Discuss mailing list

[Sgiath <sgiath AT sgiath.dev>]

On 2021-09-10 12:27 PM, Paczki wrote:
> I am registering an OpenNIC account with a Gmail (I also tried my 
> self-hosted mail server, which I am sending this e-mail from), but I 
> have never received the confirmation e-mail that OpenNIC is meant to send.
> 
> Checking my Postfix logs on my mail server showed nothing.
> 
> If anyone could help me with this I’d really appreciate it.

Hi, I had the same problem with my self-hosted mail server and I found out 
that my Postfix configuration was too strict for OpenNIC mail servers. They 
were 
not passing the `reject_invalid_helo_hostname` check. I was able to "fix" it 
by 
adding this to my configuration:

      smtpd_helo_restrictions =
        permit_mynetworks
        reject_non_fqdn_helo_hostname
        reject_invalid_helo_hostname
        reject_unknown_helo_hostname
+       check_helo_access hash:/etc/postfix/access_exceptions
        permit 

And creating file `/etc/postfix/access_exceptions` :

    util-01.opennicproject.org  OK
    util-02.opennicproject.org  OK

(and of course running `postmap access_exceptions`)

It is probably because OpenNIC does not have PTR record setup correctly:

    $ drill util-01.opennicproject.org
    util-01.opennicproject.org.     123     IN      A       168.119.153.26

    $ drill -x 168.119.153.26
    26.153.119.168.in-addr.arpa.    86239   IN      PTR     static 
26.153.119.168.clients.your-server.de.

Hope it will help to resolve your issue
-- 
Sgiath
https://sgiath.dev
GPG: 0x70F9C7DE34CB3BC8

Why is HTML email a security nightmare? See https://useplaintext.email/

Attachment: signature.asc
Description: This is a digitally signed message part.