Question: 451 4.3.5 Server configuration problem (in reply to RCPT TO command))

[Simon Loewenthal/NL/Tele2]

Hi,

I have a seen a few of these messages popping up in the mail.log
over the past weeks. Would someone tell me whether this is a
configuration problem with my server, or a remote site? The 451 error
has appeared from a couple of sites, hence I wonder if the problem lies
with my site. In the case of the example below, the message is delivered.

Best regards,
Simon.


Version:
postfix 2.7.1-1+squeeze1

# grep 91545817DA mail.log.1
Sep 12 17:52:19 logout postfix/smtpd[28483]: 91545817DA:
client=unknown[62.11.22.33], sasl_method=PLAIN,
sasl_username=scrubb...@example.com
Sep 12 17:52:19 logout postfix/cleanup[28473]: 91545817DA: replace:
header Received: from [127.0.0.1] (unknown [62.11.22.33])??(using TLSv1
with cipher DHE-RSA-AES256-SHA (256/256 bits))??(No client certificate
requested)??by example.com (Postfix) with ESMTPSA id 91545817DA from
unknown[62.11.22.33]; from=<scrubb...@example.com>
to=<scrubb...@soekris.eu> proto=ESMTP helo=<[127.0.0.1]>: Received:
from [127.0.0.1] (localhost [127.0.0.1]) by localhost
Sep 12 17:52:19 logout postfix/cleanup[28473]: 91545817DA:
message-id=<4E6E2AD2...@example.com>
Sep 12 17:52:21 logout postfix/qmgr[12672]: 91545817DA:
from=<scrubb...@example.com>, size=31400, nrcpt=1 (queue active)
Sep 12 17:52:21 logout postfix/smtp[28488]: 91545817DA:
to=<scrubb...@soekris.eu>,
relay=mail.gigahost.dk[89.186.169.167]:25, delay=1.9,
delays=1.5/0.01/0.2/0.21, dsn=4.2.0, status=deferred (host
mail.gigahost.dk[89.186.169.167] said: 450 4.2.0
<scrubb...@soekris.eu>: Recipient address rejected: Greylisted, see
http://postgrey.schweikert.ch/help/soekris.eu.html (in reply to RCPT TO
command))
Sep 12 17:58:52 logout postfix/qmgr[12672]: 91545817DA:
from=<scrubb...@example.com>, size=31400, nrcpt=1 (queue active)
Sep 12 17:58:54 logout postfix/smtp[28509]: 91545817DA:
to=<scrubb...@soekris.eu>,
relay=mail.gigahost.dk[89.186.169.167]:25, delay=394,
delays=393/0.02/0.12/1, dsn=4.3.5, status=deferred (host
mail.gigahost.dk[89.186.169.167] said: 451 4.3.5 Server configuration
problem (in reply to RCPT TO command))
Sep 12 18:08:52 logout postfix/qmgr[12672]: 91545817DA:
from=<scrubb...@example.com>, size=31400, nrcpt=1 (queue active)
Sep 12 18:08:53 logout postfix/smtp[28548]: 91545817DA:
to=<scrubb...@soekris.eu>,
relay=mail.gigahost.dk[89.186.169.167]:25, delay=994,
delays=993/0.02/0.12/0.21, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued
as 1CEE44E2943C)
Sep 12 18:08:53 logout postfix/qmgr[12672]: 91545817DA: removed



# postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
body_checks = regexp:/etc/postfix/body_checks.regexp
bounce_template_file = /etc/postfix/bounce.cf
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
disable_vrfy_command = yes
header_checks = pcre:/etc/postfix/header_checks
inet_interfaces = all
mailbox_size_limit = 0
message_size_limit = 20480000
milter_connect_macros = j {daemon_name} v {client_addr} _
milter_default_action = tempfail
mime_header_checks = regexp:/etc/postfix/mime_header_checks
mydestination =
myhostname = example.com
mynetworks = mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
myorigin = /etc/mailname
non_smtpd_milters = unix:/dkim-filter/dkim-filter.sock
readme_directory = no
recipient_delimiter = +
relayhost =
smtp_helo_timeout = 60s
smtp_mail_timeout = 60s
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_client_connection_count_limit = 50
smtpd_client_connection_rate_limit = 50
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks, reject_invalid_hostname,
reject_unlisted_recipient, reject_unlisted_sender,
regexp:/etc/postfix/helo.regexp, permit
smtpd_milters =
unix:/clamav/clamav-milter.ctl,unix:/spamass/spamass.sock,unix:/dkim-filter/dkim-filter.sock
smtpd_recipient_restrictions =
permit_mynetworks,permit_sasl_authenticated, reject_unauth_destination,
check_recipient_access cidr:/etc/postfix/whitelist,
reject_non_fqdn_sender, reject_rbl_client
hostkarma.junkemailfilter.com=127.0.0.2, reject_rbl_client
sbl-xbl.spamhaus.org
smtpd_sasl_auth_enable = yes
smtpd_sasl_path = private/auth
smtpd_sasl_type = dovecot
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_tls_CAfile = scrubbed
smtpd_tls_cert_file = scrubbed
smtpd_tls_key_file = scrubbed
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtpd_use_tls = yes
strict_rfc821_envelopes = yes
transport_maps = hash:/etc/postfix/transport
unknown_address_reject_code = 554
unknown_client_reject_code = 554
unknown_hostname_reject_code = 554
virtual_alias_maps = proxy:mysql:/etc/postfix/sql/scrubbed.cf,
proxy:mysql:/etc/postfix/sql/scrubbed.cf,
proxy:mysql:/etc/postfix/sql/scrubbed.cf
virtual_mailbox_domains = proxy:mysql:/etc/postfix/sql/scrubbed.cf
virtual_mailbox_maps = mysql:/etc/postfix/sql/scrubbed.cf
virtual_transport = dovecot-spamass

[Reindl Harald]

Am 13.09.2011 10:54, schrieb Simon Loewenthal/NL/Tele2:

> I have a seen a few of these messages popping up in the mail.log
> over the past weeks. Would someone tell me whether this is a
> configuration problem with my server, or a remote site? The 451 error
> has appeared from a couple of sites, hence I wonder if the problem lies
> with my site. In the case of the example below, the message is delivered.
>

> relay=mail.gigahost.dk[89.186.169.167]:25, delay=394,
> delays=393/0.02/0.12/1, dsn=4.3.5, status=deferred (host
> mail.gigahost.dk[89.186.169.167] said: 451 4.3.5 Server configuration
> problem (in reply to RCPT TO command))

if you get from a remote host "said: 451 4.3.5 Server configuration problem"
this message says clearly that the remite host has a configuration problem
and this has nothing to do with you

[Wietse Venema]

Simon Loewenthal/NL/Tele2:
>
> Hi,

>
> I have a seen a few of these messages popping up in the mail.log
> over the past weeks. Would someone tell me whether this is a
> configuration problem with my server, or a remote site? The 451 error
> has appeared from a couple of sites, hence I wonder if the problem lies
> with my site. In the case of the example below, the message is delivered.

SMTP is a client-server protocol.

When sending mail, Postfix is the SMTP client.

When receiving mail, Postfix is the SMTP server.

When the SMTP server replies with "server configuration error" then
the SMTP server has a problem.

Wietse

[Simon Loewenthal/NL/Tele2]

Thank-you Wietse.
Thus, the problem is my broken server. Next step is to work out where
the problem is.

--
Simon Loewenthal/Tele2
GSM: +31 6 2000 5427

******** IMPORTANT NOTICE ********
PLEASE REPLY TO simon.lo...@klunky.co.uk
This e-mail (including any attachments) may contain information
that is confidential or otherwise protected from disclosure and
it is intended only for the addressees. If you are not the intended
recipient, please kindly refrain from copying or distribution.
Other use of information contained in this e-mail (and its attachments)
is frowned upon. If you have received this e-mail in error, kindly
notify us immediately by telephone or e-mail and, if possible, kindly
delete the message (including any attachments) from your system. Of
course, this is not legal advice, nor is it a contract. If it were a
contract, it would have an exchange of value and affirmative agreement
by both parties. If it were legal advice, it should be written by a
lawyer and would have a bill attached.

It ought to be obvious my views in this Email might not represent my
employer's views, & vice-verse. Please note that e-mail messages may
contain computer viruses or other defects. I presume that you understand
the concept of a computer virus, and took reasonable precautions.

[Reindl Harald]

Am 13.09.2011 14:34, schrieb Simon Loewenthal/NL/Tele2:
> On 09/13/2011 02:11 PM, Wietse Venema wrote:
>> Simon Loewenthal/NL/Tele2:
>>>
>>> Hi,
>>>
>>> I have a seen a few of these messages popping up in the mail.log
>>> over the past weeks. Would someone tell me whether this is a
>>> configuration problem with my server, or a remote site? The 451 error
>>> has appeared from a couple of sites, hence I wonder if the problem lies
>>> with my site. In the case of the example below, the message is delivered.
>> SMTP is a client-server protocol.
>>
>> When sending mail, Postfix is the SMTP client.
>>
>> When receiving mail, Postfix is the SMTP server.
>>
>> When the SMTP server replies with "server configuration error" then
>> the SMTP server has a problem.
>>
>> Wietse
> Thank-you Wietse.
> Thus, the problem is my broken server. Next step is to work out where
> the problem is.

why is YOUR server broken if the REMOTE server says "configuration problem"?

[Simon Loewenthal/NL/Tele2]

Because I had mis-read the the statement back-to-front. Now I
understand it the right way around. :}

Regards.

[Stan Hoeppner]

On 9/13/2011 7:47 AM, Simon Loewenthal/NL/Tele2 wrote:
> On 09/13/2011 02:38 PM, Reindl Harald wrote:

>> why is YOUR server broken if the REMOTE server says "configuration problem"?
>>
> Because I had mis-read the the statement back-to-front. Now I
> understand it the right way around. :}

You still don't understand. The problem isn't your Postfix MTA, but the
remote MTA. Send a similar email to one of these broken servers using a
Gmail account. You'll receive a bounce with the same message you pasted
here: "Server configuration problem".

The only thing confusing you here is the presence of this message in log
file. You apparently don't know how to read your mail log...

--
Stan

[cga...@gmail.com]

______________________________

We had this issue after our ISP incorrectly added an spf record to our domain.
Ensure everything is ok with your domain using and online spf record checker.

CG