bogus HELO name used

Discussion:

(too old to reply)

Oscar Mauricio Cruz Lazo

2010-02-25 20:44:33 UTC

Hi all

I runnig a postfix server but now i notice Emails from my server is being
blocked by some ISPs because they claim it has a bogus helo,
I just checked the list and my IP is not listed as a spammer,

this only happens to certain email addresses, 97% of mail still goes through
fine, just the odd one.

my dns is working good

not sure what is causing this ?

thanks in advanced

Burkhard Ott

2010-02-25 20:57:33 UTC

Permalink

Post by Oscar Mauricio Cruz Lazo
Hi all
I runnig a postfix server but now i notice Emails from my server is
being blocked by some ISPs because they claim it has a bogus helo, I
just checked the list and my IP is not listed as a spammer,
this only happens to certain email addresses, 97% of mail still goes
through fine, just the odd one.
my dns is working good
not sure what is causing this ?

What says your systems helo? Maybe its a local name only.

cheers

Daniel V. Reinhardt

2010-02-25 21:18:17 UTC

Permalink

Sent: Thu, February 25, 2010 8:44:33 PM
Subject: bogus HELO name used
Hi all
I runnig a postfix server but now i notice Emails from my server is being blocked by some ISPs because they claim it has a bogus helo,
I just checked the list and my IP is not listed as a spammer,
this only happens to certain email addresses, 97% of mail still goes through fine, just the odd one.
my dns is working good
not sure what is causing this ?
thanks in advanced

Can you provide some more information such has logs, postconf -n, and your host?

Daniel Reinhardt
Website: www.cryptodan.com
Email:
***@yahoo.com

mouss

2010-02-25 23:23:57 UTC

Permalink

it has nothing to do with spammer listing. the ISP says your postfix is
misconfigured: it uses a bogus helo.

by default, the helo argument is $myhostname. if you show the output of
'postconf -n' as well the output of 'hostname', we may help you.

Post by Oscar Mauricio Cruz Lazo
this only happens to certain email addresses, 97% of mail still goes
through fine, just the odd one.
my dns is working good
not sure what is causing this ?
thanks in advanced

Oscar Mauricio Cruz Lazo

2010-02-25 23:44:49 UTC

Permalink

thanks alot

my postconf -n

here my config postconf -n

apac3:~ # mailq
Mail queue is empty
apac3:~ # postconf -n
alias_maps = hash:/etc/aliases, hash:/var/lib/mailman/data/aliases
best_mx_transport = local
biff = no
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/lib/postfix
debug_peer_level = 2
defer_transports =
disable_dns_lookups = no
disable_mime_output_conversion = no
html_directory = /usr/share/doc/packages/postfix/html
inet_interfaces = all
inet_protocols = all
mail_owner = postfix
mailbox_command =
mailbox_size_limit = 0
mailbox_transport = cyrus
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
message_size_limit = 10485760
mydestination = mysql:/etc/postfix/mysql-mydestination.cf
myhostname = apac3.apac.org.ni
mynetworks = 165.98.198.176/29, 200.62.90.0/24, 200.62.97.0/28,
200.62.97.144/28, 192.27.1.0/24, 127.0.0.0/8
mynetworks_style = subnet
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/packages/postfix/README_FILES
receive_override_options = no_address_mappings
relayhost =
relocated_maps = hash:/etc/postfix/relocated
sample_directory = /usr/share/doc/packages/postfix/samples
sender_canonical_maps = mysql:/etc/postfix/mysql-canonical.cf
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
strict_8bitmime = no
strict_rfc821_envelopes = yes
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550
virtual_alias_maps = mysql:/etc/postfix/mysql-virtual.cf

---------------------------

log of the messsages !

* ***@datatex.com.ni
SMTP error from remote mail server after RCPT
TO:<***@datatex.com.ni> <***@datatex.com.ni>:
host ns.datatex.com.ni [165.98.120.2]: 550 5.7.1
<***@datatex.com.ni> <***@datatex.com.ni>... bogus HELO name
used:*

Post by mouss

it has nothing to do with spammer listing. the ISP says your postfix is
misconfigured: it uses a bogus helo.
by default, the helo argument is $myhostname. if you show the output of
'postconf -n' as well the output of 'hostname', we may help you.

Oscar Mauricio Cruz Lazo

2010-02-25 23:50:22 UTC

Permalink

Basically this the config im running now !

Greetings !

On Fri, Feb 26, 2010 at 12:44 AM, Oscar Mauricio Cruz Lazo <

Post by Oscar Mauricio Cruz Lazo
thanks alot
my postconf -n
here my config postconf -n
apac3:~ # mailq
Mail queue is empty
apac3:~ # postconf -n
alias_maps = hash:/etc/aliases, hash:/var/lib/mailman/data/aliases
best_mx_transport = local
biff = no
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/lib/postfix
debug_peer_level = 2
defer_transports =
disable_dns_lookups = no
disable_mime_output_conversion = no
html_directory = /usr/share/doc/packages/postfix/html
inet_interfaces = all
inet_protocols = all
mail_owner = postfix
mailbox_command =
mailbox_size_limit = 0
mailbox_transport = cyrus
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
message_size_limit = 10485760
mydestination = mysql:/etc/postfix/mysql-mydestination.cf
myhostname = apac3.apac.org.ni
mynetworks = 165.98.198.176/29, 200.62.90.0/24, 200.62.97.0/28,
200.62.97.144/28, 192.27.1.0/24, 127.0.0.0/8
mynetworks_style = subnet
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/packages/postfix/README_FILES
receive_override_options = no_address_mappings
relayhost =
relocated_maps = hash:/etc/postfix/relocated
sample_directory = /usr/share/doc/packages/postfix/samples
sender_canonical_maps = mysql:/etc/postfix/mysql-canonical.cf
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
strict_8bitmime = no
strict_rfc821_envelopes = yes
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550
virtual_alias_maps = mysql:/etc/postfix/mysql-virtual.cf
---------------------------
log of the messsages !

Post by mouss

it has nothing to do with spammer listing. the ISP says your postfix is
misconfigured: it uses a bogus helo.
by default, the helo argument is $myhostname. if you show the output of
'postconf -n' as well the output of 'hostname', we may help you.

Daniel Morgan

2010-02-26 06:04:08 UTC

Permalink

Post by Oscar Mauricio Cruz Lazo
myhostname = apac3.apac.org.ni

In DNS: apac3.apac.org.ni = 165.98.119.11
BUT
165.98.119.11 != apac3.apac.org.ni
165.98.119.11 == pppleon11.ibw.com.ni.

Stan Hoeppner

2010-02-27 02:39:19 UTC

Permalink

Post by Daniel Morgan

Post by Oscar Mauricio Cruz Lazo
myhostname = apac3.apac.org.ni

In DNS: apac3.apac.org.ni = 165.98.119.11
BUT
165.98.119.11 != apac3.apac.org.ni
165.98.119.11 == pppleon11.ibw.com.ni.

Post the rejected transaction(s) from your logs please. It's likely they
are rejecting your mail due to the presence of "ppp" in the rDNS name, which
typically indicates consumer broadband IP space. I block smtp connections
based on such rDNS names myself, as do many admins.

If you are sending mail from dynamic IP consumer space, I recommend reading
this document:

http://www.hardwarefreak.com/postfix-adsl-relay-config.txt

--
Stan

mouss

2010-02-27 12:17:24 UTC

Permalink

if apac3.apac.org.ni is what the remote site sees, then it is not bogus
and the remote site error is wrong.

maybe they block you because of your "generic" reverse DNS:
$ host 165.98.119.11
11.119.98.165.in-addr.arpa domain name pointer pppleon11.ibw.com.ni.

but that's not what "bogus helo" means

Post by Oscar Mauricio Cruz Lazo
[snip]