Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add mail #23

Open
wants to merge 5 commits into
base: master
Choose a base branch
from
Open

Add mail #23

wants to merge 5 commits into from

Conversation

daurnimator
Copy link
Member

@daurnimator daurnimator commented Jun 5, 2020

Hard codes groups for now; they need to be migrated to a userdb data source.

Had to hardcode the userdb IP.... dns lookups are failing with:

Jun  5 05:39:46 mail-67d99dc66b-qfvrv postfix/smtpd[297]: warning: connect to pgsql server postgresql://mail:userdb-mail-lookup@userdb-attempt-too-do-user-989073-0.db.ondigitalocean.com:25060/userdb?sslmode=require: could not translate host name "userdb-attempt-too-do-user-989073-0.db.ondigitalocean.com" to address: System error?
Jun  5 05:39:46 mail-67d99dc66b-qfvrv postfix/smtpd[297]: warning: pgsql:/etc/postfix/userdb-aliases.cf lookup error for "[email protected]"
Jun  5 05:39:46 mail-67d99dc66b-qfvrv postfix/smtpd[297]: NOQUEUE: reject: RCPT from unknown[123.123.123.123]: 451 4.3.0 <[email protected]>: Temporary lookup failure; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<hashbang.sh>

Tested and seems to work... aside from antispam...

Jun  5 05:58:07 mail-966b75b74-m5527 postfix/smtp[158]: 8AF4A34: host aspmx.l.google.com[173.194.69.26] said: 421-4.7.0 [161.35.77.52      15] Our system has detected that this message is 421-4.7.0 suspicious due to the very low reputation of the sending IP address. 421-4.7.0 To protect our users from spam, mail sent from your IP address has 421-4.7.0 been temporarily rate limited.
Please visit 421 4.7.0  https://support.google.com/mail/answer/188131 for more information. w16si2893908ejn.715 - gsmtp (in reply to end of DATA command)

 

@RyanSquared
Copy link
Member

Tested and seems to work... aside from antispam...

This will happen for the next year ish, because most popular mail hosts have a ranking system based on the age of the IP to prevent people from just picking up a new host and using mail on it.

I don't know why it happens for DigitalOcean IPs, as if I recall correctly, mail is blocked by default, so we had to open up an issue a very long time ago to get it activated for our account. I guess Google doesn't care.

@daurnimator
Copy link
Member Author

aside from antispam...

our SPF records say only accept mail from our MX; need to update it to allow from any k8s node running mail....

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants