[SOLVED]Problem with standalone installation 502 bad gateway #531

jbbordas · 2021-07-10T17:19:00Z

jbbordas
Jul 10, 2021

Hi!
I tried to setup simpleLogin to my server.

I try to creat 2 accounts. each time i have to wait a long time and finaly have a : 502 Bad Gateway

and i can't try again because it says account already existe. but i cant log in beacause it say : 'Please check your inbox for the activation email. You can also have this email re-sent'

So i try to re-sent the actiation mail but i have the 502 Bad Gateway.

in syslog i see:

Jul 10 19:13:35 vmi604561 matrix-nginx-proxy[16591]: 91.172.239.193 - - [10/Jul/2021:17:13:35 +0000] "POST /auth/resend_activation HTTP/2.0" 502 150 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
Jul 10 19:13:35 vmi604561 matrix-nginx-proxy[16591]: 2021/07/10 17:13:35 [error] 53#53: *331219 upstream prematurely closed connection while reading response header from upstream, client: XX.XXX.XXX.XXX, server: app.mail.XXXX.XXXXX, request: "POST /auth/resend_activation HTTP/2.0", upstream: "http://172.18.0.15:7777/auth/resend_activation", host: "app.mail.XXXX.XXXXX"
Jul 10 19:13:36 vmi604561 matrix-nginx-proxy[16591]: XX.XXX.XXX.XXX - - [10/Jul/2021:17:13:36 +0000] "GET /api/live/ws HTTP/1.1" 400 12 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:89.0) Gecko/20100101 Firefox/89.0" "-"
Jul 10 19:13:36 vmi604561 matrix-grafana[18386]: t=2021-07-10T17:13:36+0000 lvl=info msg="Request Completed" logger=context userId=1 orgId=1 uname=bbo method=GET path=/api/live/ws status=400 remote_addr=XX.XXX.XXX.XXX time_ms=21 size=12 referer=

this is my nginx configuration:

server {
      listen 8080;
      
      server_name app.mail.XXXX.XXXXX;
      
      server_tokens off;
      root /dev/null;          
      location / {
         resolver 127.0.0.11 valid=5s;
         set $backend "sl-app:7777";
         proxy_pass http://$backend;

    }
    }
  
    server {
      listen 8443;
      
      server_name app.mail.XXXX.XXXXX;
      
      server_tokens off;
      root /dev/null;
      ssl_certificate /matrix/ssl/config/live/app.mail.XXXX.XXXXX/fullchain.pem;
      ssl_certificate_key /matrix/ssl/config/live/app.mail.XXXX.XXXXX/privkey.pem;
      ssl_trusted_certificate /matrix/ssl/config/live/app.mail.XXXX.XXXXX/chain.pem;
      
      add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
      add_header X-Content-Type-Options nosniff;
      add_header X-XSS-Protection "1; mode=block";
      add_header X-Frame-Options SAMEORIGIN;
      add_header Content-Security-Policy "frame-ancestors 'none'";
      add_header Permissions-Policy interest-cohort=() always;
      
      location / {
         resolver 127.0.0.11 valid=5s;
         set $backend "sl-app:7777";
         proxy_pass http://$backend;
         
          proxy_pass_request_headers on;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header Host app.mail.whita.org;
         proxy_set_header X-Forwarded-For $remote_addr;

    }

    }

Do you have an idea to help me please?

nguyenkims · 2021-07-11T07:09:41Z

nguyenkims
Jul 11, 2021
Maintainer

Hi, can you paste the docker log of the sl-app container here as it might give more info about the 502 error?

0 replies

jbbordas · 2021-07-11T14:58:47Z

jbbordas
Jul 11, 2021
Author

Thank you for the answered. This is the log of the resent action:

2021-07-11 14:52:53,011 - SL - DEBUG - "/code/server.py:444" - after_request() -  - 91.172.239.193 POST /auth/resend_activation ImmutableMultiDict([]) 200
2021-07-11 14:52:57,204 - SL - DEBUG - "/code/app/auth/views/resend_activation.py:32" - resend_activation() -  - user <User 3  [email protected]> is not activated
2021-07-11 14:52:57,371 - SL - DEBUG - "/code/app/email_utils.py:250" - send_email() -  - send email to [email protected], subject Just one more step to join SimpleLogin
[2021-07-11 14:53:12 +0000] [1] [CRITICAL] WORKER TIMEOUT (pid:90)
[2021-07-11 14:53:12 +0000] [90] [INFO] Worker exiting (pid: 90)
2021-07-11 14:53:12,160 - SL - DEBUG - "/code/server.py:444" - after_request() -  - 91.172.239.193 GET /favicon.ico ImmutableMultiDict([]) 302
[2021-07-11 14:53:13 +0000] [99] [INFO] Booting worker with pid: 99
>>> URL: http://app.mail.whita.org
MAX_NB_EMAIL_FREE_PLAN is not set, use 5 as default value
Paddle param not set
Upload files to local dir
>>> init logging <<<
2021-07-11 14:53:17,330 - SL - DEBUG - "/code/app/utils.py:11" - <module>() -  - load words file: /code/local_data/words_alpha.txt

the domain XXXX.XX of the mail baptiste is not the same as the domain for simplelogin alias
hope it helps

5 replies

nguyenkims Jul 12, 2021
Maintainer

I think the error is

[2021-07-11 14:53:12 +0000] [1] [CRITICAL] WORKER TIMEOUT (pid:90)

It seems to be related to the connection between the web container and Postfix. I suggest to double check the installation to make sure Postfix can be used from the Docker network.

jbbordas Jul 25, 2021
Author

Sorry for the delay. I done all the installation again. now when i try to send again the registration mail i have an error:

Server error
Looks like we are having some server issues...

We are notified and will look at this issue asap!

in the docker app I have this:

>>> init logging <<<
2021-07-25 13:15:33,305 - SL - DEBUG - "/code/app/utils.py:11" - <module>() -  - load words file: /code/local_data/words_alpha.txt
>>> URL: http://app.mail.whita.org
MAX_NB_EMAIL_FREE_PLAN is not set, use 5 as default value
Paddle param not set
Upload files to local dir
>>> init logging <<<
2021-07-25 13:15:33,308 - SL - DEBUG - "/code/app/utils.py:11" - <module>() -  - load words file: /code/local_data/words_alpha.txt
2021-07-25 13:17:04,921 - SL - DEBUG - "/code/server.py:444" - after_request() -  - 88.166.54.140 GET / ImmutableMultiDict([]) 302
2021-07-25 13:17:05,073 - SL - DEBUG - "/code/server.py:444" - after_request() -  - 88.166.54.140 GET /auth/login ImmutableMultiDict([]) 200
2021-07-25 13:17:16,319 - SL - DEBUG - "/code/server.py:444" - after_request() -  - 88.166.54.140 POST /auth/login ImmutableMultiDict([]) 200
2021-07-25 13:17:20,878 - SL - DEBUG - "/code/server.py:444" - after_request() -  - 88.166.54.140 GET /auth/register ImmutableMultiDict([]) 200
2021-07-25 13:17:24,704 - SL - DEBUG - "/code/server.py:444" - after_request() -  - 88.166.54.140 POST /auth/register ImmutableMultiDict([]) 200
2021-07-25 13:17:46,649 - SL - DEBUG - "/code/server.py:444" - after_request() -  - 88.166.54.140 GET /auth/login ImmutableMultiDict([]) 200
2021-07-25 13:17:49,258 - SL - DEBUG - "/code/server.py:444" - after_request() -  - 88.166.54.140 POST /auth/login ImmutableMultiDict([]) 200
2021-07-25 13:17:58,040 - SL - DEBUG - "/code/server.py:444" - after_request() -  - 88.166.54.140 GET /auth/resend_activation ImmutableMultiDict([]) 200
2021-07-25 13:18:08,750 - SL - DEBUG - "/code/app/auth/views/resend_activation.py:32" - resend_activation() -  - user <User 3  [email protected]> is not activated
2021-07-25 13:18:08,833 - SL - DEBUG - "/code/app/email_utils.py:250" - send_email() -  - send email to [email protected], subject Just one more step to join SimpleLogin
2021-07-25 13:18:08,835 - SL - ERROR - "/code/server.py:541" - error_handler() -  - [Errno 111] Connection refused
Traceback (most recent call last):
  File "/usr/local/lib/python3.7/site-packages/flask/app.py", line 1950, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python3.7/site-packages/flask/app.py", line 1936, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "/code/app/auth/views/resend_activation.py", line 37, in resend_activation
    send_activation_email(user, request.args.get("next"))
  File "/code/app/auth/views/register.py", line 113, in send_activation_email
    email_utils.send_activation_email(user.email, activation_link)
  File "/code/app/email_utils.py", line 121, in send_activation_email
    email=email,
  File "/code/app/email_utils.py", line 256, in send_email
    smtp = SMTP(POSTFIX_SERVER, POSTFIX_PORT or 25)
  File "/usr/local/lib/python3.7/smtplib.py", line 251, in __init__
    (code, msg) = self.connect(host, port)
  File "/usr/local/lib/python3.7/smtplib.py", line 336, in connect
    self.sock = self._get_socket(host, port, self.timeout)
  File "/usr/local/lib/python3.7/smtplib.py", line 307, in _get_socket
    self.source_address)
  File "/usr/local/lib/python3.7/socket.py", line 728, in create_connection
    raise err
  File "/usr/local/lib/python3.7/socket.py", line 716, in create_connection
    sock.connect(sa)
ConnectionRefusedError: [Errno 111] Connection refused
2021-07-25 13:18:08,868 - SL - DEBUG - "/code/server.py:444" - after_request() -  - 88.166.54.140 POST /auth/resend_activation ImmutableMultiDict([]) 500

it looks like it can't connect to the postfix but i can't find why?

in the main.cf in postfix i have this:

alias_maps = hash:/etc/aliases
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 240.0.0.0/24 172.17.0.0/16 172.18.0.0/16

my docker:

CONTAINER ID   IMAGE                                         COMMAND                  CREATED          STATUS                    PORTS                                                                                                                                  NAMES
95f7b1744a7b   simplelogin/app:3.4.0                         "python email_handle…"   12 minutes ago   Up 12 minutes             7777/tcp, 0.0.0.0:20381->20381/tcp                                                                                                     sl-email
bba93ddaf56a   simplelogin/app:3.4.0                         "gunicorn wsgi:app -…"   14 minutes ago   Up 14 minutes             0.0.0.0:7777->7777/tcp                                                                                                                 sl-app
c13d776cc914   postgres:12.1                                 "docker-entrypoint.s…"   26 minutes ago   Up 26 minutes             0.0.0.0:5432->5432/tcp                                                                                                                 sl-db

the network is:

# docker network inspect sl-network
[
    {
        "Name": "sl-network",
        "Id": "b490bffb6dfb9c67e91c44866f8b24e0627bc06d1cd767dac5c66193bfb0dd36",
        "Created": "2021-07-25T14:58:46.164027885+02:00",
        "Scope": "local",
        "Driver": "bridge",
        "EnableIPv6": false,
        "IPAM": {
            "Driver": "default",
            "Options": {},
            "Config": [
                {
                    "Subnet": "240.0.0.0/24",
                    "Gateway": "240.0.0.1"
                }
            ]
        },
        "Internal": false,
        "Attachable": false,
        "Ingress": false,
        "ConfigFrom": {
            "Network": ""
        },
        "ConfigOnly": false,
        "Containers": {
            "95f7b1744a7b75e0473cce38d086b71c77b654a159d9a97615066d668c67efe1": {
                "Name": "sl-email",
                "EndpointID": "24e606625263ed960be52881dbc6975c0fe8df4297135c73b5bb38fa9c616dad",
                "MacAddress": "02:42:f0:00:00:05",
                "IPv4Address": "240.0.0.5/24",
                "IPv6Address": ""
            },
            "bba93ddaf56a0e0c77b22198347fadce0214a869d6948f9f5a45ac0edf96d445": {
                "Name": "sl-app",
                "EndpointID": "006053e9160d5291f905d0f11eb5c2d0b77a69840c7cfa13d74d5a05e451f9c4",
                "MacAddress": "02:42:f0:00:00:04",
                "IPv4Address": "240.0.0.4/24",
                "IPv6Address": ""
            },
            "c13d776cc9145bce496bca5f5e04c37dcd61ddf72a703623ee55a9b61ecf754e": {
                "Name": "sl-db",
                "EndpointID": "105abf3353a4597a6894719f16aa096799c654a8649148a7b83c433341569c51",
                "MacAddress": "02:42:f0:00:00:03",
                "IPv4Address": "240.0.0.3/24",
                "IPv6Address": ""
            },
            "c8f2dd5f69d2c65cd7ba2a7b1c9f55aa6c538e559f211a48106e3459939d553c": {
                "Name": "matrix-nginx-proxy",
                "EndpointID": "8146fd62c9560968bd9a68f94163f23731dcc14028085ce05684d36f4a4b911d",
                "MacAddress": "02:42:f0:00:00:02",
                "IPv4Address": "240.0.0.2/24",
                "IPv6Address": ""
            }
        },
        "Options": {},
        "Labels": {}
    }
]

a quick add :
I try to connect to the 127.0.0.1:20381:

root@vmi604561:~# telnet 127.0.0.1 20381
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
220 95f7b1744a7b Python SMTP 1.2+
HELO
501 Syntax: HELO hostname
HELO mail.XXXX.org
250 95f7b1744a7b
mail from:<[email protected]>
250 OK
RCPT to:<[email protected]>
250 OK
DATA
354 End data with <CR><LF>.<CR><LF>
voila un test
.
550 SL E3 Email not exist

I add this error because my alias I try is not existing.

nguyenkims Jul 26, 2021
Maintainer

The below error happens when the web app can't connect to Postfix.

2021-07-25 13:18:08,833 - SL - DEBUG - "/code/app/email_utils.py:250" - send_email() -  - send email to [email protected], subject Just one more step to join SimpleLogin
2021-07-25 13:18:08,835 - SL - ERROR - "/code/server.py:541" - error_handler() -  - [Errno 111] Connection refused

To confirm that, can you try to run the following commands after connecting to a container with docker exec -it sl-app bash

apt update
apt install telnet -y
telnet 240.0.0.1 25

If the telnet 240.0.0.1 25 doesn't work, then it means Postfix can't be reached from the docker container. In this case, you can set the POSTFIX_SERVER=172.17. 0.1 in your SimpleLogin config file ~/simplelogin.env and re-run all the containers.

jbbordas Jul 28, 2021
Author

I have done all. Modify the .env file, re-run all the containers. But still have the same problem.

The telnet 240.0.0.1 25 doesn't work like `telnet 172.17.0.1 25

root@3edcc4c297d2:/code# telnet 240.0.0.1 25
Trying 240.0.0.1...
telnet: Unable to connect to remote host: Connection refused
root@3edcc4c297d2:/code# telnet 172.17.0.1 25
Trying 172.17.0.1...
telnet: Unable to connect to remote host: Connection refused

Which IP can I put on the env file? The 172.17.0.0/16 is the bridge network

# docker network inspect bridge 
[
    {
        "Name": "bridge",
        "Id": "8be538bdde77ebc19390e40cb3f622068952455e4f2b70d2d5da371c3a25436b",
        "Created": "2021-07-25T14:56:54.864616815+02:00",
        "Scope": "local",
        "Driver": "bridge",
        "EnableIPv6": false,
        "IPAM": {
            "Driver": "default",
            "Options": null,
            "Config": [
                {
                    "Subnet": "172.17.0.0/16",
                    "Gateway": "172.17.0.1"
                }
            ]
        },
        "Internal": false,
        "Attachable": false,
        "Ingress": false,
        "ConfigFrom": {
            "Network": ""
        },
        "ConfigOnly": false,
        "Containers": {},
        "Options": {
            "com.docker.network.bridge.default_bridge": "true",
            "com.docker.network.bridge.enable_icc": "true",
            "com.docker.network.bridge.enable_ip_masquerade": "true",
            "com.docker.network.bridge.host_binding_ipv4": "0.0.0.0",
            "com.docker.network.bridge.name": "docker0",
            "com.docker.network.driver.mtu": "1500"
        },
        "Labels": {}
    }
]

I try the gateway of all my docker network. I have always the Connection refused. And I can ping all of them (240.0.0.1, 172.17.0.1, 172.18.0.1)

nguyenkims Jul 28, 2021
Maintainer

If the telnet 172.17.0.1 25 fails, that means we can't connect to Postfix on the host. Can you try to run telnet 127.0.0.1 25 on the host (i.e. not inside a container) to see if it works?

jbbordas · 2021-07-28T12:36:36Z

jbbordas
Jul 28, 2021
Author

I found my mistake!!!

Thank you so much for your help. After checking in the server a telnet 127.0.0.1 25 I reach the same error. So I finally found a big mistake in the postfix conf. Now it looks like to work!

0 replies

jbbordas · 2021-07-28T12:43:18Z

jbbordas
Jul 28, 2021
Author

i just received th welcom mail and the Just one more step..

i create a new alias test. but i cant send mail to it:

<[email protected]>: host app.mail.whita.org[95.111.254.152] said: 554 5.7.1
    <[email protected]>: Relay access denied (in reply to RCPT TO command)

in the mail.log i have:

Jul 28 14:37:03 vmi604561 postfix/qmgr[22127]: 3DB05380BA7: from=<[email protected]>, size=22936, nrcpt=1 (queue active)
Jul 28 14:37:03 vmi604561 postfix/smtp[22496]: 65FB8380BA6: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:20381, delay=0.96, delays=0.12/0.05/0.02/0.78, dsn=2.0.0, status=sent (250 Message accepted for delivery)
Jul 28 14:37:03 vmi604561 postfix/qmgr[22127]: 65FB8380BA6: removed
Jul 28 14:37:03 vmi604561 postfix/smtp[22496]: connect to mta-gw.infomaniak.ch[2001:1600:0:aaaa::1:4]:25: Cannot assign requested address
Jul 28 14:37:04 vmi604561 postfix/smtp[22496]: 3DB05380BA7: to=<[email protected]>, relay=mta-gw.infomaniak.ch[83.166.143.58]:25, delay=1.4, delays=0.05/0.02/0.42/0.91, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 4GZY800sPrzpR4xs)
Jul 28 14:37:04 vmi604561 postfix/qmgr[22127]: 3DB05380BA7: removed
Jul 28 14:37:41 vmi604561 postfix/smtpd[22490]: connect from smtp-bc09.mail.infomaniak.ch[45.157.188.9]
Jul 28 14:37:41 vmi604561 postfix/smtpd[22490]: NOQUEUE: reject: RCPT from smtp-bc09.mail.infomaniak.ch[45.157.188.9]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<smtp-bc09.mail.infomaniak.ch>
Jul 28 14:37:41 vmi604561 postfix/smtpd[22490]: disconnect from smtp-bc09.mail.infomaniak.ch[45.157.188.9] ehlo=2 starttls=1 mail=1 rcpt=0/1 data=0/1 rset=1 quit=1 commands=6/8

if you have an idea?

6 replies

jbbordas Jul 28, 2021
Author

docker logs sl-email
>>> URL: http://app.mail.whita.org
MAX_NB_EMAIL_FREE_PLAN is not set, use 5 as default value
Paddle param not set
Upload files to local dir
>>> init logging <<<
2021-07-28 12:01:44,462 - SL - DEBUG - "/code/app/utils.py:11" - <module>() -  - load words file: /code/local_data/words_alpha.txt
2021-07-28 12:01:46,315 - SL - INFO - "email_handler.py:1672" - <module>() -  - Listen for port 20381
2021-07-28 12:01:46,319 - SL - DEBUG - "email_handler.py:1653" - main() -  - Start mail controller 0.0.0.0 20381
2021-07-28 12:37:02,513 - SL - INFO - "email_handler.py:1634" - _handle() -  - ===>> New message, mail from [email protected], rctp tos ['[email protected]'] 
set message_id 814cc3f7-ed46-46e5-aabe-3a9dba816a06
2021-07-28 12:37:02,533 - SL - DEBUG - "email_handler.py:1543" - handle() - 814cc3f7-ed46-46e5-aabe-3a9dba816a06 - ==>> Handle mail_from:[email protected], rcpt_tos:['[email protected]'], header_from:Son from SimpleLogin <[email protected]>, header_to:[email protected], cc:None, reply-to:None, mail_options:['SIZE=22784'], rcpt_options:[]
2021-07-28 12:37:02,999 - SL - DEBUG - "email_handler.py:1602" - handle() - 814cc3f7-ed46-46e5-aabe-3a9dba816a06 - Forward phase [email protected](Son from SimpleLogin <[email protected]>) -> [email protected]
2021-07-28 12:37:03,040 - SL - DEBUG - "email_handler.py:500" - handle_forward() - 814cc3f7-ed46-46e5-aabe-3a9dba816a06 - Create or get contact for from:Son from SimpleLogin <[email protected]> reply-to:None
2021-07-28 12:37:03,056 - SL - DEBUG - "email_handler.py:222" - get_or_create_contact() - 814cc3f7-ed46-46e5-aabe-3a9dba816a06 - create contact [email protected] for alias <Alias 4 [email protected]>
2021-07-28 12:37:03,096 - SL - DEBUG - "email_handler.py:555" - forward_email_to_mailbox() - 814cc3f7-ed46-46e5-aabe-3a9dba816a06 - Forward <Contact 3 [email protected] 4> -> <Alias 4 [email protected]> -> <Mailbox 3 [email protected]>
2021-07-28 12:37:03,138 - SL - DEBUG - "email_handler.py:694" - forward_email_to_mailbox() - 814cc3f7-ed46-46e5-aabe-3a9dba816a06 - message id <[email protected]>
2021-07-28 12:37:03,149 - SL - DEBUG - "email_handler.py:704" - forward_email_to_mailbox() - 814cc3f7-ed46-46e5-aabe-3a9dba816a06 - From header, new:"Son from SimpleLogin - support at mail.whita.net" <[email protected]>, old:Son from SimpleLogin <[email protected]>
2021-07-28 12:37:03,150 - SL - DEBUG - "email_handler.py:317" - replace_header_when_forward() - 814cc3f7-ed46-46e5-aabe-3a9dba816a06 - Delete Cc header, old value None
2021-07-28 12:37:03,158 - SL - DEBUG - "email_handler.py:314" - replace_header_when_forward() - 814cc3f7-ed46-46e5-aabe-3a9dba816a06 - Replace To header, old: [email protected], new: [email protected]
2021-07-28 12:37:03,193 - SL - DEBUG - "email_handler.py:725" - forward_email_to_mailbox() - 814cc3f7-ed46-46e5-aabe-3a9dba816a06 - Forward mail from [email protected] to [email protected], mail_options:['SIZE=22784'], rcpt_options:[] 
2021-07-28 12:37:03,275 - SL - INFO - "email_handler.py:1644" - _handle() - 814cc3f7-ed46-46e5-aabe-3a9dba816a06 - takes 0.7619147300720215 seconds <<===

nguyenkims Jul 28, 2021
Maintainer

The container seems to be working correctly. Do you know if the alias [email protected] exists?

jbbordas Jul 28, 2021
Author

Yes

my postfix conf:

# POSTFIX config file, adapted for SimpleLogin
smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

readme_directory = no

# See http://www.postfix.org/COMPATIBILITY_README.html -- default to 2 on
# fresh installs.
compatibility_level = 2

# TLS parameters
smtpd_tls_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file=/etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtp_tls_security_level = may
smtpd_tls_security_level = may

# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.

alias_maps = hash:/etc/aliases
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 240.0.0.0/24 172.17.0.0/16 172.18.0.0/16

# Set your domain here
mydestination =
myhostname = app.mail.whita.org
mydomain = mail.whita.org
myorigin = mail.whita.org

relay_domains = pgsql:/etc/postfix/pgsql-relay-domains.cf
#relay_domains = $mydomain
transport_maps = pgsql:/etc/postfix/pgsql-transport-maps.cf

# HELO restrictions
smtpd_delay_reject = yes
smtpd_helo_required = yes
smtpd_helo_restrictions =
    permit_mynetworks,
    reject_non_fqdn_helo_hostname,
    reject_invalid_helo_hostname,
    permit

# Sender restrictions:
smtpd_sender_restrictions =
    permit_mynetworks,
    reject_non_fqdn_sender,
    reject_unknown_sender_domain,
    permit

# Recipient restrictions:
smtpd_recipient_restrictions =
   reject_unauth_pipelining,
   reject_non_fqdn_recipient,
   reject_unknown_recipient_domain,
   permit_mynetworks,
   reject_unauth_destination,
   reject_rbl_client zen.spamhaus.org,
   reject_rbl_client bl.spamcop.net,
   permit

nguyenkims Jul 28, 2021
Maintainer

The error Jul 28 14:37:41 vmi604561 postfix/smtpd[22490]: NOQUEUE: reject: RCPT from smtp-bc09.mail.infomaniak.ch[45.157.188.9]: 554 5.7.1 <[email protected]>: Relay access denied; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<smtp-bc09.mail.infomaniak.ch> might come from the /etc/postfix/pgsql-relay-domains.cf or /etc/postfix/pgsql-transport-maps.cf, can you check these files to see if they are correct by running

postmap -q mydomain.com pgsql:/etc/postfix/pgsql-relay-domains.cf

and postmap -q mydomain.com pgsql:/etc/postfix/pgsql-transport-maps.cf

Please replace mydomain.com by your domain.

jbbordas Jul 29, 2021
Author

I try the two commands. The seconds work fine. So I check the first file. I re-write it and after it works! So thank you so much for your help.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[SOLVED]Problem with standalone installation 502 bad gateway #531

{{title}}

{{editor}}'s edit

{{editor}}'s edit

Replies: 4 comments 11 replies

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

Select a reply

[SOLVED]Problem with standalone installation 502 bad gateway #531

jbbordas Jul 10, 2021

Replies: 4 comments · 11 replies

nguyenkims Jul 11, 2021 Maintainer

jbbordas Jul 11, 2021 Author

nguyenkims Jul 12, 2021 Maintainer

jbbordas Jul 25, 2021 Author

nguyenkims Jul 26, 2021 Maintainer

jbbordas Jul 28, 2021 Author

nguyenkims Jul 28, 2021 Maintainer

jbbordas Jul 28, 2021 Author

jbbordas Jul 28, 2021 Author

jbbordas Jul 28, 2021 Author

nguyenkims Jul 28, 2021 Maintainer

jbbordas Jul 28, 2021 Author

nguyenkims Jul 28, 2021 Maintainer

jbbordas Jul 29, 2021 Author

jbbordas
Jul 10, 2021

Replies: 4 comments 11 replies

nguyenkims
Jul 11, 2021
Maintainer

jbbordas
Jul 11, 2021
Author

nguyenkims Jul 12, 2021
Maintainer

jbbordas Jul 25, 2021
Author

nguyenkims Jul 26, 2021
Maintainer

jbbordas Jul 28, 2021
Author

nguyenkims Jul 28, 2021
Maintainer

jbbordas
Jul 28, 2021
Author

jbbordas
Jul 28, 2021
Author

jbbordas Jul 28, 2021
Author

nguyenkims Jul 28, 2021
Maintainer

jbbordas Jul 28, 2021
Author

nguyenkims Jul 28, 2021
Maintainer

jbbordas Jul 29, 2021
Author