of thier own with a glue record: ns.b= elovskaya.ru. It's possible that your server struggle to properly resolve t= he MX record due to this mess. Usually a domain should either use external= nameservers (from the registry or services like cloudflare) or host thier o= wn, only. A mixed setup can (and in your case does) cause issues. So there'= s nothin you can do from your side but it's an issue on thier end. If you k= eep trouble with them try to contact them on a different channel (like an o= ldschool letter or a mail to another mail service) or you could even go the = route to lookup the hostmaster address of nic.ru (as I wasn't able to find = any info on them or on the affected domain I would start at [email protected] an= d would request either thier hostmaster or the hostermaster of the affected = domain) and try to contact them so they can try to contant they admin of t= he affected to domain to inform them: "hey, there's something wrong with yo= ur domain". > >Also: You seem to confuse the smtp.xml for inbound traffic with the mailet= .xml for outbound traffic. >The smtpserver.xml (and imapserver.xml) are used for inbound traffic, only= . That is: For mails that others send to your server. >For everything outgoing - from your James to other servers, that happens i= n the mailetcontainer.xml. Here the only options you can set are: >- a relay if you don't send mails on your own but use an external relay >- some log stuff >- if StartTLS is to be used >So, there isn't much you can do from your side at all. >The authorizedAddress in smtpserver.xml is for blindly trusting incoming t= raffic for sending mails outbound. This is an option when you use James as= the external relay others connect to for outbound mails. As the config says= : Usually you want to disable that entirely but use smtp-auth only - that i= s: A user has to login via smtp before able to send mails. That trusted net= work would be usefull if you have a webserver within the same network but o= n a different server which uses Apache and sends mails via PHP mail(). Then = you configure php to use the James as relay and add the webserver as a tru= sted source so it can send mails without having to authenticate. I've done= that via sendmail and a bit of stuff in the mailetcontainer.xml as I use se= ndmail as dumb nullclient to also drop in local mails like cronjob reports= into a special local-services mailbox. > >Hope you can sort out your issues. >For us it could be helpful to get more info about a bounce message like Wh= at's the actual error message? or something like that. Otherwise we can onl= y advice you to contact the admins of the affected target domains as the is= sue is likely not on your side. > >Have a nice weekend everybody. >Greetings from Germany > >Matt > >Am 29.04.25 um 17:44 schrieb =D0=A2=D0=B5=D1=80=D1=81=D0=BA=D0=BE=D0=B2= =D0=98=D0=BB=D1=8C=D1=8F =D0=90=D0=BD=D0=B4=D1=80=D0=B5=D0=B5=D0=B2=D0=B8=D1= =87: >>Hi David. >> >>yeah i check it with this service. >> >>a little iproved my config. sorry for too many words here >> >>just i have problem that some domains (mail servers) cant get our mail wi= th error >> >>/Hi. This is the James mail server at KPST-SRV-JAMES. I'm afraid I wasn't = able to deliver your message to the following addresses. This is a permane= nt error; I've given up. Sorry it didn't work out. Below I include the list = of recipients and the reason why I was unable to deliver your message. Ori= ginal email subject: =D0=9F=D1=80=D0=BE=D0=B2=D0=B5=D1=80=D0=BA=D0=B0 =D0= =B4=D0=BE=D1=81=D1=82=D1=83=D0=BF=D0=BD=D0=BE=D1=81=D1=82=D0=B8 =D1=81 =D0= =BD=D0=BE=D0=B2=D0=BE=D0=B3=D0=BE =D1=81=D0=B5=D1=80=D0=B2=D0=B5=D1=80=D0= =B0 Failed recipient(s): [email protected] Error message: Too many retr= ies failure. Bouncing after 3 retries./ >> >>so i dont undertand what i do wrong. but mostly about 90% others our exte= rnal clients works with our mail just fine >> >>here config smtp >> >><smtpservers> >><smtpserver enabled=3D"true"> >> <jmxName>smtpserver-global</jmxName> >> <bind>0.0.0.0:25</bind> >> <authorizedAddresses>127.0.0.0/8, 172.16.149.0/24</authorizedAddress= es> >> <auth> >> <announce>never</announce> >> <requireSSL>false</requireSSL> >> <plainAuthEnabled>false</plainAuthEnabled> >> </auth> >> <tls socketTLS=3D"false" startTLS=3D"true"> >><privateKey>file://../cert/mail.kps-t.ru-key.pem</privateKey> >><certificates>file://../cert/mail.kps-t.ru-chain.pem</certificates> >> </tls> >> <connectiontimeout>360</connectiontimeout> >> <connectionLimit>0</connectionLimit> >> <connectionLimitPerIP>0</connectionLimitPerIP> >> <connectionBacklog>200</connectionBacklog> >> <verifyIdentity>false</verifyIdentity> >> <maxmessagesize>25M</maxmessagesize> >><addressBracketsEnforcement>false</addressBracketsEnforcement> >> <helloName autodetect=3D"false">mail.kps-t.ru</helloName> >> <smtpGreeting>mail.kps-t.ru</smtpGreeting> >> <heloEnforcement>false</heloEnforcement> >> <handlerchain> >> <handler class=3D"org.apache.james.smtpserver.fastfail.ValidRcpt= Handler"/> >> <handler class=3D"org.apache.james.smtpserver.CoreCmdHandlerLoad= er"/> >> </handlerchain> >></smtpserver> >> <smtpserver enabled=3D"true"> >> <jmxName>smtpserver-TLS</jmxName> >> <bind>0.0.0.0:465</bind> >> <helloName autodetect=3D"false">mail.kps-t.ru</helloName> >> <connectionBacklog>200</connectionBacklog> >> <tls socketTLS=3D"true" startTLS=3D"false"> >><privateKey>file://../cert/mail.kps-t.ru-key.pem</privateKey> >><certificates>file://../cert/mail.kps-t.ru-chain.pem</certificates> >> </tls> >> <connectiontimeout>360</connectiontimeout> >> <connectionLimit>0</connectionLimit> >> <connectionLimitPerIP>0</connectionLimitPerIP> >> <auth> >> <announce>always</announce> >> <requireSSL>true</requireSSL> >> <plainAuthEnabled>true</plainAuthEnabled> >> </auth> >><authorizedAddresses>127.0.0.0/8</authorizedAddresses> >> <verifyIdentity>true</verifyIdentity> >> <maxmessagesize>100M</maxmessagesize> >><addressBracketsEnforcement>true</addressBracketsEnforcement> >> <smtpGreeting>mail.kps-t.ru</smtpGreeting> >> <handlerchain> >> <handler class=3D"org.apache.james.smtpserver.fastfail.Valid= RcptHandler"/> >> <handler class=3D"org.apache.james.smtpserver.CoreCmdHandler= Loader"/> >> </handlerchain> >> </smtpserver> >> <smtpserver enabled=3D"true"> >> <jmxName>smtpserver-authenticated</jmxName> >> <bind>0.0.0.0:587</bind> >> <helloName autodetect=3D"false">mail.kps-t.ru</helloName> >> <connectionBacklog>200</connectionBacklog> >> <tls socketTLS=3D"false" startTLS=3D"true"> >><privateKey>file://../cert/mail.kps-t.ru-key.pem</privateKey> >><certificates>file://../cert/mail.kps-t.ru-chain.pem</certificates> >> </tls> >> <connectiontimeout>360</connectiontimeout> >> <connectionLimit>0</connectionLimit> >> <connectionLimitPerIP>0</connectionLimitPerIP> >> <auth> >> <announce>always</announce> >> <requireSSL>true</requireSSL> >> <plainAuthEnabled>true</plainAuthEnabled> >> </auth> >><authorizedAddresses>127.0.0.0/8</authorizedAddresses> >> <verifyIdentity>true</verifyIdentity> >> <maxmessagesize>100M</maxmessagesize> >><addressBracketsEnforcement>true</addressBracketsEnforcement> >> <smtpGreeting>mail.kps-t.ru</smtpGreeting> >> <handlerchain> >> <handler class=3D"org.apache.james.smtpserver.fastfail.Valid= RcptHandler"/> >> <handler class=3D"org.apache.james.smtpserver.CoreCmdHandler= Loader"/> >> </handlerchain> >> </smtpserver> >></smtpservers> >> >> >> >>29.04.2025 22:38, David Matthews =D0=BF=D0=B8=D1=88=D0=B5=D1=82: >>>>so my config for now is good? >>>>can i send full smtp config to u? :) >>>> >>>hi >>> >>>You can confirm Quan's diagnosis at >>> >>>https://mxtoolbox.com/diagnostic.aspx >>> >>>These days (for the last 15 years at least) a mail exchanger configured= as an open relay is considered a gross misconfiguration and your domain wil= l likely get blocked for facilitating abuse. >>> >>>-- David Matthews >>>[email protected] >>> >>> >>>--------------------------------------------------------------------- >>>To unsubscribe, e-mail:[email protected] >>>For additional commands, e-mail:[email protected] >>> > > >--------------------------------------------------------------------- >To unsubscribe, e-mail: [email protected] >For additional commands, e-mail: [email protected] --------=_MB7EAF0564-DEED-4E97-86DA-A24C707918DF Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable <html><head> <style id=3D"css_styles" type=3D"text/css"><!--blockquote.cite { margin-lef= t: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-le= ft: 1px solid #cccccc } blockquote.cite2 {margin-left: 5px; margin-right: 0px; padding-left: 10px;= padding-right:0px; border-left: 1px solid #cccccc; margin-top: 3px; padding= -top: 0px; } a img { border: 0px; } li[style=3D'text-align: center;'], li[style=3D'text-align: center; '], li[s= tyle=3D'text-align: right;'], li[style=3D'text-align: right; '] { list-sty= le-position: inside;} body { font-family: 'Segoe UI'; font-size: 12pt; } .quote { margin-left: 1em; margin-right: 1em; border-left: 5px #ebebeb soli= d; padding-left: 0.3em; } a.em-mention[href] { text-decoration: none; color: inherit; border-radius:= 3px; padding-left: 2px; padding-right: 2px; background-color: #e2e2e2; } ._em_placeholder {color: gray; border-bottom: 1px dotted lightblue;} ._em_p= laceholder:before{color:gray; content: '{{ ';} ._em_placeholder:after{color= :gray; content: ' }}';} --></style></head> <body><div><p data-start=3D"65" data-end=3D"81">Hi Cryptearth,</p> <p data-start=3D"83" data-end=3D"693">I=E2=80=99ve invested a lot of time a= nd effort into the Apache James project, but I=E2=80=99ve grown tired of th= e constant struggle with its limitations. Despite being a mature product wi= th over 22 years on the market, the documentation often lacks depth, making = it difficult to find answers. While James is fast and powerful, it still s= uffers from surprising gaps and issues =E2=80=94 for example, there=E2=80= =99s no straightforward support for bulk mailing, modifying the database ha= s led to memory leaks, and there are odd behaviors when dealing with server= s using self-signed certificates, among other things I=E2=80=99ve already l= ost track of.</p> <p data-start=3D"695" data-end=3D"822">At this point, I=E2=80=99m simply ex= hausted from fighting and fine-tuning a product that still feels far from s= table and predictable.</p><p data-start=3D"695" data-end=3D"822">I initiall= y migrated from Microsoft Exchange to James, and later moved to Stalwart fo= r production use. I=E2=80=99m genuinely impressed =E2=80=94 after only thre= e years of development, Stalwart has proven remarkably stable. It=E2=80=99s = been running smoothly for four months now without a single issue, and I ca= n hardly believe such a young project delivers this level of reliability.<b= r /><br />I genuinely like Apache James, especially its CLI and API =E2=80= =94 so much that I even wrote simple scripts and a small application for ma= naging users and aliases. Its configuration options are also quite solid an= d feature-rich. I might return to it one day, but only when it truly become= s a production- or enterprise-ready solution.</p></div> <div><br /></div><div id=3D"signature_old" style=3D"clear:both"><strong dat= a-start=3D"198" data-end=3D"214">=D0=A1 =D1=83=D0=B2=D0=B0=D0=B6=D0=B5=D0= =BD=D0=B8=D0=B5=D0=BC,</strong><br data-start=3D"214" data-end=3D"217" /> =D0=A0=D1=83=D0=BA=D0=BE=D0=B2=D0=BE=D0=B4=D0=B8=D1=82=D0=B5=D0=BB=D1=8C= =D0=98=D0=A2<br data-start=3D"232" data-end=3D"235" /> =D0=9E=D0=9E=D0=9E =C2=AB=D0=9A=D0=9F=D0=A1-=D0=A2=D0=B5=D1=85=D0=BD=D0=BE= =D0=BB=D0=BE=D0=B3=D0=B8=D0=B8=C2=BB<br data-start=3D"255" data-end=3D"258" = /> <strong data-start=3D"258" data-end=3D"284">=D0=A2=D0=B5=D1=80=D1=81=D0=BA= =D0=BE=D0=B2 =D0=98=D0=BB=D1=8C=D1=8F =D0=90=D0=BD=D0=B4=D1=80=D0=B5=D0=B5= =D0=B2=D0=B8=D1=87</strong><br data-start=3D"284" data-end=3D"287" /> =D0=A2=D0=B5=D0=BB.: +7 (3843) 73-14-42<br data-start=3D"311" data-end=3D"3= 14" /> =D0=9C=D0=BE=D0=B1.: +7 (996) 415-16-29<br data-start=3D"338" data-end=3D"3= 41" /> E-mail: <a data-start=3D"349" data-end=3D"367" class=3D"cursor-pointer" sty= le=3D"">[email protected]</a><div><font color=3D"#0000ee"><br /></font><di= v><div></div></div><div><a data-start=3D"349" data-end=3D"367" class=3D"cur= sor-pointer" style=3D""><img src=3D"cid:ema0fef5ba-95c7-46a2-ab53-c73fa4e50= [email protected]" border=3D"0" /> </a></div></div></div><div><br /></div> <div x-em-replyforwardheader=3D""><br /></div> <div> <div>------ =D0=98=D1=81=D1=85=D0=BE=D0=B4=D0=BD=D0=BE=D0=B5 =D1=81=D0=BE= =D0=BE=D0=B1=D1=89=D0=B5=D0=BD=D0=B8=D0=B5 ------</div> <div>=D0=9E=D1=82 "cryptearth" <<a href=3D"mailto:cryptearth@cryptearth.= de.INVALID">[email protected]</a>></div> <div>=D0=9A=D0=BE=D0=BC=D1=83 <a href=3D"mailto:[email protected]= g">[email protected]</a></div> <div>=D0=94=D0=B0=D1=82=D0=B0 17.08.2025 2:34:56</div> <div>=D0=A2=D0=B5=D0=BC=D0=B0 Re: James SMTP</div></div><div x-em-quote=3D"= "><br /></div> <div id=3D"xb7da73bb9a684e0" class=3D"plain"><blockquote cite=3D"6960b058-b= [email protected]" type=3D"cite" class=3D"cite2"> <div class=3D"plain_line">Hi everyone,</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">sorry for not being active for some time. Anyway= - after reading up I'd like to give my thoughts for those you may still see= k for them or at least for the archive.</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">Hey Ilja,</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">from what I get your issue back in late april was = that you struggled with some target smtp servers not accepting your mails.= </div> <div class=3D"plain_line">As by the bounce message your shared usually ther= e's either an additional information or an attachement with an error descri= ption what exactly failed. This could be from the domain can't get resolved = or doesn't have a proper MX record (usually James then falls back to a sim= ple A record and tries that instead), is temporarily out of service (down f= or maintenance) or has blocked your server for some reason.</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">To start with diagnostics as the postmaster I rec= ommend first checking the health of your domain, using mxtoolbox <a href=3D= "https://mxtoolbox.com/emailhealth">https://mxtoolbox.com/emailhealth</a> o= r similar services (there was another tool with even more tests but I forge= t its name).</div> <div class=3D"plain_line">So I checked your domain which, as you use cloudf= lare, only got me 2 warnings and 0 errors (and with this is even better tha= n my own which currently results in 2 errors (1 for my backup out of servic= e (waiting for opensuse 16) and 1 for my server being level 3 blocked for m= y hoster OVH not getting spam in my area under control). Given you can exch= ange most mails without issues I assume the fault is not at your end.</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">Then I checked the given example of belovskaya.ru = which returns a few errors - noteably some DNS issues. I guess the main ca= use with that domain in particular and likely with others you have trouble= with are DNS realted issues which have to be fixed by the respective domain = admins. The issue seems the run a mix of delegated nameservers and thier o= wn: NS belovskaya.ru returns a few NS of nic.ru as well as one of thier own = with a glue record: ns.belovskaya.ru. It's possible that your server strug= gle to properly resolve the MX record due to this mess. Usually a domain sh= ould either use external nameservers (from the registry or services like cl= oudflare) or host thier own, only. A mixed setup can (and in your case does= ) cause issues. So there's nothin you can do from your side but it's an iss= ue on thier end. If you keep trouble with them try to contact them on a dif= ferent channel (like an oldschool letter or a mail to another mail service) = or you could even go the route to lookup the hostmaster address of nic.ru= (as I wasn't able to find any info on them or on the affected domain I woul= d start at <a href=3D"mailto:[email protected]">[email protected]</a> and would request = either thier hostmaster or the hostermaster of the affected domain) and tr= y to contact them so they can try to contant they admin of the affected to= domain to inform them: "hey, there's something wrong with your domain".</di= v> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">Also: You seem to confuse the smtp.xml for inboun= d traffic with the mailet.xml for outbound traffic.</div> <div class=3D"plain_line">The smtpserver.xml (and imapserver.xml) are used= for inbound traffic, only. That is: For mails that others send to your serv= er.</div> <div class=3D"plain_line">For everything outgoing - from your James to othe= r servers, that happens in the mailetcontainer.xml. Here the only options y= ou can set are:</div> <div class=3D"plain_line">- a relay if you don't send mails on your own but = use an external relay</div> <div class=3D"plain_line">- some log stuff</div> <div class=3D"plain_line">- if StartTLS is to be used</div> <div class=3D"plain_line">So, there isn't much you can do from your side at = all.</div> <div class=3D"plain_line">The authorizedAddress in smtpserver.xml is for bl= indly trusting incoming traffic for sending mails outbound. This is an opti= on when you use James as the external relay others connect to for outbound= mails. As the config says: Usually you want to disable that entirely but us= e smtp-auth only - that is: A user has to login via smtp before able to sen= d mails. That trusted network would be usefull if you have a webserver with= in the same network but on a different server which uses Apache and sends m= ails via PHP mail(). Then you configure php to use the James as relay and a= dd the webserver as a trusted source so it can send mails without having to = authenticate. I've done that via sendmail and a bit of stuff in the mailet= container.xml as I use sendmail as dumb nullclient to also drop in local ma= ils like cronjob reports into a special local-services mailbox.</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">Hope you can sort out your issues.</div> <div class=3D"plain_line">For us it could be helpful to get more info about = a bounce message like What's the actual error message? or something like t= hat. Otherwise we can only advice you to contact the admins of the affected = target domains as the issue is likely not on your side.</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">Have a nice weekend everybody.</div> <div class=3D"plain_line">Greetings from Germany</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">Matt</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">Am 29.04.25 um 17:44 schrieb =D0=A2=D0=B5=D1=80= =D1=81=D0=BA=D0=BE=D0=B2 =D0=98=D0=BB=D1=8C=D1=8F =D0=90=D0=BD=D0=B4=D1=80= =D0=B5=D0=B5=D0=B2=D0=B8=D1=87:</div> <blockquote type=3D"cite" class=3D"cite"> <div class=3D"plain_line">Hi David.</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">yeah i check it with this service.</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">a little iproved my config. sorry for too many wo= rds here</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">just i have problem that some domains (mail serve= rs) cant get our mail with error</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">/Hi. This is the James mail server at KPST-SRV-JA= MES. I'm afraid I wasn't able to deliver your message to the following addr= esses. This is a permanent error; I've given up. Sorry it didn't work out.= Below I include the list of recipients and the reason why I was unable to d= eliver your message. Original email subject: =D0=9F=D1=80=D0=BE=D0=B2=D0=B5= =D1=80=D0=BA=D0=B0 =D0=B4=D0=BE=D1=81=D1=82=D1=83=D0=BF=D0=BD=D0=BE=D1=81= =D1=82=D0=B8 =D1=81 =D0=BD=D0=BE=D0=B2=D0=BE=D0=B3=D0=BE =D1=81=D0=B5=D1=80= =D0=B2=D0=B5=D1=80=D0=B0 Failed recipient(s): <a href=3D"mailto:shergin@bel= ovskaya.ru">[email protected]</a> Error message: Too many retries failu= re. Bouncing after 3 retries./</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">so i dont undertand what i do wrong. but mostly a= bout 90% others our external clients works with our mail just fine</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">here config smtp</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line"><smtpservers></div> <div class=3D"plain_line"><smtpserver enabled=3D"true"></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 <jmxName>smtpserver-glob= al</jmxName></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 <bind>0.0.0.0:25</bin= d></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 <authorizedAddresses>127= .0.0.0/8, 172.16.149.0/24</authorizedAddresses></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 <auth></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <an= nounce>never</announce></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <re= quireSSL>false</requireSSL></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <pl= ainAuthEnabled>false</plainAuthEnabled></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 </auth></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 <tls socketTLS=3D"false" st= artTLS=3D"true"></div> <div class=3D"plain_line"><privateKey>file://../cert/mail.kps-t.ru-ke= y.pem</privateKey></div> <div class=3D"plain_line"><certificates>file://../cert/mail.kps-t.ru-= chain.pem</certificates></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 </tls></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 <connectiontimeout>360&l= t;/connectiontimeout></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 <connectionLimit>0</c= onnectionLimit></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 <connectionLimitPerIP>0&= lt;/connectionLimitPerIP></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 <connectionBacklog>200&l= t;/connectionBacklog></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 <verifyIdentity>false<= ;/verifyIdentity></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 <maxmessagesize>25M</= maxmessagesize></div> <div class=3D"plain_line"><addressBracketsEnforcement>false</addre= ssBracketsEnforcement></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 <helloName autodetect=3D"fa= lse">mail.kps-t.ru</helloName></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 <smtpGreeting>mail.kps-t= .ru</smtpGreeting></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 <heloEnforcement>false&l= t;/heloEnforcement></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 <handlerchain></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <ha= ndler class=3D"org.apache.james.smtpserver.fastfail.ValidRcptHandler"/><= /div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <ha= ndler class=3D"org.apache.james.smtpserver.CoreCmdHandlerLoader"/></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 </handlerchain></div> <div class=3D"plain_line"></smtpserver></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 <smtpserver enabled=3D"true= "></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <jm= xName>smtpserver-TLS</jmxName></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <bi= nd>0.0.0.0:465</bind></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <he= lloName autodetect=3D"false">mail.kps-t.ru</helloName></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <co= nnectionBacklog>200</connectionBacklog></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <tl= s socketTLS=3D"true" startTLS=3D"false"></div> <div class=3D"plain_line"><privateKey>file://../cert/mail.kps-t.ru-ke= y.pem</privateKey></div> <div class=3D"plain_line"><certificates>file://../cert/mail.kps-t.ru-= chain.pem</certificates></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 </t= ls></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <co= nnectiontimeout>360</connectiontimeout></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <co= nnectionLimit>0</connectionLimit></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <co= nnectionLimitPerIP>0</connectionLimitPerIP></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <au= th></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 <announce>always</announce></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 <requireSSL>true</requireSSL></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 <plainAuthEnabled>true</plainAuthEnabled></d= iv> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 </a= uth></div> <div class=3D"plain_line"><authorizedAddresses>127.0.0.0/8</author= izedAddresses></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <ve= rifyIdentity>true</verifyIdentity></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <ma= xmessagesize>100M</maxmessagesize></div> <div class=3D"plain_line"><addressBracketsEnforcement>true</addres= sBracketsEnforcement></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <sm= tpGreeting>mail.kps-t.ru</smtpGreeting></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <ha= ndlerchain></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 <handler class=3D"org.apache.james.smtpserver.fastfai= l.ValidRcptHandler"/></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 <handler class=3D"org.apache.james.smtpserver.CoreCmd= HandlerLoader"/></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 </h= andlerchain></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 </smtpserver></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 <smtpserver enabled=3D"true= "></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <jm= xName>smtpserver-authenticated</jmxName></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <bi= nd>0.0.0.0:587</bind></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <he= lloName autodetect=3D"false">mail.kps-t.ru</helloName></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <co= nnectionBacklog>200</connectionBacklog></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <tl= s socketTLS=3D"false" startTLS=3D"true"></div> <div class=3D"plain_line"><privateKey>file://../cert/mail.kps-t.ru-ke= y.pem</privateKey></div> <div class=3D"plain_line"><certificates>file://../cert/mail.kps-t.ru-= chain.pem</certificates></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 </t= ls></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <co= nnectiontimeout>360</connectiontimeout></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <co= nnectionLimit>0</connectionLimit></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <co= nnectionLimitPerIP>0</connectionLimitPerIP></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <au= th></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 <announce>always</announce></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 <requireSSL>true</requireSSL></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 <plainAuthEnabled>true</plainAuthEnabled></d= iv> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 </a= uth></div> <div class=3D"plain_line"><authorizedAddresses>127.0.0.0/8</author= izedAddresses></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <ve= rifyIdentity>true</verifyIdentity></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <ma= xmessagesize>100M</maxmessagesize></div> <div class=3D"plain_line"><addressBracketsEnforcement>true</addres= sBracketsEnforcement></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <sm= tpGreeting>mail.kps-t.ru</smtpGreeting></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <ha= ndlerchain></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 <handler class=3D"org.apache.james.smtpserver.fastfai= l.ValidRcptHandler"/></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 <handler class=3D"org.apache.james.smtpserver.CoreCmd= HandlerLoader"/></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 </h= andlerchain></div> <div class=3D"plain_line">=C2=A0=C2=A0=C2=A0 </smtpserver></div> <div class=3D"plain_line"></smtpservers></div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">29.04.2025 22:38, David Matthews =D0=BF=D0=B8=D1= =88=D0=B5=D1=82:</div> <blockquote type=3D"cite" class=3D"cite"> <blockquote type=3D"cite" class=3D"cite"> <div class=3D"plain_line">so my config for now is good?</div> <div class=3D"plain_line">can i send full smtp config to u? :)</div> <div class=3D"plain_line">=C2=A0</div> </blockquote> <div class=3D"plain_line">hi</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">You can confirm Quan's diagnosis at</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line"><a href=3D"https://mxtoolbox.com/diagnostic.aspx"= >https://mxtoolbox.com/diagnostic.aspx</a></div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">These days (for the last 15 years at least) a mai= l exchanger configured as an open relay is considered a gross misconfigurat= ion and your domain will likely get blocked for facilitating abuse.</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">-- David Matthews</div> <div class=3D"plain_line"><a href=3D"mailto:[email protected]">mail@dmatth= ews.org</a></div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">-------------------------------------------------= --------------------</div> <div class=3D"plain_line">To unsubscribe, e-mail:<a href=3D"mailto:server-u= [email protected]">[email protected]<= /a></div> <div class=3D"plain_line">For additional commands, e-mail:<a href=3D"mailto= :[email protected]">[email protected]</a></= div> <div class=3D"plain_line">=C2=A0</div> </blockquote> </blockquote> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">=C2=A0</div> <div class=3D"plain_line">-------------------------------------------------= --------------------</div> <div class=3D"plain_line">To unsubscribe, e-mail: <a href=3D"mailto:server-= [email protected]">[email protected]= </a></div> <div class=3D"plain_line">For additional commands, e-mail: <a href=3D"mailt= o:[email protected]">[email protected]</a><= /div> </blockquote></div> </body></html> --------=_MB7EAF0564-DEED-4E97-86DA-A24C707918DF-- --------=_MB9701A2B4-32BC-49C1-BCEE-014A7668C526--