Zimbra offers Open Source email server software and shared calendar for Linux and the Mac
Go Back   Zimbra :: Forums > Zimbra Collaboration Suite > Administrators

Welcome to the Zimbra :: Forums!
Welcome, if you would like to post a comment please register. We also encourage you to explore all things Zimbra with our team and members of the community.

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 12-23-2008, 04:46 PM
Elite Member
 
Posts: 376
Default 450 Helo command rejected: Host not found

Quote:
Dec 23 15:28:55 mail postfix/smtpd[20184]: NOQUEUE: reject: RCPT from mail.incomingdomain.org[123.456.789.123]: 450 4.7.1 <hostxx.internalsubnet.incomingdomain.org>: Helo command rejected: Host not found; from=<person@commercialdomain.com> to=<myperson@mydomain.com> proto=ESMTP helo=<hostxx.internalsubnet.incomingdomain.org>
Above is the error I get in mail.log, details edited to protect the innocent.

The following are turned on in the global settings:
  • Hostname in greeting violates RFC (reject_invalid_hostname)
  • Client's IP address (reject_unknown_client)
  • Hostname in greeting (reject_unknown_hostname)
  • Sender's domain (reject_unknown_sender_domain)
The two FQDN options are off since so many people can't configure a DNS server correctly.

Anyway, is there a way I can allow matching domain.com type addresses through? All of a sudden recently (last couple weeks) this has been rather common.
__________________
Culley
Mail | Dell 2950III | 2x Quad Core 5420 | 8gb RAM | 6x 146gb SAS RAID 0+1 | Red Hat 5.3 | Zimbra 6.0.10 Network Edition
Test | VMware ESXi Whitebox | Phenom II Black 3.2ghz | 12gb RAM | 6x 1tb SATA RAID 0+1 | CentOS 5.4 | FOSS, Not in use now
Reply With Quote
  #2 (permalink)  
Old 12-29-2008, 04:22 PM
Elite Member
 
Posts: 376
Default

Any ideas out there?
__________________
Culley
Mail | Dell 2950III | 2x Quad Core 5420 | 8gb RAM | 6x 146gb SAS RAID 0+1 | Red Hat 5.3 | Zimbra 6.0.10 Network Edition
Test | VMware ESXi Whitebox | Phenom II Black 3.2ghz | 12gb RAM | 6x 1tb SATA RAID 0+1 | CentOS 5.4 | FOSS, Not in use now
Reply With Quote
  #3 (permalink)  
Old 05-11-2010, 11:06 PM
Intermediate Member
 
Posts: 18
Default

bump
same issue here
Reply With Quote
  #4 (permalink)  
Old 05-12-2010, 06:15 AM
Senior Member
 
Posts: 73
Default

The only thing you can do is to disable the "Hostname in greeting (reject_unknown_hostname)" option.

The better way would be to force the admin of the other company to configure his mailserver and DNS server corectly

yogg
__________________
Release 7.1.2_GA_3268.UBUNTU8_64 UBUNTU8_64 NETWORK edition.
Reply With Quote
  #5 (permalink)  
Old 05-12-2010, 06:51 AM
Moderator
 
Posts: 1,209
Default

In our experience working with large mail servers over the years, there are too many large ISPs and other corporate systems configured not in strict compliance with the RFCs.

So, to avoid filtering out legitimate email ("false positives") in Zimbra, we find that on the Configuration > Global Settings section > MTA tab in the Console that the only Protocol Check which can be safely enabled is reject_non_fqdn_sender, and the only DNS Check which can be safely enabled is reject_unknown_sender_domain.

Enabling any other Protocol or DNS Checks will result in false positives and upset end users.

The good news is that a well-tuned anti-spam system will block all the garbage those additional Protocol and DNS Checks would have blocked, but without false positives.

Hope that helps,
Mark
__________________
___________________________________
L. Mark Stone, CIO


"Uptime. All the time."

477 Congress Street | Portland, ME 04101-3431 | (207) 772-5678

proactive maintenance and monitoring | technology consulting
Zimbra groupware | EMR implementations | private cloud hosting
Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes


Similar Threads

Why Join?

Registering let's you ask questions, makes it easier to search, displays any files attached to posts, and notifies you about replies.

blog.zimbra.com




 

SEO by vBSEO ©2011, Crawlability, Inc.