« Return to Thread: Incorrect authentication data message

Re: Incorrect authentication data message

by Dennis Guhl-3 :: Rate this Message:

| View in Thread

On Wed, Jun 20, 2012 at 07:40:27PM +0100, Nicolás wrote:
> El 20/06/2012 17:12, Dennis Guhl escribió:

[..]

> >Are you really sure your email is directed to the correct server? Is
> >the A record for domain.es the same as for mail.domain.es?
>
> That was the real mistake. As it was not resolving the MX record, it
> was sending the request directly to the registrar server - where
> there is no server. So I now changed that, but when I try to send an
> e-mail now, I get the following error:
>
> Jun 20 19:25:01 mail postfix/smtpd[14475]: connect from
> my.ip.add.ress[my.ip.add.ress]
> Jun 20 19:25:02 mail policyd-spf[14480]: None; identity=helo;
> client-ip=my.ip.add.ress; helo=nagios.localdomain;
> envelope-from=root@...; receiver=nicolas@...
> Jun 20 19:25:02 mail policyd-spf[14480]: None; identity=mailfrom;
> client-ip=my.ip.add.ress; helo=nagios.localdomain;
> envelope-from=root@...; receiver=nicolas@...
> Jun 20 19:25:03 mail postfix/smtpd[14475]: NOQUEUE: reject: RCPT
> from my.ip.add.ress[my.ip.add.ress]: 450 4.7.1 <nagios.localdomain>:
> Helo command rejected: Host not found;

Your mailserver can not find the HELO name your client provided and
thus rejected the mail, because in one of your
smtpd_mumble_restrictions you set reject_unknown_helo_hostname
(http://www.postfix.org/postconf.5.html#reject_unknown_helo_hostname)
prior to permit_sasl_authenticated. To see why you probably don't want
reject_unknown_helo_hostname at all see the list archives.

> from=<root@...> to=<nicolas@...> proto=ESMTP
> helo=<nagios.localdomain>

This is the offending HELO.

> Jun 20 19:25:03 mail postfix/smtpd[14475]: disconnect from
> my.ip.add.ress[my.ip.add.ress]
>
> I understand the client is identifying itself as
> root@..., but what I want to achieve is to identify

No, the client is rejected due to the unknown HELO name. Specify
myhostname (http://www.postfix.org/postconf.5.html#myhostname) with a
resolvable name on your client or put reject_unknown_helo_hostname
after permit_sasl_authenticated on your server.

As it might lead to further problems: To match your MAIL FROM to your
SASL username set myorigin
(http://www.postfix.org/postconf.5.html#myorigin) accordingly.

In case of further problems please show the servers postconf -n
completely and unaltered.

Dennis

[..]

 « Return to Thread: Incorrect authentication data message