Postfix connection refused

Discussion in 'Server Operation' started by Mr. Print, Dec 13, 2010.

  1. Mr. Print

    Mr. Print New Member

    Port 25 is open on ISP, Modem, and router. Postfix appears to be configured correctly. Form mail will delivery mail to address on server. Can delivery mail from one domain name to another on same server, mail will forward to outside address on different server. (Configured in ISPConfig 2 to forward to different email address.) However, I cannot send or receive email to outside address. This had previouslu been working.

    Mail log:

    # tail /var/log/maillog
    Dec 13 10:54:09 host postfix/smtp[23867]: connect to mail.mymail-in.net[217.20.163.8]:25: Connection refused
    Dec 13 10:54:09 host postfix/smtp[23871]: 05D404E86CC: to=<[email protected]>, relay=none, delay=21580, delays=21572/0.06/7.1/0, dsn=4.4.1, status=deferred (connect to mail.mymail-in.net[217.20.163.8]:25: Connection refused)
    Dec 13 10:54:09 host postfix/smtp[23869]: 186714E810E: to=<[email protected]>, relay=none, delay=147461, delays=147454/0.04/7.2/0, dsn=4.4.1, status=deferred (connect to mail.mymail-in.net[217.20.163.8]:25: Connection refused)
    Dec 13 10:54:09 host postfix/smtp[23867]: 745484E8359: to=<[email protected]>, relay=none, delay=197632, delays=197625/0.02/7.2/0, dsn=4.4.1, status=deferred (connect to mail.mymail-in.net[217.20.163.8]:25: Connection refused)
    Dec 13 10:54:15 host postfix/smtp[23868]: connect to mail.mymail-in.net[217.20.163.8]:25: Connection refused
    Dec 13 10:54:15 host postfix/smtp[23868]: CFB364E8350: to=<[email protected]>, relay=none, delay=210426, delays=210413/0.03/13/0, dsn=4.4.1, status=deferred (connect to mail.mymail-in.net[217.20.163.8]:25: Connection refused)
    Dec 13 10:57:03 host dovecot: pop3-login: Login: user=<web1_admin>, method=PLAIN, rip=::ffff:173.8.81.81, lip=::ffff:192.168.0.19
    Dec 13 10:57:03 host dovecot: pop3-login: Login: user=<web1_>, method=PLAIN, rip=::ffff:173.8.81.81, lip=::ffff:192.168.0.19
    Dec 13 10:57:03 host dovecot: POP3(web1_admin): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0
    Dec 13 10:57:03 host dovecot: POP3(web1_): Disconnected: Logged out top=0/0, retr=0/0, del=0/4, size=3792

    I don't understand where this address come from "status=deferred (connect to mail.mymail-in.net[217.20.163.8]:25: Connection refused)"

    IP or domain name is not on any blacklist.

    Able to sent mail from terminal to server web address

    # host relay-test.mail-abuse.org
    relay-test.mail-abuse.org is an alias for cygnus.mail-abuse.org.
    cygnus.mail-abuse.org has address 168.61.4.13

    # telnet mx3.hotmail.com 25
    Trying 65.55.37.88...
    Connected to mx3.hotmail.com.
    Escape character is '^]'.
    220 col0-mc2-f18.Col0.hotmail.com Sending unsolicited commercial or bulk e-mail to Microsoft's computer network is prohibited. Other restrictions are found at http://privacy.msn.com/Anti-spam/. Violations will result in use of equipment located in California and other states. Mon, 13 Dec 2010 08:10:00 -0800

    # postconf -n | wc -l
    42

    # telnet localhost 25
    Trying 127.0.0.1...
    Connected to localhost.
    Escape character is '^]'.
    220 host.designoutput.net ESMTP Postfix
    ehlo localhost
    250-host.designoutput.net
    250-PIPELINING
    250-SIZE 10240000
    250-VRFY
    250-ETRN
    250-STARTTLS
    250-AUTH LOGIN PLAIN
    250-AUTH=LOGIN PLAIN
    250-ENHANCEDSTATUSCODES
    250-8BITMIME
    250 DSN
    quit
    221 2.0.0 Bye

    # lsof -i tcp:25
    COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
    master 10910 root 12u IPv4 39033 TCP *:smtp (LISTEN)
    master 10910 root 13u IPv6 39035 TCP *:smtp (LISTEN)


    I tried to provide as much information as possible so that someone might be able to help me. I have worked on this issue for days. I think it may have something to do with MX records, but do not have the knowledge to fix and I have read everything I can find.

    Thanks in advance for your time.
     
  2. falko

    falko Super Moderator ISPConfig Developer

    Can you check here if your server is blacklisted? http://mxtoolbox.com/blacklists.aspx

    Do you have a dynamic IP?

    You can check if your MX record is correct like this:
    Code:
    dig mx yourdomain.com
     
  3. pinguinito

    pinguinito New Member

    ISPCnfig 3.0.3 and Postfix

    Hi Falko.

    I have installed ISPConfig 3.0.3 successfully in a single server, my public IP is dynamic and of course I am getting :

    (delivery temporarily suspended: connect to servessserver1.example.com[63.251.179.17]:25: Connection timed out)
    [email protected]

    after set up a web with elgg, thanks to your "HOwto..."

    my dig command for my domain is:


    :~$ dig mx example.com

    ; <<>> DiG 9.6-ESV-R1 <<>> mx example.com
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35711
    ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;example.com. IN MX

    ;; ANSWER SECTION:
    example.com. 86400 IN MX 10 mx01.1and1.com.
    example.com. 86400 IN MX 10 mx00.1and1.com.

    ;; Query time: 75 msec
    ;; SERVER: 192.168.0.1#53(192.168.0.1)
    ;; WHEN: Tue Dec 14 15:12:54 2010
    ;; MSG SIZE rcvd: 76


    Right now I can not get and static IP. So I am thinking for possible solutions in;

    How To Relay Email On A Postfix Server:
    http://www.howtoforge.com/how-to-relay-email-on-a-postfix-server


    Or:

    In the ISPConfig Manual talk about:

    Email Routing


    Are this solutions relay to each others?
    Am I right?
    Are there other solutions?

    thank you for your attention and your good job
     
  4. Mr. Print

    Mr. Print New Member

    I have a static IP

    I am not on any blacklist.

    Results of dig

    # dig mx designoutput.net

    ; <<>> DiG 9.5.0-P2 <<>> mx designoutput.net
    ;; global options: printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16748
    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;designoutput.net. IN MX

    ;; ANSWER SECTION:
    designoutput.net. 86400 IN MX 10 mail.designoutput.net.

    ;; Query time: 313 msec
    ;; SERVER: 213.191.92.86#53(213.191.92.86)
    ;; WHEN: Tue Dec 14 15:21:32 2010
    ;; MSG SIZE rcvd: 55

    I do not know where this comes from "SERVER: 213.191.92.86#53(213.191.92.86)"

    I have viewed many if not all your posts and I want to thank you for answering my post. I keep reading everything about MX records and I must be missing something for I don't really understand especially SPF.

    The only thing that I have found is that Clamav is out of date to lastest version.(have a fear I might break something and I wish to work on one problem at a time) I would give root access to you via of PM if you would like. I have tried every test I can find. I try very hard to search the forums and Google everything prior to making posts. I am really lost this time. The mail issue is very important to me.

    I want to thank you for answering posts on this forum, it is difficult to answer questions from those of us that have limited knowledge and when we do not use correct terms.

    It appears that port 25 times out. I can send mail from the terminal. Mail had worked until recently....I cannot find any errors in the maillog, that is why I was thinking it might have something to do with MX records, also checkDNS.net states timed out. If someone would ever show me exactly how MX record are to work in ISPConfig then I think I would understand. I think many others are as confused as I. I have followed you posts on the subject, but for some reason I don't fully understand.
     
  5. matty

    matty Member

    Is this site the only issue? It doesn't accept connections from me, either. In this case, the issue is at their end.

    That is the nameserver that is answering your dig query. Probably your ISP's.
     
  6. Mr. Print

    Mr. Print New Member

    My problem is that I cannot send and receive mail. I have tried to find something wrong or an error and the only thing that I have found so far is the mail server times out. I cannot figure out why it times out.....

    Thanks
     
  7. pinguinito

    pinguinito New Member

    ISPCnfig 3.0.3 and Postfix

    Do you have a Dynamic Public IP?????
     
  8. Mr. Print

    Mr. Print New Member

    Static IP address/
     
  9. Mr. Print

    Mr. Print New Member

    falko, this thread is difficult to follow. Had previously answered above questions in this thread. I think I may have found something that is causing mail not to send and receive.

    Is this my problem
    How do I fix if this is my problem?

    I really appreciate the help I've worked for days on this issue/
     
  10. falko

    falko Super Moderator ISPConfig Developer

    I can't connect to that server either, so it's a problem at their end:

    Code:
    server1:~# telnet 217.20.163.8 25
    Trying 217.20.163.8...
    telnet: Unable to connect to remote host: Connection refused
    server1:~#
     
  11. Mr. Print

    Mr. Print New Member

    faiko, I appreciate the reply. I am unable to send and receive email from our server. I have tried everything I can think of. I'm quoting this again ...is this the problem that is causing mail not to send and receive:

    Is this my problem?
    I apologize for asking the question again.

    Edit: ADDITIONAL
    If an email is sent to a domain name on this server and that domain has forward to an outside email address configured in ISPConfig it will forward that email to an address outside that resides on another server, however if squirrel mail is used to send an email to an outside address that email is never sent. I can send mail via of terminal to an email address on server, however I cannot send an email from outside address to server.

    I have worked on this issue for days, hour after hour....I hope someone will really offer some insight here.


    Thanks for you time.
     
    Last edited: Dec 16, 2010
  12. falko

    falko Super Moderator ISPConfig Developer

    No.

    Have you tried to send to different email providers, e.g. Yahoo email addresses, Gmail email addresses, Hotmail, GMX, other email addresses? Do none of them work, or do some work and some others not?

    Please check if the MX record of your domain is pointing to the correct server. You can check that as follows:
    Code:
    dig mx yourdomain.com
     
  13. Mr. Print

    Mr. Print New Member


    Have tried sending to hotmail, and several others. Have also tried sending from hotmail and another account I have. I get Delivery status notification saying things like Delivery to the following recipients is still underway after 49.3 hour(s):

    I appreciate you help.
     
  14. matty

    matty Member

    The problem seems to be with your DNS servers.

    I can't query anything about your domain designoutput.net. It looks like your glue records point both ns1.designoutput.net & ns2.designoutput.net to 173.8.81.81 (you really should have two different nameservers, btw). That IP doesn't answer queries for your domain - at least not from external sources.
     
  15. falko

    falko Super Moderator ISPConfig Developer

  16. Mr. Print

    Mr. Print New Member

    Marty, I really appreciate the reply. We had took the server offline and totally rebuilding. We were running an older core Fedora 8 and it was time to upgrade. I was very aware that something was causing a problem on port 25, I just didn't have the knowledge to fix. Hopefully this problem will be resolved on our new build.

    Thanks for giving up you time to answer question on the forum
     

Share This Page