Hi there,

Just a question from a curious bod.

I've set up postfix to use the option "smtpd_delay_reject = yes" and
when I use the site dnsreport.com to check out my domain, it comes up
with:

FAIL Connect to mail servers ERROR: I could not complete a connection
to one or more of your mailservers:
mx1.rosbif.org: Timed out [Last data sent: RCPT TO: ]

I assume that this is normal, but shouldn't the dnsreport.com website
wait for a few seconds longer before timing out?

Also, when I set the "smtpd_delay_reject = no" to test, I still get the
same fail from the dnsreport.com website.

Have I screwed up somewhere?

I've pasted below the relevant section of my main.cf file:

smtpd_delay_reject = yes
smtpd_helo_required = yes

smtpd_helo_restrictions = permit_mynetworks,
check_helo_access hash:/etc/postfix/helo_access,
reject_invalid_hostname,
reject_unknown_sender_domain,
reject_unknown_hostname,
reject_non_fqdn_hostname,
permit

--

Neil

You should be able to find some more clues in the Postfix logfile,
typically located in /var/log/maillog




Neil wrote:
> Hi there,
>
> Just a question from a curious bod.
>
> I've set up postfix to use the option "smtpd_delay_reject = yes" and
> when I use the site dnsreport.com to check out my domain, it comes up
> with:
>
> FAIL Connect to mail servers ERROR: I could not complete a connection
> to one or more of your mailservers:
> mx1.rosbif.org: Timed out [Last data sent: RCPT TO: ]
>
> I assume that this is normal, but shouldn't the dnsreport.com website
> wait for a few seconds longer before timing out?
>
> Also, when I set the "smtpd_delay_reject = no" to test, I still get the
> same fail from the dnsreport.com website.
>
> Have I screwed up somewhere?
>
> I've pasted below the relevant section of my main.cf file:
>
> smtpd_delay_reject = yes
> smtpd_helo_required = yes
>
> smtpd_helo_restrictions = permit_mynetworks,
> check_helo_access hash:/etc/postfix/helo_access,
> reject_invalid_hostname,
> reject_unknown_sender_domain,
> reject_unknown_hostname,
> reject_non_fqdn_hostname,
> permit
>

Greg Hackney a écrit :

> You should be able to find some more clues in the Postfix logfile,
> typically located in /var/log/maillog

Nope. I've been scanning the logs for any clues, but no go.

As it goes, I think it may have been a problem with the dnsreport.com
website, as it appears to be fine now.

However, I don't see any appreciable differences in the
"smtpd_delay_reject = yes" or "smtpd_delay_reject = no" settings.

Is there anywhere that I can change the "delay"?

--

Neil

I think you might be misunderstanding what the
smtpd_delay_reject config does. It's not a timer.

During the incoming SMTP protocol handhake, the normal
order of events are:

HELO
MAIL FROM:
RCPT TO:
DATA

Ahhhh, I see. Thanks for the clarification.

Neil

Greg Hackney a écrit :

> I think you might be misunderstanding what the
> smtpd_delay_reject config does. It's not a timer.
>
> During the incoming SMTP protocol handhake, the normal
> order of events are:
>
> HELO
> MAIL FROM:
> RCPT TO:
> DATA
> .
>
> Postfix can send a rejection message early in SMTP protocol stages,
> which is the standard thing to do. Some mail software can't handle
> early rejection and act strangely.
>
> The smtpd_delay_reject just causes Postfix to hold off rejecting the email
> until after the "RCPT TO:" stage is finished.
>
> Reference: man 5 postconf (smtpd_delay_reject)
>
> --
> Greg
>
>
>
>
>
> Neil wrote:
> > Greg Hackney a écrit :
> >
> >
> >>You should be able to find some more clues in the Postfix logfile,
> >>typically located in /var/log/maillog
> >
> >
> > Nope. I've been scanning the logs for any clues, but no go.
> >
> > As it goes, I think it may have been a problem with the dnsreport.com
> > website, as it appears to be fine now.
> >
> > However, I don't see any appreciable differences in the
> > "smtpd_delay_reject = yes" or "smtpd_delay_reject = no" settings.
> >
> > Is there anywhere that I can change the "delay"?
> >