Postfix not send mails. Only receive mails

aaP_imanjah

I am setup Mail Server 4.7 on my aaPanel

I use TheBat for send and receive mails. I am can receive incoming mails but can't send any email to others.

I try use ports 25, 465, 587 but the same error

In the logs I ahve such line:

Aug 29 18:39:17 www postfix/smtpd[190926]: warning: error opening chain file: /etc/ssl/private/ssl-cert-snakeoil.key: No such file or directory
Aug 29 18:39:17 www postfix/smtpd[190926]: connect from unknown[unknown]
Aug 29 18:39:17 www postfix/smtpd[190926]: lost connection after CONNECT from unknown[unknown]
Aug 29 18:39:17 www postfix/smtpd[190926]: disconnect from unknown[unknown] commands=0/0

Try to use a telnet:

telnet mail.mydomain.com 25
Trying XX.XX.XX.XX...
Connected to mail.mydomain.com.
Escape character is '^]'.
220 mail.mydomain.com ESMTP Postfix (Ubuntu)
HELO mydomain.com
250 mail.mydomain.com
mail from: email@mydomain.com
250 2.1.0 Ok
rcpt to: anyother@email.com
554 5.7.1 <anyother@email.com>: Relay access denied

I am try many variants from internet but not success.

My postfix config is:

# TLS parameters
#smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
#smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_security_level = may

smtp_tls_CApath=/etc/ssl/certs
smtp_tls_security_level = may
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache


smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination
myhostname = mail.mydomain.com
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination =
relayhost =
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
inet_protocols = all
virtual_mailbox_domains = sqlite:/etc/postfix/sqlite_virtual_domains_maps.cf
virtual_alias_maps = sqlite:/etc/postfix/sqlite_virtual_alias_maps.cf, sqlite:/etc/postfix/sqlite_virtual_alias_domain_maps.cf, sqlite:/etc/postfix/sqlite_virtual_alias_domai
n_catchall_maps.cf
virtual_mailbox_maps = sqlite:/etc/postfix/sqlite_virtual_mailbox_maps.cf, sqlite:/etc/postfix/sqlite_virtual_alias_domain_mailbox_maps.cf
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_auth_enable = yes
smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination
smtpd_use_tls = yes
virtual_transport = lmtp:unix:private/dovecot-lmtp
smtpd_milters = inet:127.0.0.1:11332
non_smtpd_milters = inet:127.0.0.1:11332
milter_mail_macros = i {mail_addr} {client_addr} {client_name} {auth_authen}
milter_protocol = 6
milter_default_action = accept
message_size_limit = 102400000

smtpd_tls_chain_files = /etc/ssl/private/ssl-cert-snakeoil.key,/etc/ssl/certs/ssl-cert-snakeoil.pem
tls_server_sni_maps = hash:/etc/postfix/vmail_ssl.map

Where is problems???

aaPanel_Kern

Hello, please check the logs to see what caused the problem in the sending logs.

aaP_imanjah

aaPanel_Kern

I have logs in /var/log/mail.log
But it's the same

Use 25 port

Aug 30 10:39:41 www postfix/smtpd[201098]: warning: error opening chain file: /etc/ssl/private/ssl-cert-snakeoil.key: No such file or directory
Aug 30 10:39:42 www postfix/smtpd[201098]: connect from unknown[unknown]
Aug 30 10:39:42 www postfix/smtpd[201098]: lost connection after CONNECT from unknown[unknown]
Aug 30 10:39:42 www postfix/smtpd[201098]: disconnect from unknown[unknown] commands=0/0

Use 587 port

Aug 30 10:44:29 www postfix/submission/smtpd[201153]: warning: error opening chain file: /etc/ssl/private/ssl-cert-snakeoil.key: No such file or directory
Aug 30 10:44:29 www postfix/submission/smtpd[201153]: warning: hostname dynamicip-XXX-XXX-XXX-XX.pppoe.myproviderhere does not resolve to address XXX.XXX.XXX.XX
Aug 30 10:44:29 www postfix/submission/smtpd[201153]: connect from unknown[XXX.XXX.XXX.XX]
Aug 30 10:44:29 www postfix/submission/smtpd[201153]: lost connection after CONNECT from unknown[XXX.XXX.XXX.XX]
Aug 30 10:44:29 www postfix/submission/smtpd[201153]: disconnect from unknown[XXX.XXX.XXX.XX] commands=0/0

May be I need to use other logs? Please tell me where is sending logs

aaPanel_Kern

It is recommended that you provide more information. No useful information can be seen from these logs.

aaP_imanjah

aaPanel_Kern

Yes, but what information needs? I can provide more info if you tell me what.

aaPanel_Kern

Provide a complete log of the email sending process

aaP_imanjah

aaPanel_Kern

I am can't find anything else. Where is this log file located?

aaP_demo1

aaP_imanjah

You can try send a random email first. then try fetch all mail process messages that mail server recorded in its logs for @aaPanel_Kern to investigate. Do not cut out the process message like the above logs you have provided. We do not know the root causes of this problem.

aaPanel_Kern

These files can be viewed
/var/log/mail.log or /var/log/mail*

aaP_imanjah

aaPanel_Kern

I can send you full /var/log/mail.log log by email. Where I can send it to you?

aaPanel_Kern

Hello, you can upload it to Google Cloud Drive or paste out the relevant log information or compress it and send it to kern@aapanel.com

aaP_imanjah

aaPanel_Kern

At the same time, check the postfix configuration, which can be viewed in the server status
"mail.135mailtest.com" is replaced with your domain name
Put:
smtpd_tls_chain_files=/etc/ssl/private/ssl-cert-snakeoil.key,/etc/ssl/certs/ssl-cert-snakeoil.pem
Change to:
smtpd_tls_chain_files = /www/server/panel/plugin/mail_sys/cert/135mailtest.com/privkey.pem,/www/server/panel/plugin/mail_sys/cert/135mailtest.com/fullchain.pem
Note to replace 135mailtest.com with your domain name.
Also check /www/server/panel/plugin/mail_sys/cert/135mailtest.com/ for privkey.pem and fullchain.pem files

You can use this command to check whether the correct SSL is configured
openssl s_client -connect mail.135mailtest.com:587 -starttls smtp
or
openssl s_client -connect mail.135mailtest.com:465 -starttls smtp

If the display is not OK, try to save the SSL certificate again, or please re-apply for SSL

Unable to send dkim headers
Troubleshoot log /var/log/rspamd/rspamd.log
Prompt for permission issues:
2022-04-20 00:27:56 #1363(rspamd_proxy) <6795e9>; proxy; dkim_module_load_key_format: cannot load dkim key /www/server/dkim/xx.com/default.private: cannot map key file: '/www /server/dkim/xx.com/default.private' Permission denied

Set 640 to 644, then restart rspamd to send emails to view the email source code, please replace xxx.com with your domain name.

chmod 644 /www/server/dkim/xx.com/default.private systemctl restart rspamd

Check the mail score and troubleshoot according to its error message
https://www.mail-tester.com/

Sending to gmail needs to configure SSL, do DKIM, SPF, it is best to let the network provider make the PTR RDNS record of ip

aaP_imanjah

aaPanel_Kern

I am change path to privkey.pem and fullchain.pem files as you told and now I can send from 587port using STARTTLS.
THANKS!!!!!

But 2 mail come to inbox of receiver, and other test mails is marked as spam.

I am checked https://www.mail-tester.com/ and there is 10/10 scores. But I have some issues with checking DMARC. I am send link to results to your mail. Please check.

And also what I am need to write in the PTR records at my provider: domain.com, www.domain.com or mail.domain.com?

aaPanel_Kern

aaP_imanjah
domain.com

aaP_imanjah

Thank you!