免费注册 查看新帖 |

Chinaunix

  平台 论坛 博客 文库
最近访问板块 发新帖
查看: 9230 | 回复: 7
打印 上一主题 下一主题

[Mail] 163邮箱无法发邮件到公司内网的邮件服务器(做了NAT) [复制链接]

论坛徽章:
0
跳转到指定楼层
1 [收藏(0)] [报告]
发表于 2006-06-23 16:09 |只看该作者 |倒序浏览
邮件服务器是qmail做的,搭建在公司内网的,通过NAT 隐射了25 80 110到该服务器上。163将我的邮件服务器认成了内网的ip地址,以前是正常的,非常郁闷,这样的问题有兄弟遇到过吗?如何解决
退信内容如下:
你发送到sea@xxx.cn的邮件由于以下原因被退回:sea@xxx.cn SMTP error, RCPT TO: 550 See http://spf.pobox.com/why.html?se ... 00.1&receiver=0 (#5.7.1)

0 rejected a message claiming to be from ae88978@126.com.
0 saw a message coming from the IP address 192.168.100.1; the sender claimed to be ae88978@126.com.

However, 126.com has announced using SPF that it does not send mail out through 192.168.100.1. That is why the mail was rejected.

If you are ae88978@126.com:
126.com should have given you a way to send mail through an approved server.

If you are using a mail program instead of webmail, you may need to update the SMTP server configuration setting according to your ISP's instructions. You may also need to turn on authentication, and enter your username and password in your mail program's "Preferences".

If you run your own MTA, you may need to set a smarthost or relayhost. If you are mailing from outside your ISP's network, you may also need to make your MTA authenticate SMTP using SASL. Ideally your server should listen on port 587 as well as port 25.

If your mail was correctly sent, but was rejected because it passed through a forwarding service, you can either mail the final destination address directly (it should be shown in the bounce message) or you ask the forwarder to implement SRS. If neither of these suggestions is practical, change your "-all" to "?all" until a more comprehensive approach to sender authentication involving cryptography solves the forwarding problem for good. For more information on this problem, see pages 15-16 of the SPF Whitepaper.

You can also try emailing your recipient at an alternative email address.

Please contact your ISP for further assistance; ask them for help in configuring outbound SMTP email.

If your company needs further help, we provide a full range of consulting services to help you resolve these problems quickly.

If you are confident your mail did go through an approved server:
The system administrator for 126.com may have incorrectly configured its SPF record. This is a common cause of mistakes.

Here's what you can do. Contact the system administrator responsible for 126.com and tell them that they need to change its SPF record so that it contains 192.168.100.1.

For example, they could change the record to something like

  v=spf1 ip4:220.181.12.0/22 ip4:202.108.5.0/24 ip4:192.168.100.1 -all
If you can show this web page to your system administrator, they should be able to solve the problem.

If you did not send the message:
SPF successfully blocked a forgery attempt; someone tried to send mail pretending to be from you, but the message was rejected before anybody saw it. If you received a bounce message, you can delete it. This means SPF is working as designed.

论坛徽章:
0
2 [报告]
发表于 2006-06-23 17:02 |只看该作者
sea@xxx.cn

XXX是什么? 你XXX 想帮助你的人如何帮你实验?

论坛徽章:
0
3 [报告]
发表于 2006-06-23 17:27 |只看该作者
小弟我的也是类似的情况。

小弟最近安装了一台qmail+vpopmail服务器,是通过防火墙的一个端口IP(222.x.x.235)上网的,服务器IP为222.x.x.238,网关设为222.x.x.1。
起初在tcp.smtp中添加了222.x.x.235:allow,RELAYCLIENT=""',收发邮件都很正常。但是随后发现成了OpenRelay,于是马上删除222.x.x.235所在行,并执行tcprules tcp.smtp.cdb tcp.smtp.tmp <tcp.smtp。结果问题出来了,用163等外部邮箱给它发不了,163退信并报错:
SMTP error, RCPT TO: 550 See http://spf.pobox.com/why.html?se ... .235&receiver=0
请大哥们指导一下,小弟是初学者,感恩不尽。

论坛徽章:
0
4 [报告]
发表于 2006-06-23 17:31 |只看该作者
我自己修改了一下smtpd启动脚本,现在我的smtp认证经测试必须需要验证才能发到外面。只是外部邮件还是只能发、不能收,仍然报550那个错,会不会与发信人DNS检查有关呀。还是说我的smtp文件配置得不对?我的/home/vpopmail/etc/tcp.smtp内容只有:127.0.0.1:allow,RELAYCLIENT="" ,加上222.x.x.235:allow,RELAYCLIENT="" 就能收到外部邮件,但是会OpnRelay;去掉就收不到。另外,在/var/qmail/control/rcpthosts里加上163.com,仍然不能收。

论坛徽章:
0
5 [报告]
发表于 2006-06-23 17:31 |只看该作者
原来smtpd的启动脚本里启用了tcp.smtp这个文件,那么qmail就会忽略rcpthosts这个文件。所以我在rcpthosts里加163.com根本就没意义,呵呵。但是tcp.smtp和smtp认证呢,是不是先在tcp.smtp中找,找不到就进行认证呢?

我的smtpd启动脚本

!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
exec /usr/local/bin/softlimit -m 8000000 \
/usr/local/bin/tcpserver -v -H -R -l 0 \
-x /home/vpopmail/etc/tcp.smtp.cdb -c "$MAXSMTPD" \
-u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
/var/qmail/bin/qmail-smtpd \
/home/vpopmail/bin/vchkpw /bin/true 2>&1

论坛徽章:
0
6 [报告]
发表于 2006-06-23 17:32 |只看该作者
我测试了一下,发现我的smtpd-auth补丁没问题,具体如下:
telnet 127.0.0.1 25
Escape character is '^]'.
220 mail.test.com ESMTP
ehlo
250-mail.test.com
250-STARTTLS
250-PIPELINING
250-8BITMIME
250-SIZE 10485760
250 AUTH LOGIN PLAIN CRAM-MD5


用outlook发外部邮件的时候,SMTP不加验证就提示:
553 sorry, that domain isn't in my list of allowed rcpthosts
加上SMTP验证就可以正常发邮件。

以上是不是说明我的SMTP认证是对的?
如果是对的话,为什么我收不到外部邮件呢?
还请大哥们指导一二。

论坛徽章:
0
7 [报告]
发表于 2006-06-23 20:30 |只看该作者
邮件系统是建立在vmware环境中,也是通过vmware的nat将25 110对外映射实现收发邮件,麻烦各位帮忙看看。

[ 本帖最后由 itsea 于 2006-7-1 18:28 编辑 ]

论坛徽章:
0
8 [报告]
发表于 2006-07-07 10:26 |只看该作者
To itsea:
我的已经解决了,是我自己服务器spf的问题,因为spf 只能放在网关邮件服务器上面。
具体处理方法就是将 /var/qmail/control/ 下的defaultdelivery和spfbehavior删除,以停用spf。

不知itsea兄是不是和我一样的情况。

[ 本帖最后由 leo4364088 于 2006-7-7 10:29 编辑 ]
您需要登录后才可以回帖 登录 | 注册

本版积分规则 发表回复

  

北京盛拓优讯信息技术有限公司. 版权所有 京ICP备16024965号-6 北京市公安局海淀分局网监中心备案编号:11010802020122 niuxiaotong@pcpop.com 17352615567
未成年举报专区
中国互联网协会会员  联系我们:huangweiwei@itpub.net
感谢所有关心和支持过ChinaUnix的朋友们 转载本站内容请注明原作者名及出处

清除 Cookies - ChinaUnix - Archiver - WAP - TOP