Skip to main content

Can FORWARDER achieve forwarding emails through Amazon SES?

Answered
xqm2023

Can FORWARDER achieve forwarding emails through Amazon SES? How can I configure it? Amazon SES has passed domain verification, and Forwarder's reposting email with Amazon SES will prompt the issuer to verify the failure. The sender in the prompt is actually an external sender, not a recipient on the actual local mailbox server.

Comments

8 comments

Date Votes
  • xqm2023 
    send_via_ses: 
      driver = manualroute 
      domains = ! +local_domains  : ! +manualmx_domains
      .ifdef SRSENABLED
        # if outbound, and forwarding has been done, use an alternate transport
        transport = ${if eq {$local_part@$domain} \
              {$original_local_part@$original_domain} \
              {ses_smtp} {ses_forwarded_smtp}}
      .else
        transport = ses_smtp
      .endif
      route_list = * email-smtp.us-west-2.amazonaws.com;
    ses_smtp: 
      driver = smtp 
      port = 587 
      hosts_require_auth = * 
      hosts_require_tls = *

    .ifdef SRSENABLED
      ses_forwarded_smtp:
        driver = smtp
        hosts_require_auth = *
        hosts_require_tls = *
        max_rcpt = 1
        return_path = ${srs_encode {SRS_SECRET} {$return_path} {$original_domain}}
    .endif
    ses_login: 
     driver = plaintext 
     public_name = LOGIN 
     client_send = : USERNAME : PASSWORD

    Forwarding error：

    TLS_AES_256_GCM_SHA384:256 CV=yes: SMTP error from remote mail server after end of data: 554 Message rejected: Email address is not verified. The following identities failed the check in region US-EAST-1

    0
  • xqm2023

    Enable Sender Rewriting Scheme (SRS) Support is normal, no problem, it has been resolved.

    0
  • cPRex Jurassic Moderator

    I'm glad SRS allowed you to get things working!

    -1
  • xqm2023

    How can all emails sent from all mailbox accounts relayed through Amazon SES be saved on the cPanel mail server in cPanel?

    0
  • cPRex Jurassic Moderator

    Do the emails reach your server first?  As in, the MX records points to your cPanel system?  If so, it wouldn't be supported by us, but Exim has some customizations that may provide what you're looking for:

    https://serverfault.com/questions/825720/exim-keep-a-copy-of-sent-email

    0
  • xqm2023

    In the CPANEL, the use of smart host Amazon SES SMTP sent mail without directly passing through the local mailbox server, and the email sent is not stored in the local mailbox server, so my question is to allow the Amazon SES SMTP to send the mail to the local mailbox server. superior.

    0
  • xqm2023 
    LOG: MAIN
      cwd=/usr/local/cpanel/whostmgr/docroot 4 args: /usr/sbin/exim -v -M 1rofcc-009q7L-0t
    delivering 1rofcc-009q7L-0t
    LOG: MAIN
      Unfrozen by forced delivery
    Connecting to email-smtp.us-east-1.amazonaws.com [52.206.145.59]:587 ...  TFO mode sendto, no data: EINPROGRESS
     connected
      SMTP<< 220 email-smtp.amazonaws.com ESMTP SimpleEmailService-d-TJCXVEE55 7bADDdgFxQgHJl4QgoYd
      SMTP>> EHLO email.akasotech.com
      SMTP<< 250-email-smtp.amazonaws.com
             250-8BITMIME
             250-STARTTLS
             250-AUTH PLAIN LOGIN
             250 Ok
      SMTP>> STARTTLS
      SMTP<< 220 Ready to start TLS
      SMTP>> EHLO email.akasotech.com
      SMTP<< 250-email-smtp.amazonaws.com
             250-8BITMIME
             250-STARTTLS
             250-AUTH PLAIN LOGIN
             250 Ok
      SMTP>> AUTH LOGIN
      SMTP<< 334 VXNlcm5hbWU6
      SMTP>> ****************************
      SMTP<< 334 UGFzc3dvcmQ6
      SMTP>> ************************************************************
      SMTP<< 235 Authentication successful.
      SMTP>> MAIL FROM:<>
      SMTP<< 501 Invalid MAIL FROM address provided
      SMTP+> QUIT
      SMTP(TLS shutdown)>>
      SMTP(shutdown)>>
      SMTP<< 221 Bye
      SMTP(close)>>
    cmdlog: '220:EHLO:250-:STARTTLS:220:EHLO:250-:AUTH:334:********:334:********:235:MAIL:501:QUIT:221'
    LOG: MAIN
      ** marc.wressig@googlemail.com R=send_via_ses T=ses_smtp H=email-smtp.us-east-1.amazonaws.com [52.206.145.59] X=TLS1.3:TLS_AES_256_GCM_SHA384:256 CV=yes: SMTP error from remote mail server after MAIL FROM:<>: 501 Invalid MAIL FROM address provided
    LOG: MAIN
      Frozen (delivery error message)

    How to send a return message to the sender when email forwarding fails?

    send_via_ses: 
      driver = manualroute 
      domains = ! +local_domains  : ! +manualmx_domains
      .ifdef SRSENABLED
        # if outbound, and forwarding has been done, use an alternate transport
        transport = ${if eq {$local_part@$domain} \
              {$original_local_part@$original_domain} \
              {ses_smtp} {ses_forwarded_smtp}}
      .else
        transport = ses_smtp
      .endif
      route_list = * email-smtp.us-east-1.amazonaws.com;
    ses_smtp: 
      driver = smtp 
      port = 587 
      hosts_require_auth = * 
      hosts_require_tls = *
    .ifdef SRSENABLED
      ses_forwarded_smtp:
        driver = smtp
        hosts_require_auth = *
        hosts_require_tls = *
        max_rcpt = 1
        return_path = ${srs_encode {SRS_SECRET} {$return_path} {$original_domain}}
        errors_to = ${if eq {$received_protocol}{smtp}{${address:$reply_address}}}
    .endif


    Is this paragraph correct?
    errors_to = ${if eq {$received_protocol}{smtp}{${address:$reply_address}}}

    0
  • cPRex Jurassic Moderator

    I am honestly not sure as this level of customization to Exim isn't something our team is able to support.

    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post