SMTP server could not receive issue

Samet Chan

July 15, 2018 19:23

I've tested lost password after doesn't get receive email. I've checked many error emails.


2018-07-16 02:08:54 SMTP connection from [IPHIDDEN]:41530 (TCP/IP connection count = 1)
2018-07-16 02:08:54 1fer4Q-000503-Uk <= official+a0f44fc8+unknownusername=gmail.com@domain.net H=(localhost) [IPHIDDEN]:41530 P=esmtpsa X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no A=dovecot_login:official@domain.net S=4249 id=a80a36da5f5607b9efcac216d80341fb713ddd9d@forum.domain.net T="Forum - DKS Password Reset Request" for unknownusername@gmail.com
2018-07-16 02:08:54 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1fer4Q-000503-Uk
2018-07-16 02:08:54 SMTP connection from (localhost) [IPHIDDEN]:41530 closed by QUIT
2018-07-16 02:08:55 1fer4Q-000503-Uk Sender identification U=username D=domain.net S=official@domain.net
2018-07-16 02:08:55 1fer4Q-000503-Uk SMTP connection outbound 1531699735 1fer4Q-000503-Uk domain.net unknownusername@gmail.com

Comments

31 comments

Jcats

July 16, 2018 01:19
That doesn't show everything, or the email is still sitting in the queue. grep 1fer4Q-000503-Uk /var/log/exim_mainlog
0
Samet Chan

July 16, 2018 01:50
That doesn't show everything, or the email is still sitting in the queue. grep 1fer4Q-000503-Uk /var/log/exim_mainlog

Here, 2018-07-16 02:08:54 1fer4Q-000503-Uk <= official+a0f44fc8+unknownusername=gmail.com@domain.net H=(localhost) [IPHIDDEN]:41530 P=esmtpsa X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no A=dovecot_login:official@domain.net S=4249 id=a80a36da5f5607b9efcac216d80341fb713ddd9d@forum.domain.net T="Forum - DKS Password Reset Request" for unknownusername@gmail.com 2018-07-16 02:08:54 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1fer4Q-000503-Uk 2018-07-16 02:08:55 1fer4Q-000503-Uk Sender identification U=someusr D=domain.net S=official@domain.net 2018-07-16 02:08:55 1fer4Q-000503-Uk SMTP connection outbound 1531699735 1fer4Q-000503-Uk domain.net unknownusername@gmail.com 2018-07-16 02:08:55 1fer4Q-000503-Uk == unknownusername@gmail.com R=dkim_lookuphost T=dkim_remote_smtp defer (-53): retry time not reached for any host for 'gmail.com' 2018-07-16 03:01:59 1fer4Q-000503-Uk Sender identification U=darks0ftw4r3 D=domain.net S=official@domain.net 2018-07-16 03:01:59 1fer4Q-000503-Uk == unknownusername@gmail.com R=dkim_lookuphost T=dkim_remote_smtp defer (-53): retry time not reached for any host for 'gmail.com'
0
Jcats

July 16, 2018 03:02
Not helping. Can you try to force send it and then post logs again: exim -M 1fer4Q-000503-Uk
0
cPanelMichael

July 16, 2018 19:59
-07-16 03:01:59 1fer4Q-000503-Uk == unknownusername@gmail.com R=dkim_lookuphost T=dkim_remote_smtp defer (-53): retry time not reached for any host for 'gmail.com'

Hello @Samet Chan, Can you check to verify if this relates to the issue noted on the thread linked below? Thank you.
0
Samet Chan

July 18, 2018 15:36
Hello @Samet Chan, Can you check to verify if this relates to the issue noted on the thread linked below?
0
cPanelMichael

July 18, 2018 15:40
Hello @Samet Chan, Can you confirm the specific steps you took before running the command again? Also, can you use telnet to check with other remote mail servers aside from Google to see if the issue is isolated to their mail servers? Thank you.
0
Samet Chan

July 18, 2018 15:44
Hello @Samet Chan, Can you confirm the specific steps you took before running the command again? Also, can you use telnet to check with other remote mail servers aside from Google to see if the issue is isolated to their mail servers? Thank you.

Here, [root@unknown ~]# telnet smtp.gmail.com 465 Trying 2a00:1450:400c:c00::6d... Connected to smtp.gmail.com. Escape character is '^]'. Connection closed by foreign host.
0
cPanelMichael

July 18, 2018 15:54
Hello @Samet Chan, Can you confirm the specific steps/commands you took on your server upon reviewing the thread linked in my earlier response? I'm referring to the manual workaround as opposed to the telnet command. Thank you.
0
Samet Chan

July 18, 2018 16:01
Hello @locki, The /etc/mailips file should be automatically populated with domain names that are assigned dedicated IP addresses upon enabling the Send mail from account's dedicated IP address option. Are you sure domain names on your system are assigned dedicated IP addresses? If not, it's normal for the file to remain blank. Thank you.

I have followed your command and step. It doesn't work. I've checked error mail logs 2018-07-18 17:56:00 SMTP connection from [IPHIDDEN]:46226 (TCP/IP connection count = 1) 2018-07-18 17:56:00 1ffoo4-0006sh-IC <= contacto+5e2bd6da+userunknown=gmail.com@domain.com H=(localhost) [IPHIDDEN]:46226 P=esmtpsa X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no A=dovecot_login:contacto@domain.com S=4255 id=9136388a605af369a5d88e3c1fb7ec10aa292532@domain.com T="Confirmaci\363n de cuenta en Domain Tu Foro Gaming requerida" for userunknown@gmail.com 2018-07-18 17:56:00 SMTP connection from (localhost) [IPHIDDEN]:46226 lost (error: Connection reset by peer) D=0s 2018-07-18 17:56:00 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1ffoo4-0006sh-IC 2018-07-18 17:56:00 1ffoo4-0006sh-IC Sender identification U=g4m3xlxgtx D=domain.com S=contacto@domain.com 2018-07-18 17:56:00 1ffoo4-0006sh-IC SMTP connection outbound 1531929360 1ffoo4-0006sh-IC domain.com userunknown@gmail.com 2018-07-18 17:56:01 1ffoo4-0006sh-IC => userunknown@gmail.com R=dkim_lookuphost T=dkim_remote_smtp H=gmail-smtp-in.l.google.com [173.194.76.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=yes C="250 2.0.0 OK 1531929361 h12-v6si2872215wre.414 - gsmtp" 2018-07-18 17:56:01 1ffoo4-0006sh-IC Completed 2018-07-18 17:56:01 SMTP connection from [IPHIDDEN]:46234 (TCP/IP connection count = 1) 2018-07-18 17:56:01 1ffoo5-0006sr-9r <= official+6a1333ab+userunknown=gmail.com@domain.net H=(localhost) [IPHIDDEN]:46234 P=esmtpsa X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no A=dovecot_login:official@domain.net S=9320 id=1404255bbb1d7a1ef2047ac3c404f4517131a1da@forum.domain.net T="[PS4] How to Install OMSK on 5.55 OFW - New reply to watched thread" for userunknown@gmail.com 2018-07-18 17:56:01 SMTP connection from (localhost) [IPHIDDEN]:46234 closed by QUIT 2018-07-18 17:56:01 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1ffoo5-0006sr-9r 2018-07-18 17:56:01 1ffoo5-0006sr-9r Sender identification U=darks0ftw4r3 D=domain.net S=official@domain.net 2018-07-18 17:56:01 1ffoo5-0006sr-9r SMTP connection outbound 1531929361 1ffoo5-0006sr-9r domain.net userunknown@gmail.com 2018-07-18 17:56:01 1ffoo5-0006sr-9r H=gmail-smtp-in.l.google.com [173.194.76.26]: SMTP error from remote mail server after end of data: 421-4.7.0 This message does not have authentication information or fails to pass\n421-4.7.0 authentication checks. To best protect our users from spam, the\n421-4.7.0 message has been blocked. Please visit\n421-4.7.0 https://support.google.com/mail/answer/81126#authentication for more\n421 4.7.0 information. i70-v6si1698693wmf.171 - gsmtp 2018-07-18 17:56:02 1ffoo5-0006sr-9r H=alt1.gmail-smtp-in.l.google.com [74.125.205.27]: SMTP error from remote mail server after end of data: 421-4.7.0 This message does not have authentication information or fails to pass\n421-4.7.0 authentication checks. To best protect our users from spam, the\n421-4.7.0 message has been blocked. Please visit\n421-4.7.0 https://support.google.com/mail/answer/81126#authentication for more\n421 4.7.0 information. s68-v6si1387245lfs.376 - gsmtp 2018-07-18 17:56:06 1ffoo5-0006sr-9r H=alt2.gmail-smtp-in.l.google.com [74.125.68.27]: SMTP error from remote mail server after end of data: 421-4.7.0 This message does not have authentication information or fails to pass\n421-4.7.0 authentication checks. To best protect our users from spam, the\n421-4.7.0 message has been blocked. Please visit\n421-4.7.0 https://support.google.com/mail/answer/81126#authentication for more\n421 4.7.0 information. 9-v6si3765348pgu.130 - gsmtp 2018-07-18 17:56:09 1ffoo5-0006sr-9r H=alt3.gmail-smtp-in.l.google.com [108.177.125.27]: SMTP error from remote mail server after end of data: 421-4.7.0 This message does not have authentication information or fails to pass\n421-4.7.0 authentication checks. To best protect our users from spam, the\n421-4.7.0 message has been blocked. Please visit\n421-4.7.0 https://support.google.com/mail/answer/81126#authentication for more\n421 4.7.0 information. x10-v6si3496116plv.1 - gsmtp 2018-07-18 17:56:11 1ffoo5-0006sr-9r => userunknown@gmail.com R=dkim_lookuphost T=dkim_remote_smtp H=alt4.gmail-smtp-in.l.google.com [74.125.195.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=yes C="250 2.0.0 OK 1531929371 m18-v6si3572757pgg.693 - gsmtp" 2018-07-18 17:56:11 1ffoo5-0006sr-9r Completed
0
cPanelMichael

July 18, 2018 16:07
I have followed your command and step. It doesn't work.

Thanks for confirming. This indicates it's unrelated to the issue on that thread.
-07-18 17:56:01 1ffoo5-0006sr-9r H=gmail-smtp-in.l.google.com [173.194.76.26]: SMTP error from remote mail server after end of data: 421-4.7.0 This message does not have authentication information or fails to pass\n421-4.7.0 authentication checks. To best protect our users from spam, the\n421-4.7.0 message has been blocked. Please visit\n421-4.7.0 How to Keep your Email Out of the Spam Folder - cPanel Knowledge Base - cPanel Documentation Thank you.
0
Samet Chan

July 18, 2018 16:35
Thanks for confirming. This indicates it's unrelated to the issue on that thread. This log output shows that Google rejected the message because it detected the message as SPAM or the server is not configured the way Google suggests. Can you review the document below and confirm your server and the sending domain name are meeting the requirements?
0
cPanelMichael

July 18, 2018 16:48
Could you tell me to step from DMARC and SPF default on my server add to Cloudflare DNS?

Hello, Since the DNS is handled through CloudFlare, you'll need to manually add the SPF, DKIM, and DMARC records through the CloudFlare interface. CloudFlare's support team should be able to help you with this if you encounter any problems with their interface. Here's the option in cPanel to generate the SPF/DKIM records: Here's the option in cPanel to generate a DMARC record: For the DKIM record, note the information in the following thread: For the DMARC record, note the following thread: Thank you.
0
Samet Chan

July 18, 2018 17:24
Hello, Since the DNS is handled through CloudFlare, you'll need to manually add the SPF, DKIM, and DMARC records through the CloudFlare interface. CloudFlare's support team should be able to help you with this if you encounter any problems with their interface. Here's the option in cPanel to generate the SPF/DKIM records: For the DKIM record, note the information in the following thread: Thank you.

Could I Enable DKIM/SPF Globally from WHM?
0
cPanelMichael

July 18, 2018 17:34
Could I Enable DKIM/SPF Globally from WHM?

Yes: Enable DKIM SPF Globally - Version 70 Documentation - cPanel Documentation However, note that you'll still need to manually insert the generated records at CloudFlare for any domain name that uses CloudFlare to manage it's DNS. Thank you.
0
Samet Chan

July 18, 2018 18:34
Yes:
0
cPanelMichael

July 18, 2018 19:03
Hello, You'll need to manually view the key file at it's /var/cpanel/domain_keys/public/domain.tld location. EX: # cat /var/cpanel/domain_keys/public/domain.tld -----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYrRWuN6UJMtiML7RLYP LjDY4j/iXrU1h++0/C2k+y40aXd3nAQmL/DRDBgeHUQjbfd0eycUfO9AlrMFMA+4 P6teINmef1Vtm+LVixJ2RfY1KVt2j5+dH1LRVhGzI+ieZukLc3AT7ASXK/XP29Wg zgBgov2C3UHHpmtVbwXj+JSkbw+zBCUFAhAQSY+zPN5I1o4d5tiBqPb/1z8uxWDQ xrspZYOv5nWsCY3NidWCMoys9I8bND6W5731mTWc/m4/ttMCSqcdiFxtid/tk/5g zX7Z5s8ijcejbt3YqKLA0wvYPIFb29wkL8CSLOtp2gHo9QB2+NZ/o8i5Dp/Zd8t3 mwIDAQAB -----END PUBLIC KEY-----
At CloudFlare, you'd enter the key from the above command after the "p=" part of the TXT record. Don't include "-----BEGIN PUBLIC KEY-----" or "-----END PUBLIC KEY-----" in the entry. Thank you.
0
Samet Chan

July 18, 2018 19:51
Hello, You'll need to manually view the key file at it's /var/cpanel/domain_keys/public/domain.tld location. EX: # cat /var/cpanel/domain_keys/public/domain.tld -----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYrRWuN6UJMtiML7RLYP LjDY4j/iXrU1h++0/C2k+y40aXd3nAQmL/DRDBgeHUQjbfd0eycUfO9AlrMFMA+4 P6teINmef1Vtm+LVixJ2RfY1KVt2j5+dH1LRVhGzI+ieZukLc3AT7ASXK/XP29Wg zgBgov2C3UHHpmtVbwXj+JSkbw+zBCUFAhAQSY+zPN5I1o4d5tiBqPb/1z8uxWDQ xrspZYOv5nWsCY3NidWCMoys9I8bND6W5731mTWc/m4/ttMCSqcdiFxtid/tk/5g zX7Z5s8ijcejbt3YqKLA0wvYPIFb29wkL8CSLOtp2gHo9QB2+NZ/o8i5Dp/Zd8t3 mwIDAQAB -----END PUBLIC KEY-----
At CloudFlare, you'd enter the key from the above command after the "p=" part of the TXT record. Don't include "-----BEGIN PUBLIC KEY-----" or "-----END PUBLIC KEY-----" in the entry. Thank you.

I got the error: Invalid TXT record. Record may only contain printable ASCII v=DKIM1; k=rsa; p=KEY
0
Samet Chan

July 19, 2018 12:17
Hello, You'll need to manually view the key file at it's /var/cpanel/domain_keys/public/domain.tld location. EX: # cat /var/cpanel/domain_keys/public/domain.tld -----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYrRWuN6UJMtiML7RLYP LjDY4j/iXrU1h++0/C2k+y40aXd3nAQmL/DRDBgeHUQjbfd0eycUfO9AlrMFMA+4 P6teINmef1Vtm+LVixJ2RfY1KVt2j5+dH1LRVhGzI+ieZukLc3AT7ASXK/XP29Wg zgBgov2C3UHHpmtVbwXj+JSkbw+zBCUFAhAQSY+zPN5I1o4d5tiBqPb/1z8uxWDQ xrspZYOv5nWsCY3NidWCMoys9I8bND6W5731mTWc/m4/ttMCSqcdiFxtid/tk/5g zX7Z5s8ijcejbt3YqKLA0wvYPIFb29wkL8CSLOtp2gHo9QB2+NZ/o8i5Dp/Zd8t3 mwIDAQAB -----END PUBLIC KEY-----
At CloudFlare, you'd enter the key from the above command after the "p=" part of the TXT record. Don't include "-----BEGIN PUBLIC KEY-----" or "-----END PUBLIC KEY-----" in the entry. Thank you.

Never mind, I got it. But I could use forum.domain.ltd, without domain.ltd, I would need to use key in forum.domain.ltd or just a domain.ltd?
0
cPanelMichael

July 19, 2018 15:17
Never mind, I got it. But I could use forum.domain.ltd, without domain.ltd, I would need to use key in forum.domain.ltd or just a domain.ltd?

Hello, You could remove the subdomain and then add it as an addon domain name on the cPanel account so it's own separate local DNS zone is created with it's own DKIM and SPF records. You'd then need to apply those records (viewable via WHM >> Edit DNS Zone) at the DNS provider of the parent domain name. Thank you.
0
Samet Chan

July 23, 2018 13:56
Hello, You could remove the subdomain and then add it as an addon domain name on the cPanel account so it's own separate local DNS zone is created with it's own DKIM and SPF records. You'd then need to apply those records (viewable via WHM >> Edit DNS Zone) at the DNS provider of the parent domain name. Thank you.

Thanks, I added to DNS. But I don't know about DMARC Records v=DMARC1;p=none;rua=mailto:user@example.com 1) What DMARC need A or TXT, CNAME, MX, etc? 2) user@example.com could be my cPanel email from the site?
0
cPanelMichael

July 23, 2018 15:53
But I don't know about DMARC Records v=DMARC1;p=none;rua=mailto:user@example.com 1) What DMARC need A or TXT, CNAME, MX, etc? 2) user@example.com could be my cPanel email from the site?

Hello, DMARC entries are added as TXT records. You can use "cPanel >> Zone Editor" to generate the record contents that you can then setup at the DNS hosting provider (e.g. CloudFlare): See this post as well: Thank you.
0
Samet Chan

August 02, 2018 17:22
Hello, DMARC entries are added as TXT records. You can use "cPanel >> Zone Editor" to generate the record contents that you can then setup at the DNS hosting provider (e.g. CloudFlare): Thank you.

I've seen, If I am correct or not. TXT Name: domain@domain.com TXT Click to configure: v=DMARC1; p=none; fo=1; rua=mailto:domain@example.com; ruf=mailto:domain@example.com; rf=afrf; pct=100
From cloudflare DNS.
0
cPanelMichael

August 02, 2018 17:30
Hello @Samet Chan, Are you asking about the proper syntax and format to use in the CloudFlare DNS management interface? If so, that's a question better asked to CloudFlare's support team, as it's not an interface that cPanel develops or maintains the requirements on. Thank you.
0
Samet Chan

August 02, 2018 17:33
Hello @Samet Chan, Are you asking about the proper syntax and format to use in the CloudFlare DNS management interface? If so, that's a question better asked to CloudFlare's support team, as it's not an interface that cPanel develops or maintains the requirements on. Thank you.

No, that not. I'm talking about DMARC1 add to TXT Record which is correct in Name & Configure on Cloudflare. default._domainkey or something correct in DMARC1 on TXT Record.
0
cPanelMichael

August 02, 2018 17:38
Hello @Samet Chan, Here's an example of a raw DMARC record as created using cPanel >> Zone Editor: _dmarc 14400 IN TXT v=DMARC1;p=none;sp=none;adkim=r;aspf=r;pct=100;fo=0;rf=afrf;ri=86400
Did you try using the record generated in cPanel >> Zone Editor at CloudFlare? If so, did it not work as expected? Thank you.
0
Samet Chan

August 02, 2018 17:40
Hello @Samet Chan, Here's an example of a raw DMARC record as created using cPanel >> Zone Editor: _dmarc 14400 IN TXT v=DMARC1;p=none;sp=none;adkim=r;aspf=r;pct=100;fo=0;rf=afrf;ri=86400
Did you try using the record generated in cPanel >> Zone Editor at CloudFlare? If so, did it not work as expected? Thank you.

I checked cPanel > Zone Editor only has A,CNAME,MX Record. Looks like they don't have a TXT Record.
0
cPanelMichael

August 02, 2018 18:03
I checked cPanel > Zone Editor only has A,CNAME,MX Record. Looks like they don't have a TXT Record.

You have to click on "Add DMARC Record" under the "Add Record" button when managing the zone for a domain name in cPanel >> Zone Editor. To access all available zone record types, you must enable the following features in WHM's Feature Manager interface (WHM >> Home >> Packages >> Feature Manager):
- Zone Editor (A, CNAME)
- Zone Editor (AAAA, CAA, SRV, TXT)
Thank you.
0
Samet Chan

August 02, 2018 18:19
You have to click on "Add DMARC Record" under the "Add Record" button when managing the zone for a domain name in cPanel >> Zone Editor. To access all available zone record types, you must enable the following features in WHM's Feature Manager interface (WHM >> Home >> Packages >> Feature Manager):

Zone Editor (A, CNAME)

Zone Editor (AAAA, CAA, SRV, TXT)

Thank you.
Which I choose forum.domain.com or domain.com from DMARC record?
0
cPanelMichael

August 03, 2018 15:59
Which I choose forum.domain.com or domain.com from DMARC record?

Choose "forum.domain.com" if that's the host/domain you are setting up the DMARC record for and sending email from. Thank you.
0
Samet Chan

August 03, 2018 16:06
Choose "forum.domain.com" if that's the host/domain you are setting up the DMARC record for and sending email from. Thank you.

Thanks! The solved problem now. :)
0

Please sign in to leave a comment.

Comments

Didn't find what you were looking for?