Menu

550-Unrouteable address 550 Sender verify failed

Get Help
2014-03-24
2015-09-06
  • Alexandro Ghettini

    Hallo sorry if i bother with this that seems a silly issue, i installed Scrollout F1 (ubuntu 12.04) and the installation is pretty straight forward... really no space for mistakes.
    Once installed, protected (pass change) and configured (base setup and a a very first test domain route test.ghettini.it => [real.mail.server.address]) i sent some email from a remote system (gmail) having this errors:

    Mar 24 14:27:05 vm-mailgw1 postfix/postscreen[8235]: CONNECT from [209.85.216.170]:57423 to [94.102.134.5]:25
    Mar 24 14:27:05 vm-mailgw1 postfix/postscreen[8235]: WHITELISTED [209.85.216.170]:57423
    Mar 24 14:27:05 vm-mailgw1 postfix/smtpd[8236]: connect from mail-qc0-f170.google.com[209.85.216.170]
    Mar 24 14:27:05 vm-mailgw1 postfix/smtpd[8236]: Anonymous TLS connection established from mail-qc0-f170.google.com[209.85.216.170]: TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)
    Mar 24 14:27:06 vm-mailgw1 postfix/smtpd[8236]: NOQUEUE: reject: RCPT from mail-qc0-f170.google.com[209.85.216.170]: 550 5.1.1 alex@test.ghettini.it: Recipient address rejected: undeliverable address: host posta.planetel.it[94.102.134.63] said: 550-Verification failed for double-bounce@test.ghettini.it 550-Unrouteable address 550 Sender verify failed (in reply to RCPT TO command); from=assistenzaplanetel@gmail.com to=alex@test.ghettini.it proto=ESMTP helo=<mail-qc0-f170.google.com>
    Mar 24 14:27:06 vm-mailgw1 postfix/smtpd[8236]: disconnect from mail-qc0-f170.google.com[209.85.216.170]</mail-qc0-f170.google.com>

    after few test, searched the web, search the forum, and hit my head against a wall, i tried to tune postfix (main.cf) removing :

    reject_unverified_recipient from smtpd_recipient_restrictions

    now it seems working:

    Mar 24 15:16:01 vm-mailgw1 postfix/postscreen[8468]: CONNECT from [209.85.216.44]:44781 to [94.102.134.5]:25
    Mar 24 15:16:01 vm-mailgw1 postfix/postscreen[8468]: WHITELISTED [209.85.216.44]:44781
    Mar 24 15:16:01 vm-mailgw1 postfix/smtpd[8469]: connect from mail-qa0-f44.google.com[209.85.216.44]
    Mar 24 15:16:01 vm-mailgw1 postfix/smtpd[8469]: Anonymous TLS connection established from mail-qa0-f44.google.com[209.85.216.44]: TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)
    Mar 24 15:16:02 vm-mailgw1 postfix/smtpd[8469]: 5D02CE0231: client=mail-qa0-f44.google.com[209.85.216.44]
    Mar 24 15:16:02 vm-mailgw1 postfix/cleanup[8473]: 5D02CE0231: message-id=CAL9b5o3kFF40-iHE718=xo81uYhb15xSwCrkSRyoV=Cex4KePg@mail.gmail.com
    Mar 24 15:16:02 vm-mailgw1 postfix/qmgr[8391]: 5D02CE0231: from=assistenzaplanetel@gmail.com, size=1927, nrcpt=1 (queue active)
    Mar 24 15:16:02 vm-mailgw1 postfix/smtpd[8469]: disconnect from mail-qa0-f44.google.com[209.85.216.44]
    Mar 24 15:16:04 vm-mailgw1 postfix/smtpd[8478]: connect from localhost[127.0.0.1]
    Mar 24 15:16:04 vm-mailgw1 postfix/smtpd[8478]: BAE31E0235: client=localhost[127.0.0.1]
    Mar 24 15:16:04 vm-mailgw1 postfix/cleanup[8473]: BAE31E0235: message-id=CAL9b5o3kFF40-iHE718=xo81uYhb15xSwCrkSRyoV=Cex4KePg@mail.gmail.com
    Mar 24 15:16:04 vm-mailgw1 postfix/qmgr[8391]: BAE31E0235: from=assistenzaplanetel@gmail.com, size=2559, nrcpt=1 (queue active)
    Mar 24 15:16:04 vm-mailgw1 postfix/smtpd[8478]: disconnect from localhost[127.0.0.1]
    Mar 24 15:16:04 vm-mailgw1 amavis[8223]: (08223-02) Passed CLEAN, [209.85.216.44] [209.85.216.44] assistenzaplanetel@gmail.com -> alex@test.ghettini.it, Message-ID: CAL9b5o3kFF40-iHE718=xo81uYhb15xSwCrkSRyoV=Cex4KePg@mail.gmail.com, mail_id: qrwDhO-nd8+E, Hits: -100.098, size: 1927, queued_as: BAE31E0235, dkim_id=@gmail.com, 2178 ms
    Mar 24 15:16:04 vm-mailgw1 postfix/lmtp[8474]: 5D02CE0231: to=alex@test.ghettini.it, relay=127.0.0.1[127.0.0.1]:10024, delay=2.7, delays=0.46/0.01/0.01/2.2, dsn=2.0.0, status=sent (250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as BAE31E0235)
    Mar 24 15:16:04 vm-mailgw1 postfix/qmgr[8391]: 5D02CE0231: removed
    Mar 24 15:16:04 vm-mailgw1 postfix/smtp[8479]: Untrusted TLS connection established to posta.planetel.it[94.102.134.63]:25: TLSv1 with cipher AES256-SHA (256/256 bits)

    wait 3 minutes

    Mar 24 15:18:03 vm-mailgw1 postfix/pickup[8390]: 2E739E0236: uid=109 from=<amavis>
    Mar 24 15:18:03 vm-mailgw1 postfix/cleanup[8844]: 2E739E0236: message-id=20140324141803.2E739E0236@ScrolloutF1.vm-mailgw1.planetel.it
    Mar 24 15:18:03 vm-mailgw1 postfix/qmgr[8391]: 2E739E0236: from=amavis@vm-mailgw1.planetel.it, size=702, nrcpt=1 (queue active)
    Mar 24 15:18:03 vm-mailgw1 postfix/smtp[8846]: 2E739E0236: to=amavis@vm-mailgw1.planetel.it, orig_to=<amavis>, relay=none, delay=0.05, delays=0.02/0.03/0/0, dsn=5.4.6, status=bounced (mail for 94.102.134.5 loops back to myself)
    Mar 24 15:18:03 vm-mailgw1 postfix/cleanup[8844]: 3A39AE0237: message-id=20140324141803.3A39AE0237@ScrolloutF1.vm-mailgw1.planetel.it
    Mar 24 15:18:03 vm-mailgw1 postfix/qmgr[8391]: 3A39AE0237: from=<>, size=2750, nrcpt=1 (queue active)
    Mar 24 15:18:03 vm-mailgw1 postfix/bounce[8847]: 2E739E0236: sender non-delivery notification: 3A39AE0237
    Mar 24 15:18:03 vm-mailgw1 postfix/qmgr[8391]: 2E739E0236: removed
    Mar 24 15:18:03 vm-mailgw1 postfix/smtp[8846]: 3A39AE0237: to=amavis@vm-mailgw1.planetel.it, relay=none, delay=0, delays=0/0/0/0, dsn=5.4.6, status=bounced (mail for 94.102.134.5 loops back to myself)
    Mar 24 15:18:03 vm-mailgw1 postfix/qmgr[8391]: 3A39AE0237: removed</amavis></amavis>

    wait 7 more minutes

    Mar 24 15:23:04 vm-mailgw1 postfix/smtp[8479]: BAE31E0235: to=alex@test.ghettini.it, relay=posta.planetel.it[94.102.134.63]:25, delay=420, delays=0.01/0.05/0.11/419, dsn=2.0.0, status=sent (250 OK id=1WS5fY-0005rA-Vj)
    Mar 24 15:23:04 vm-mailgw1 postfix/qmgr[8391]: BAE31E0235: removed

    The mail finally arrived but like 10 minutes delayed, is it normal?

    Thanks in advance
    Alex

     
  • Anonymous

    Anonymous - 2014-03-24

    Hi Alex,

    the initial error shows that the message was rejected by your email server. It couldn't verify the sender, apparently.
    94.102.134.63] said: 550-Verification failed for double-bounce@test.ghettini.it 550-Unrouteable address 550 Sender verify failed (in reply to RCPT TO command);

    I think you need to make some settings on that server to trust scrollout, to skip any verification against scrollout.

    second problem regarding the delay. If in GUI > secure > rate limits in is lower than 8, is using a greylist that causes delays. Make it 8 and should be no problem.

    if that is not the case. Try to solve first issue.

     
  • Marius Gologan

    Marius Gologan - 2014-03-24

    The overall configuration (scrollout + your email server) don't work well.

    1) Your email server appears to reject messages because it cannot verify the sender. It makes sense since Scrollout is not the originating server for emails from @gmail.com, @yahoo.com etc. This verification must be disabled on your server.

    Probably, in order to fix it you whitelisted @gmail.com. That is not necessary. All emails from @gmail.com will be trusted, including spam if any.

    2) I see in your logs this error: status=bounced (mail for 94.102.134.5 loops back to myself).
    Make sure you have the right settings in GUI > Route:
    your-domain.com => [email-server-between-brackets]

     

    Last edit: Marius Gologan 2014-03-24
  • Alexandro Ghettini

    Hi, yes surfing the web i found some screenshots for the route settings and it actually seems to work under postfix transport sintax, [ip.add.res.s] bracketed or server.name.tld unbracketed, fixed this, and raised secure->levels->connection filter to 8 it doesent require anymore Server Verification on final recipient nad it started working like a charm, thanks everyone for the support.

     
  • Alejandro Lengua

    I have a similar issue but the email address my CPanel server is trying to validate is root@mydomain.com

    This is curious because I also have another cloud antispam filter running agains the same email server and never had this issue.

     
  • Anonymous

    Anonymous - 2015-09-06

    Probably the other solution is not using sender verification against your email server.
    Add root@mydomain.com as alias on your CPanel or just disable restrictions against Scrollout.

     
  • Alejandro Lengua

    I got this working!
    Thanks to everybody for their help

     

Log in to post a comment.