Client emails aren't connecting, tracing down the problem
I have a hosting client who has a customer that can't email them. When they do, they get an error that:
SMTP error from remote mail server after initial connection:
550 Your country is not allowed to connect to this server.
This is definitely originating from my server:
Running dig mail.theirdomain.com gives the same result.
Using dig @35.208.0.0 hostedclient.com just times out.
Any other suggestions on finding where it's failing?
-
Hey hey! Do you see any trace of that initial transaction that failed on your server? I would expect that to show up in either the Exim mainlog or /var/log/maillog. 0 -
I don't see the initial transaction, but I did find another one later from their domain that DOES route outside of the US! 2023-01-03 15:14:14 H=delivery15.mailspamprotection.com [185.56.85.130]:60611 X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no F= temporarily rejected RCPT : Deferred due to greylisting. Host: '185.56.85.130' From: 'them@theirdomain.com' To: 'client@hostedclientdomain.com' SPF: 'unchecked' The IP in there: 0 -
Or should I whitelist that specific IP? If so, where do I whitelist it so that the "Filter Incoming Emails by Country" doesn't catch it? 0 -
A tracert may not follow the same path as the mail delivery at all, since one is checking a plain connection, and one is port 25 with mail servers. It's likely those are going through a different path to get to your system. I'm not sure I have a good way to test this on my end, but could you try adding the IP to the Trusted SMTP IP address in the Exim Configuration in WHM? I think that will override the country level block. 0 -
That's what I was thinking; my best option would be to log in to his server via SSH and dig from his end. But I don't know if he even has SSH access, much less whether he would give it to me :-/ I added the 185.x.x.x IP to Trusted SMTP IP as suggested, let's see how that goes! I don't know if that will be a permanent fix, though (I'm not sure if the IP will change), and it really doesn't solve the problem for him if others block non-US IPs. 0
Please sign in to leave a comment.
Comments
6 comments