Not receiving emails from Anywhere

yesbhautik · December 14, 2023, 8:44am

Note: DNS ok, Required Ports are open.

I am unable to get email from any other server or providers.
I am only able to receive email from same server’s email address.

I am able to send email anywhere, including other servers and google as well

everything working fine before, without any changes it just happened

below is my DNS for mails:

here is my /etc/exim4/exim4.conf.template

######################################################################
#                                                                    #
#          Exim configuration file for Hestia Control Panel          #
#                                                                    #
######################################################################

#SPAMASSASSIN = yes
#SPAM_SCORE = 50
#SPAM_REJECT_SCORE = 100
#CLAMD = yes

smtp_banner = $smtp_active_hostname
smtp_active_hostname = 1.cloud.yesbhautikx.co.in
add_environment = <; PATH=/bin:/usr/bin
keep_environment =
disable_ipv6 = true

smtputf8_advertise_hosts =
domainlist local_domains = dsearch;/etc/exim4/domains/
domainlist relay_to_domains = dsearch;/etc/exim4/domains/
hostlist relay_from_hosts = 127.0.0.1
hostlist whitelist = net-iplsearch;/etc/exim4/white-blocks.conf
hostlist spammers = net-iplsearch;/etc/exim4/spam-blocks.conf
no_local_from_check
untrusted_set_sender = *
acl_smtp_connect = acl_check_spammers
acl_smtp_mail = acl_check_mail
acl_smtp_rcpt = acl_check_rcpt
acl_smtp_data = acl_check_data
acl_smtp_mime = acl_check_mime

.ifdef SPAMASSASSIN
spamd_address = 127.0.0.1 783
.endif

.ifdef CLAMD
av_scanner = clamd: /run/clamav/clamd.ctl
.endif

log_selector = +tls_sni

tls_advertise_hosts = *

# We test that $tls_in_sni is a valid domain, by an arbitrary email address [email protected] .
# Then, we extract the domain with a function that would fail if the email address is invalid.
# If the certificate exists, we will use it, otherwise the default certificate in /etc/ssl will be used.
tls_certificate = \
        ${if and {\
                     { eq {${domain:foo@$tls_in_sni}} {$tls_in_sni}}\
                     { exists{/usr/local/hestia/ssl/mail/$tls_in_sni.crt} }\
                 }\
                 {/usr/local/hestia/ssl/mail/$tls_in_sni.crt}\
                 {/usr/local/hestia/ssl/certificate.crt}\
         }

tls_privatekey = \
        ${if and {\
                     { eq {${domain:foo@$tls_in_sni}} {$tls_in_sni}}\
                     { exists{/usr/local/hestia/ssl/mail/$tls_in_sni.key} }\
                 }\
                 {/usr/local/hestia/ssl/mail/$tls_in_sni.key}\
                 {/usr/local/hestia/ssl/certificate.key}\
         }

daemon_smtp_ports = 25 : 465 : 587
tls_on_connect_ports = 465
tls_require_ciphers = PERFORMANCE:-RSA:-VERS-ALL:+VERS-TLS1.2:+VERS-TLS1.3:%SERVER_PRECEDENCE
never_users = root
host_lookup = *
rfc1413_hosts = *
rfc1413_query_timeout = 0s
ignore_bounce_errors_after = 2d
timeout_frozen_after = 7d

DKIM_DOMAIN = ${lc:${domain:$h_from:}}
DKIM_FILE = /etc/exim4/domains/${lookup{${lc:${domain:$h_from:}}}dsearch{/etc/exim4/domains/}}/dkim.pem
DKIM_PRIVATE_KEY = ${if exists{DKIM_FILE}{DKIM_FILE}{0}}

OUTGOING_IP = /etc/exim4/domains/${lookup{$sender_address_domain}dsearch{/etc/exim4/domains}}/ip

SMTP_RELAY_FILE = ${if exists{/etc/exim4/domains/${lookup{$sender_address_domain}dsearch{/etc/exim4/domains}}/smtp_relay.conf}{/etc/exim4/domains/${lookup{$sender_address_domain}dsearch{/etc/exim4/domains}}/smtp_relay.conf}{/etc/exim4/smtp_relay.conf}}
SMTP_RELAY_HOST = ${lookup{host}lsearch{SMTP_RELAY_FILE}}
SMTP_RELAY_PORT = ${lookup{port}lsearch{SMTP_RELAY_FILE}}
SMTP_RELAY_USER = ${lookup{user}lsearch{SMTP_RELAY_FILE}}
SMTP_RELAY_PASS = ${lookup{pass}lsearch{SMTP_RELAY_FILE}}

# Custom Filter
system_filter = /etc/exim4/system.filter
system_filter_user = Debian-exim

######################################################################
#                       ACL CONFIGURATION                            #
#         Specifies access control lists for incoming SMTP mail      #
######################################################################

acl_not_smtp = acl_not_smtp

begin acl

# Limit per user for PHP scripts
acl_not_smtp:
  deny    message       = Website of user $authenticated_id is sending too many emails - rate overlimit = $sender_rate / $sender_rate_period
  ratelimit             = 200 / 1h / $authenticated_id

  warn    ratelimit     = 100 / 1h / strict / $authenticated_id
  log_message           = Sender rate [limitlog]: log / account / $authenticated_id / $sender_rate / $sender_rate_period

  accept

acl_check_spammers:
  accept  hosts         = +whitelist

  drop    message       = Your host in blacklist on this server.
          log_message   = Host in blacklist
          hosts         = +spammers

  accept


acl_check_mail:
  deny    condition     = ${if eq{$sender_helo_name}{}}
          message       = HELO required before MAIL

  drop    !authenticated = *
    	  message       =  Helo name contains an IP address (HELO was $sender_helo_name) and not is valid
          condition     = ${if match{$sender_helo_name}{\N((\d{1,3}[.-]\d{1,3}[.-]\d{1,3}[.-]\d{1,3})|([0-9a-f]{8})|([0-9A-F]{8}))\N}{yes}{no}}
          condition     = ${if match {${lookup dnsdb{>: defer_never,ptr=$sender_host_address}}\}{$sender_helo_name}{no}{yes}}
          delay         = 45s

  drop    !authenticated = *
		  condition     = ${if isip{$sender_helo_name}}
          message       = Access denied - Invalid HELO name (See RFC2821 4.1.3)

  drop    !authenticated = *
		  condition    = ${if eq{[$interface_address]}{$sender_helo_name}}
          message       = $interface_address is _my_ address

  accept


acl_check_rcpt:
  accept  hosts         = :

# Limit per email account for SMTP auhenticated users
  deny    message       = Email account $authenticated_id is sending too many emails - rate overlimit = $sender_rate / $sender_rate_period
          set acl_c_msg_limit  = ${if exists{/etc/exim4/domains/${lookup{${domain:$authenticated_id}}dsearch{/etc/exim4/domains/}}/limits}{${lookup {$authenticated_id} lsearch{/etc/exim4/domains/${lookup{${domain:$authenticated_id}}dsearch{/etc/exim4/domains/}}/limits}{$value}{${readfile{/etc/exim4/limit.conf}}}}}{${readfile{/etc/exim4/limit.conf}}} }
          ratelimit     = $acl_c_msg_limit / 1h / strict/ $authenticated_id

  warn    ratelimit     = ${eval:$acl_c_msg_limit / 2} / 1h / strict / $authenticated_id
  log_message           = Sender rate [limitlog]: log / email / $authenticated_id / $sender_rate / $sender_rate_period

  deny    message       = Restricted characters in address
          domains       = +local_domains
          local_parts   = ^[.] : ^.*[@%!/|]

  deny    message       = Restricted characters in address
          domains       = !+local_domains
          local_parts   = ^[./|] : ^.*[@%!] : ^.*/\\.\\./

  require verify        = sender

  accept  hosts         = +relay_from_hosts
          control       = submission

  accept  authenticated = *
          control       = submission/domain=

  deny    message       = Rejected because $sender_host_address is in a black list at $dnslist_domain\n$dnslist_text
          hosts         = !+whitelist
          dnslists      = ${readfile {/etc/exim4/dnsbl.conf}{:}}

  require message       = relay not permitted
          domains       = +local_domains : +relay_to_domains

  deny    message       = smtp auth required
         sender_domains = +local_domains
         !authenticated = *

  require verify        = recipient

.ifdef CLAMD
  warn    set acl_m0    = no

  warn    condition     = ${if exists {/etc/exim4/domains/$domain/antivirus}{yes}{no}}
          set acl_m0    = yes
.endif

.ifdef SPAMASSASSIN
 warn    set acl_m1    = no
         set acl_m3    = no
 warn    condition     = ${if exists {/etc/exim4/domains/$domain/antispam}{yes}{no}}
         set acl_m1    = yes
 warn    condition     = ${if exists {/etc/exim4/domains/$domain/reject_spam}{yes}{no}}
         set acl_m3    = yes
.endif

  accept


acl_check_data:
.ifdef CLAMD
  deny   message        = Message contains a virus ($malware_name) and has been rejected
         malware        = */defer_ok
         condition      = ${if eq{$acl_m0}{yes}{yes}{no}}
.endif

.ifdef SPAMASSASSIN
 warn   !authenticated = *
        hosts          = !+relay_from_hosts
        condition      = ${if < {$message_size}{1024K}}
        condition      = ${if eq{$acl_m1}{yes}{yes}{no}}
        spam           = debian-spamd:true/defer_ok
        add_header     = X-Spam-Score: $spam_score_int
        add_header     = X-Spam-Bar: $spam_bar
        add_header     = X-Spam-Report: $spam_report
        set acl_m2     = $spam_score_int

 warn   condition      = ${if !eq{$acl_m2}{} {yes}{no}}
        condition      = ${if >{$acl_m2}{SPAM_SCORE} {yes}{no}}
        add_header     = X-Spam-Status: Yes
        message        = SpamAssassin detected spam (from $sender_address to $recipients).

  # Deny spam at high score if spam score > SPAM_REJECT_SCORE and delete_spam is enabled
  deny   message        = This message scored $spam_score spam points
         spam           = debian-spamd:true
         condition      = ${if eq{$acl_m3}{yes}{yes}{no}}
         condition      = ${if >{$spam_score_int}{SPAM_REJECT_SCORE}{1}{0}}
.endif

  accept


acl_check_mime:
  deny   message        = Blacklisted file extension detected
         condition      = ${if match {${lc:$mime_filename}}{\N(\.ace|\.ade|\.adp|\.app|\.arj|\.asp|\.aspx|\.asx|\.bas|\.bat|\.cab|\.cer|\.chm|\.cmd|\.cnt|\.com|\.cpl|\.crt|\.csh|\.der|\.diagcab|\.dll|\.efi|\.exe|\.fla|\.fon|\.fxp|\.gadget|\.grp|\.hlp|\.hpj|\.hta|\.htc|\.img|\.inf|\.ins|\.iso|\.isp|\.its|\.jar|\.jnlp|\.js|\.jse|\.ksh|\.lib|\.lnk|\.mad|\.maf|\.mag|\.mam|\.maq|\.mar|\.mas|\.mat|\.mau|\.mav|\.maw|\.mcf|\.mda|\.mdb|\.mde|\.mdt|\.mdw|\.mdz|\.msc|\.msh|\.msh1|\.msh1xml|\.msh2|\.msh2xml|\.mshxml|\.msi|\.msp|\.mst|\.msu|\.ops|\.osd|\.pcd|\.pif|\.pl|\.plg|\.prf|\.prg|\.printerexport|\.ps1|\.ps1xml|\.ps2|\.ps2xml|\.psc1|\.psc2|\.psd1|\.psdm1|\.pst|\.py|\.pyc|\.pyo|\.pyw|\.pyz|\.pyzw|\.reg|\.scf|\.scr|\.sct|\.sfx|\.shb|\.shs|\.swf|\.sys|\.theme|\.tmp|\.ttf|\.url|\.vb|\.vba|\.vbe|\.vbp|\.vbs|\.vhd|\.vhdx|\.vsmacros|\.vsw|\.vxd|\.webpnp|\.website|\.wim|\.ws|\.wsc|\.wsf|\.wsh|\.xbap|\.xll|\.xnk)$\N}{1}{0}}

  accept



######################################################################
#                   AUTHENTICATION CONFIGURATION                     #
######################################################################
begin authenticators

smtp_relay_login:
  driver = plaintext
  public_name = LOGIN
  hide client_send = : SMTP_RELAY_USER : SMTP_RELAY_PASS

dovecot_plain:
  driver = dovecot
  public_name = PLAIN
  server_socket = /run/dovecot/auth-client
  server_set_id = $auth1

dovecot_login:
  driver = dovecot
  public_name = LOGIN
  server_socket = /run/dovecot/auth-client
  server_set_id = $auth1



######################################################################
#                      ROUTERS CONFIGURATION                         #
#               Specifies how addresses are handled                  #
######################################################################
begin routers

send_via_unauthenticated_smtp_relay:
  driver = manualroute
  address_data = SMTP_RELAY_HOST:SMTP_RELAY_PORT
  domains = !+local_domains
  require_files = SMTP_RELAY_FILE
  condition = ${if eq{SMTP_RELAY_USER}{}}
  transport = remote_smtp
  route_list = * ${extract{1}{:}{$address_data}}::${extract{2}{:}{$address_data}}
  no_more
  no_verify

send_via_smtp_relay:
  driver = manualroute
  address_data = SMTP_RELAY_HOST:SMTP_RELAY_PORT
  domains = !+local_domains
  require_files = SMTP_RELAY_FILE
  transport = smtp_relay_smtp
  route_list = * ${extract{1}{:}{$address_data}}::${extract{2}{:}{$address_data}}
  no_more
  no_verify

dnslookup:
  driver = dnslookup
  domains = !+local_domains
  transport = remote_smtp
  no_more

userforward:
  driver = redirect
  check_local_user
  file = $home/.forward
  require_files = ${local_part}:+${home}/.forward
  domains = +local_domains
  allow_filter
  no_verify
  no_expn
  check_ancestor
  file_transport = address_file
  pipe_transport = address_pipe
  reply_transport = address_reply

procmail:
  driver = accept
  check_local_user
  require_files = ${local_part}:+${home}/.procmailrc:/usr/bin/procmail
  transport = procmail
  no_verify

autoreplay:
  driver = accept
  require_files = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${local_part}.msg
  condition = ${if exists{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${local_part}.msg}{yes}{no}}
  retry_use_local_part
  transport = userautoreply
  unseen

aliases:
  driver = redirect
  headers_add = X-redirected: yes
  data = ${extract{1}{:}{${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}}}}
  require_files = /etc/exim4/domains/$domain/aliases
  redirect_router = dnslookup
  pipe_transport = address_pipe
  unseen

localuser_fwd_only:
  driver = accept
  transport = devnull
  condition = ${if exists{/etc/exim4/domains/$domain/fwd_only}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/fwd_only}{true}{false}}}}

localuser_spam:
  driver = accept
  transport = local_spam_delivery
  condition = ${if eq {${if match{$h_X-Spam-Status:}{\N^Yes\N}{yes}{no}}} {${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}{yes}{no_such_user}}}}

localuser:
  driver = accept
  transport = local_delivery
  local_part_suffix = +* : .*
  local_part_suffix_optional
  condition = ${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}{true}{false}}

catchall:
  driver = redirect
  headers_add = X-redirected: yes
  require_files = /etc/exim4/domains/$domain/aliases
  data = ${extract{1}{:}{${lookup{*@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}}}}
  file_transport = local_delivery
  redirect_router = dnslookup
  condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}{false}{true}}

terminate_alias:
  driver = accept
  transport = devnull
  condition = ${lookup{$local_part@$domain}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/aliases}{true}{false}}

######################################################################
#                      TRANSPORTS CONFIGURATION                      #
######################################################################
begin transports

smtp_relay_smtp:
  driver = smtp
  hosts_require_auth = $host_address
  hosts_require_tls = $host_address

remote_smtp:
  driver = smtp
  helo_data = 1.cloud.yesbhautikx.co.in
  dkim_domain = DKIM_DOMAIN
  dkim_selector = mail
  dkim_private_key = DKIM_PRIVATE_KEY
  dkim_canon = relaxed
  dkim_strict = 0
  hosts_try_fastopen = !*.l.google.com
  interface = ${if exists{OUTGOING_IP}{${readfile{OUTGOING_IP}}}}

procmail:
  driver = pipe
  command = "/usr/bin/procmail -d $local_part"
  return_path_add
  delivery_date_add
  envelope_to_add
  user = $local_part
  initgroups
  return_output

local_delivery:
  driver = appendfile
  maildir_format
  maildir_use_size_file
  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}
  group = mail
  create_directory
  directory_mode = 770
  mode = 660
  use_lockfile = no
  delivery_date_add
  envelope_to_add
  return_path_add
  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}"
  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}M
  quota_warn_threshold = 75%

local_spam_delivery:
  driver = appendfile
  maildir_format
  maildir_use_size_file
  user = ${extract{2}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}
  group = mail
  create_directory
  directory_mode = 770
  mode = 660
  use_lockfile = no
  delivery_date_add
  envelope_to_add
  return_path_add
  directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}/.Spam"
  quota = ${extract{6}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}M
  quota_directory = "${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}/${lookup{$local_part}dsearch{${extract{5}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/passwd}}}}/mail/${lookup{$domain}dsearch{/etc/exim4/domains/}}}}"
  quota_warn_threshold = 75%

address_pipe:
  driver = pipe
  return_output

address_file:
  driver = appendfile
  delivery_date_add
  envelope_to_add
  return_path_add

address_reply:
  driver = autoreply

userautoreply:
  driver = autoreply
  file = /etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/autoreply.${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}.msg
  from = "${extract{1}{:}{${lookup{$local_part}lsearch{/etc/exim4/domains/${lookup{$domain}dsearch{/etc/exim4/domains/}}/accounts}}}}@${lookup{$domain}dsearch{/etc/exim4/domains/}}"
  headers = Content-Type: text/plain; charset=utf-8;\nContent-Transfer-Encoding: 8bit
  subject = "${if def:h_Subject: {Autoreply: \"${rfc2047:$h_Subject:}\"} {Autoreply Message}}"
  to = "${sender_address}"

devnull:
  driver = appendfile
  file = /dev/null



######################################################################
#                      RETRY CONFIGURATION                           #
######################################################################
begin retry

# Address or Domain    Error       Retries
# -----------------    -----       -------
*                      *           F,2h,15m; G,16h,1h,1.5; F,4d,6h



######################################################################
#                      REWRITE CONFIGURATION                         #
######################################################################
begin rewrite



######################################################################

eris · December 14, 2023, 9:03am

send an email to your self from a gmail account and check /var/log/exim4/mainlog

But it llooks like you are missing MX record

yesbhautik · December 14, 2023, 9:26am

Here is my MX record, Sorry I missed to attach SS in post.

image1264×38 2.05 KB

Last Hour /var/log/exim4/mainlog

2023-12-14 14:12:05 exim 4.95 daemon started: pid=4086, -q30m, listening for SMTP on port 25 (IPv4) port 587 (IPv4) and for SMTPS on port 465 (IPv4)
2023-12-14 14:12:05 Start queue run: pid=4099
2023-12-14 14:12:05 1rD7W5-001u4w-4d Message is frozen
2023-12-14 14:12:05 1rDTzd-003Xdv-Tv Message is frozen
2023-12-14 14:12:05 1rBfbs-00D5gu-U7 Message is frozen
2023-12-14 14:12:05 1rD5YH-001mqg-Ge Message is frozen
2023-12-14 14:12:05 End queue run: pid=4099
2023-12-14 14:13:10 H=mail-pg1-f178.google.com [209.85.215.178] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautikx.co.in F=<[email protected]> rejected RCPT <hi@yesbh>2023-12-14 14:13:21 H=mail-qt1-f177.google.com [209.85.160.177] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <hi@yesbha>2023-12-14 14:13:21 H=mail-qt1-f177.google.com [209.85.160.177] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <smak@yesb>2023-12-14 14:13:49 1rDhJt-0001yV-IC <= [email protected] H=localhost (webmail.yesbhautikx.co.in) [127.0.0.1] P=esmtpa A=dovecot_login:[email protected] S=6161 id=e33f4c7a44e0effbf44f46be6e5ac770@yesbhautik>
2023-12-14 14:13:49 1rDhJt-0001yV-IC => hi <[email protected]> R=localuser T=local_delivery
2023-12-14 14:13:51 1rDhJt-0001yV-IC H=gmail-smtp-in.l.google.com [74.125.130.26] TLS error on connection (recv): The TLS connection was non-properly terminated.
2023-12-14 14:13:51 1rDhJt-0001yV-IC => [email protected] R=dnslookup T=remote_smtp H=gmail-smtp-in.l.google.com [74.125.130.26] X=TLS1.3:ECDHE_X25519__ECDSA_SECP256R1_SHA256__AES_256_GCM:256 CV=yes K C="2>
2023-12-14 14:13:51 1rDhJt-0001yV-IC Completed
2023-12-14 14:14:22 H=mail-io1-f53.google.com [209.85.166.53] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <hi@yesbhaut>
2023-12-14 14:14:35 H=mail-pg1-f172.google.com [209.85.215.172] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautikx.co.in F=<[email protected]> rejected RCPT <hi@yesbh>
2023-12-14 14:15:22 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:15:30 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:15:38 H=mail-pg1-f180.google.com [209.85.215.180] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <hi@yesbha>
2023-12-14 14:15:43 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:15:53 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:16:00 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:16:04 H=mail-il1-f177.google.com [209.85.166.177] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <hi@yes>
2023-12-14 14:16:19 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:16:19 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:16:38 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:16:42 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:17:01 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:17:05 dovecot_login authenticator failed for (User) [45.129.14.166]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:18:06 TLS error on connection from mail-pj1-f43.google.com [209.85.216.43] (gnutls_handshake): A disallowed SNI server name has been received.
2023-12-14 14:18:08 H=mail-lf1-f42.google.com [209.85.167.42] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCP>
2023-12-14 14:21:42 SMTP command timeout on connection from (User) [45.129.14.120]
2023-12-14 14:23:29 H=mail-qt1-f181.google.com [209.85.160.181] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <hi@yesbha>2023-12-14 14:23:42 H=mail-wm1-f45.google.com [209.85.128.45] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCP>
2023-12-14 14:25:44 TLS error on connection from mail-oo1-f41.google.com [209.85.161.41] (gnutls_handshake): A disallowed SNI server name has been received.
2023-12-14 14:26:56 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:27:12 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:27:18 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:27:31 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:27:43 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:27:51 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:28:02 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:28:10 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:28:25 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:28:48 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:29:04 1rDhYe-00042U-PJ <= [email protected] H=localhost (webmail.yesbhautik.co.in) [127.0.0.1] P=esmtpa A=dovecot_login:[email protected] S=6270 [email protected]>2023-12-14 14:29:07 1rDhYe-00042U-PJ => [email protected] R=dnslookup T=remote_smtp H=reception.mail-tester.com [94.23.206.89] X=TLS1.2:ECDHE_SECP256R1__RSA_SHA256__AES_256_GCM:256 CV=yes C="250>
2023-12-14 14:29:07 1rDhYe-00042U-PJ Completed
2023-12-14 14:29:20 no host name found for IP address 141.98.10.220
2023-12-14 14:29:23 dovecot_login authenticator failed for ([141.98.10.220]) [141.98.10.220]: 535 Incorrect authentication data (set_id=alex)
2023-12-14 14:29:55 H=mail-pg1-f179.google.com [209.85.215.179] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautikx.co.in F=<[email protected]> rejected RCPT <hi@yesbh>
2023-12-14 14:32:37 dovecot_login authenticator failed for (User) [45.129.14.166]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:33:10 SMTP command timeout on connection from (User) [45.129.14.120]
2023-12-14 14:33:27 no host name found for IP address 185.167.96.146
2023-12-14 14:33:27 SMTP call from [185.167.96.146] dropped: too many syntax or protocol errors (last command was "?\b?\006?\027?\030?\031?\v?\002\001??\r?", NULL)
2023-12-14 14:37:04 H=mail-pl1-f173.google.com [209.85.214.173] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <hi@yesbha>
2023-12-14 14:38:17 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:38:30 H=mail-ed1-f41.google.com [209.85.208.41] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <hi@yesb>
2023-12-14 14:38:35 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:38:54 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:39:04 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:39:11 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:39:27 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:39:30 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:39:49 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:40:12 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:40:35 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:42:05 Start queue run: pid=19074
2023-12-14 14:42:05 1rD7W5-001u4w-4d Message is frozen
2023-12-14 14:42:05 1rDTzd-003Xdv-Tv Message is frozen
2023-12-14 14:42:05 1rBfbs-00D5gu-U7 Message is frozen
2023-12-14 14:42:05 1rD5YH-001mqg-Ge Message is frozen
2023-12-14 14:42:05 End queue run: pid=19074
2023-12-14 14:42:26 H=mail-wr1-f46.google.com [209.85.221.46] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCP>
2023-12-14 14:44:25 no host name found for IP address 185.233.19.212
2023-12-14 14:44:26 no host name found for IP address 185.233.19.212
2023-12-14 14:44:30 SMTP command timeout on connection from (User) [45.129.14.120]
2023-12-14 14:44:36 TLS error on connection from (mail.example.com) [185.233.19.212] (gnutls_handshake): The TLS connection was non-properly terminated.
2023-12-14 14:44:43 TLS error on connection from 23-239-11-9.ip.linodeusercontent.com (masscan) [23.239.11.9] (gnutls_handshake): The TLS connection was non-properly terminated.
2023-12-14 14:45:30 H=mail-yw1-f170.google.com [209.85.128.170] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <hi@yesbha>
2023-12-14 14:47:29 H=(cpanel.net) [198.12.123.11] F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 198.12.123.11 is in a black list at zen.spamhaus.org
2023-12-14 14:47:30 unexpected disconnection while reading SMTP command from (cpanel.net) [198.12.123.11] D=2s
2023-12-14 14:48:04 dovecot_login authenticator failed for (User) [45.129.14.166]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:49:24 TLS error on connection from mail-oo1-f43.google.com [209.85.161.43] (gnutls_handshake): A disallowed SNI server name has been received.
2023-12-14 14:49:37 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:49:55 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:50:11 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:50:33 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:50:51 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:50:51 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:51:14 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:51:39 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:51:51 H=mail-pl1-f172.google.com [209.85.214.172] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <hi@yesbha>
2023-12-14 14:51:59 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:52:21 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:54:27 H=mail-pg1-f171.google.com [209.85.215.171] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautikx.co.in F=<[email protected]> rejected RCPT <hi@yesbh>
2023-12-14 14:55:09 no host name found for IP address 141.98.10.220
2023-12-14 14:55:11 dovecot_login authenticator failed for ([141.98.10.220]) [141.98.10.220]: 535 Incorrect authentication data (set_id=amanda)

eris · December 14, 2023, 9:37am

2023-12-14 14:37:04 H=mail-pl1-f173.google.com [209.85.214.173] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <hi@yesbha>

and

2023-12-14 14:51:51 H=mail-pl1-f172.google.com [209.85.214.172] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <hi@yesbha>

Check the full error message as it is currently cut of …

yesbhautik · December 14, 2023, 9:59am

2023-12-14 13:14:56 no host name found for IP address 91.92.245.229
2023-12-14 13:14:58 dovecot_login authenticator failed for ([91.92.245.229]) [91.92.245.229]: 535 Incorrect authentication data (set_id=compras)
2023-12-14 13:15:03 dovecot_login authenticator failed for (User) [45.129.14.166]: 535 Incorrect authentication data ([email protected])
2023-12-14 13:19:27 H=mail-ot1-f45.google.com [209.85.210.45] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.210.45 is in a black list at zen.spamhaus.org
2023-12-14 13:25:17 H=mail-wm1-f48.google.com [209.85.128.48] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.128.48 is in a black list at zen.spamhaus.org
2023-12-14 13:26:50 no host name found for IP address 91.92.245.203
2023-12-14 13:26:53 dovecot_login authenticator failed for ([91.92.245.203]) [91.92.245.203]: 535 Incorrect authentication data (set_id=video)
2023-12-14 13:27:51 H=mail-il1-f179.google.com [209.85.166.179] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.166.179 is in a black list at zen.spamhaus.org
2023-12-14 13:30:42 dovecot_login authenticator failed for (User) [45.129.14.166]: 535 Incorrect authentication data ([email protected])
2023-12-14 13:31:03 H=mail-ot1-f53.google.com [209.85.210.53] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.210.53 is in a black list at zen.spamhaus.org
2023-12-14 13:35:58 H=mail-qt1-f171.google.com [209.85.160.171] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.160.171 is in a black list at zen.spamhaus.org
2023-12-14 13:35:58 H=mail-qt1-f171.google.com [209.85.160.171] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.160.171 is in a black list at zen.spamhaus.org
2023-12-14 13:41:01 Start queue run: pid=19241
2023-12-14 13:41:01 1rD7W5-001u4w-4d Message is frozen
2023-12-14 13:41:01 1rDTzd-003Xdv-Tv Message is frozen
2023-12-14 13:41:01 1rBfbs-00D5gu-U7 Message is frozen
2023-12-14 13:41:01 1rD5YH-001mqg-Ge Message is frozen
2023-12-14 13:41:01 End queue run: pid=19241
2023-12-14 13:43:11 H=(static-ip-cr18152024795.cable.net.co) [181.52.247.95] F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 181.52.247.95 is in a black list at bl.spamcop.net
2023-12-14 13:43:12 unexpected disconnection while reading SMTP command from (static-ip-cr18152024795.cable.net.co) [181.52.247.95] (error: Connection reset by peer) D=5s
2023-12-14 13:46:09 dovecot_login authenticator failed for (User) [45.129.14.166]: 535 Incorrect authentication data ([email protected])
2023-12-14 13:47:11 H=mail-il1-f177.google.com [209.85.166.177] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.166.177 is in a black list at zen.spamhaus.org
2023-12-14 13:48:23 exim 4.95 daemon started: pid=22408, -q30m, listening for SMTP on port 25 (IPv4) port 587 (IPv4) and for SMTPS on port 465 (IPv4)
2023-12-14 13:48:23 Start queue run: pid=22435
2023-12-14 13:48:23 1rDTzd-003Xdv-Tv Message is frozen
2023-12-14 13:48:23 1rBfbs-00D5gu-U7 Message is frozen
2023-12-14 13:48:23 1rD7W5-001u4w-4d Message is frozen
2023-12-14 13:48:23 1rD5YH-001mqg-Ge Message is frozen
2023-12-14 13:48:23 End queue run: pid=22435
2023-12-14 13:53:25 H=mail-pg1-f182.google.com [209.85.215.182] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautikx.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.215.182 is in a black list at zen.spamhaus.org
2023-12-14 13:57:25 H=mail-4325.protonmail.ch [185.70.43.25] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 185.70.43.25 is in a black list at zen.spamhaus.org
2023-12-14 13:58:04 H=mail-4318.protonmail.ch [185.70.43.18] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 185.70.43.18 is in a black list at zen.spamhaus.org
2023-12-14 13:58:27 TLS error on connection from 45-79-181-129.ip.linodeusercontent.com [45.79.181.129] (gnutls_handshake): The TLS connection was non-properly terminated.
2023-12-14 13:59:00 H=mail-pg1-f180.google.com [209.85.215.180] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautikx.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.215.180 is in a black list at zen.spamhaus.org
2023-12-14 14:01:40 dovecot_login authenticator failed for (User) [45.129.14.166]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:02:46 TLS error on connection from 23-239-11-191.ip.linodeusercontent.com (masscan) [23.239.11.191] (gnutls_handshake): The TLS connection was non-properly terminated.
2023-12-14 14:03:46 exim 4.95 daemon started: pid=4198, -q30m, listening for SMTP on port 25 (IPv4) port 587 (IPv4) and for SMTPS on port 465 (IPv4)
2023-12-14 14:03:46 Start queue run: pid=4218
2023-12-14 14:03:46 1rD5YH-001mqg-Ge Message is frozen
2023-12-14 14:03:46 1rBfbs-00D5gu-U7 Message is frozen
2023-12-14 14:03:46 1rDTzd-003Xdv-Tv Message is frozen
2023-12-14 14:03:46 1rD7W5-001u4w-4d Message is frozen
2023-12-14 14:03:46 End queue run: pid=4218
2023-12-14 14:04:17 no host name found for IP address 141.98.10.220
2023-12-14 14:04:20 dovecot_login authenticator failed for ([141.98.10.220]) [141.98.10.220]: 535 Incorrect authentication data (set_id=alan)
2023-12-14 14:05:56 H=mail-pf1-f179.google.com [209.85.210.179] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautikx.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.210.179 is in a black list at zen.spamhaus.org
2023-12-14 14:12:05 exim 4.95 daemon started: pid=4086, -q30m, listening for SMTP on port 25 (IPv4) port 587 (IPv4) and for SMTPS on port 465 (IPv4)
2023-12-14 14:12:05 Start queue run: pid=4099
2023-12-14 14:12:05 1rD7W5-001u4w-4d Message is frozen
2023-12-14 14:12:05 1rDTzd-003Xdv-Tv Message is frozen
2023-12-14 14:12:05 1rBfbs-00D5gu-U7 Message is frozen
2023-12-14 14:12:05 1rD5YH-001mqg-Ge Message is frozen
2023-12-14 14:12:05 End queue run: pid=4099
2023-12-14 14:13:10 H=mail-pg1-f178.google.com [209.85.215.178] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautikx.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.215.178 is in a black list at zen.spamhaus.org
2023-12-14 14:13:21 H=mail-qt1-f177.google.com [209.85.160.177] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.160.177 is in a black list at zen.spamhaus.org
2023-12-14 14:13:21 H=mail-qt1-f177.google.com [209.85.160.177] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.160.177 is in a black list at zen.spamhaus.org
2023-12-14 14:13:49 1rDhJt-0001yV-IC <= [email protected] H=localhost (webmail.yesbhautikx.co.in) [127.0.0.1] P=esmtpa A=dovecot_login:[email protected] S=6161 [email protected]
2023-12-14 14:13:49 1rDhJt-0001yV-IC => hi <[email protected]> R=localuser T=local_delivery
2023-12-14 14:13:51 1rDhJt-0001yV-IC H=gmail-smtp-in.l.google.com [74.125.130.26] TLS error on connection (recv): The TLS connection was non-properly terminated.
2023-12-14 14:13:51 1rDhJt-0001yV-IC => [email protected] R=dnslookup T=remote_smtp H=gmail-smtp-in.l.google.com [74.125.130.26] X=TLS1.3:ECDHE_X25519__ECDSA_SECP256R1_SHA256__AES_256_GCM:256 CV=yes K C="250 2.0.0 OK d8-20020a17090ab30800b0028a2b0c5d7asi10644304pjr.41 - gsmtp"
2023-12-14 14:13:51 1rDhJt-0001yV-IC Completed
2023-12-14 14:14:22 H=mail-io1-f53.google.com [209.85.166.53] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.166.53 is in a black list at zen.spamhaus.org
2023-12-14 14:14:35 H=mail-pg1-f172.google.com [209.85.215.172] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautikx.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.215.172 is in a black list at zen.spamhaus.org
2023-12-14 14:15:22 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:15:30 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:15:38 H=mail-pg1-f180.google.com [209.85.215.180] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.215.180 is in a black list at zen.spamhaus.org
2023-12-14 14:15:43 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:15:53 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:16:00 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:16:04 H=mail-il1-f177.google.com [209.85.166.177] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.166.177 is in a black list at zen.spamhaus.org
2023-12-14 14:16:19 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:16:19 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:16:38 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:16:42 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:17:01 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:17:05 dovecot_login authenticator failed for (User) [45.129.14.166]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:18:06 TLS error on connection from mail-pj1-f43.google.com [209.85.216.43] (gnutls_handshake): A disallowed SNI server name has been received.
2023-12-14 14:18:08 H=mail-lf1-f42.google.com [209.85.167.42] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.167.42 is in a black list at zen.spamhaus.org
2023-12-14 14:21:42 SMTP command timeout on connection from (User) [45.129.14.120]
2023-12-14 14:23:29 H=mail-qt1-f181.google.com [209.85.160.181] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.160.181 is in a black list at zen.spamhaus.org
2023-12-14 14:23:42 H=mail-wm1-f45.google.com [209.85.128.45] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.128.45 is in a black list at zen.spamhaus.org
2023-12-14 14:25:44 TLS error on connection from mail-oo1-f41.google.com [209.85.161.41] (gnutls_handshake): A disallowed SNI server name has been received.
2023-12-14 14:26:56 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:27:12 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:27:18 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:27:31 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:27:43 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:27:51 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:28:02 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:28:10 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:28:25 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:28:48 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:29:04 1rDhYe-00042U-PJ <= [email protected] H=localhost (webmail.yesbhautik.co.in) [127.0.0.1] P=esmtpa A=dovecot_login:[email protected] S=6270 [email protected]
2023-12-14 14:29:07 1rDhYe-00042U-PJ => [email protected] R=dnslookup T=remote_smtp H=reception.mail-tester.com [94.23.206.89] X=TLS1.2:ECDHE_SECP256R1__RSA_SHA256__AES_256_GCM:256 CV=yes C="250 2.0.0 Ok: queued as E0B80A0B8E"
2023-12-14 14:29:07 1rDhYe-00042U-PJ Completed
2023-12-14 14:29:20 no host name found for IP address 141.98.10.220
2023-12-14 14:29:23 dovecot_login authenticator failed for ([141.98.10.220]) [141.98.10.220]: 535 Incorrect authentication data (set_id=alex)
2023-12-14 14:29:55 H=mail-pg1-f179.google.com [209.85.215.179] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautikx.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.215.179 is in a black list at zen.spamhaus.org
2023-12-14 14:32:37 dovecot_login authenticator failed for (User) [45.129.14.166]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:33:10 SMTP command timeout on connection from (User) [45.129.14.120]
2023-12-14 14:33:27 no host name found for IP address 185.167.96.146
2023-12-14 14:33:27 SMTP call from [185.167.96.146] dropped: too many syntax or protocol errors (last command was "?\b?\006?\027?\030?\031?\v?\002\001??\r?", NULL)
2023-12-14 14:37:04 H=mail-pl1-f173.google.com [209.85.214.173] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.214.173 is in a black list at zen.spamhaus.org
2023-12-14 14:38:17 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:38:30 H=mail-ed1-f41.google.com [209.85.208.41] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.208.41 is in a black list at zen.spamhaus.org
2023-12-14 14:38:35 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:38:54 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:39:04 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:39:11 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:39:27 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:39:30 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:39:49 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:40:12 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:40:35 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:42:05 Start queue run: pid=19074
2023-12-14 14:42:05 1rD7W5-001u4w-4d Message is frozen
2023-12-14 14:42:05 1rDTzd-003Xdv-Tv Message is frozen
2023-12-14 14:42:05 1rBfbs-00D5gu-U7 Message is frozen
2023-12-14 14:42:05 1rD5YH-001mqg-Ge Message is frozen
2023-12-14 14:42:05 End queue run: pid=19074
2023-12-14 14:42:26 H=mail-wr1-f46.google.com [209.85.221.46] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.221.46 is in a black list at zen.spamhaus.org
2023-12-14 14:44:25 no host name found for IP address 185.233.19.212
2023-12-14 14:44:26 no host name found for IP address 185.233.19.212
2023-12-14 14:44:30 SMTP command timeout on connection from (User) [45.129.14.120]
2023-12-14 14:44:36 TLS error on connection from (mail.example.com) [185.233.19.212] (gnutls_handshake): The TLS connection was non-properly terminated.
2023-12-14 14:44:43 TLS error on connection from 23-239-11-9.ip.linodeusercontent.com (masscan) [23.239.11.9] (gnutls_handshake): The TLS connection was non-properly terminated.
2023-12-14 14:45:30 H=mail-yw1-f170.google.com [209.85.128.170] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.128.170 is in a black list at zen.spamhaus.org
2023-12-14 14:47:29 H=(cpanel.net) [198.12.123.11] F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 198.12.123.11 is in a black list at zen.spamhaus.org
2023-12-14 14:47:30 unexpected disconnection while reading SMTP command from (cpanel.net) [198.12.123.11] D=2s
2023-12-14 14:48:04 dovecot_login authenticator failed for (User) [45.129.14.166]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:49:24 TLS error on connection from mail-oo1-f43.google.com [209.85.161.43] (gnutls_handshake): A disallowed SNI server name has been received.
2023-12-14 14:49:37 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:49:55 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:50:11 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:50:33 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:50:51 dovecot_login authenticator failed for (User) [45.129.14.120]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:50:51 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:51:14 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:51:39 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:51:51 H=mail-pl1-f172.google.com [209.85.214.172] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.214.172 is in a black list at zen.spamhaus.org
2023-12-14 14:51:59 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])
2023-12-14 14:52:21 dovecot_login authenticator failed for (User) [141.98.11.68]: 535 Incorrect authentication data ([email protected])

eris · December 14, 2023, 10:06am

yesbhautik:

2023-12-14 13:31:03 H=mail-ot1-f53.google.com [209.85.210.53] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.210.53 is in a black list at zen.spamhaus.org
2023-12-14 13:35:58 H=mail-qt1-f171.google.com [209.85.160.171] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.160.171 is in a black list at zen.spamhaus.org
2023-12-14 13:35:58 H=mail-qt1-f171.google.com [209.85.160.171] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_128_GCM:128 CV=no SNI=mail.yesbhautik.co.in F=<[email protected]> rejected RCPT <[email protected]>: Rejected because 209.85.160.171 is in a black list at zen.spamhaus.org

… Google ip on blacklist form zen.spamhaus.

https://check.spamhaus.org/not_listed/?searchterm=209.85.160.171

if you are using an open resolver:

other wise disable zen.spamhaus.org in /etc/exim4/dnsbl.conf

sed -i “/zen.spamhaus.org/d” /etc/exim4/dnsbl.conf
systemctl restart exim4

yesbhautik · December 14, 2023, 10:22am

tried with proton mail as well.
You have any idea why all providers showing blocked? but in actual checking in website showing there is not issue with IP address

r

eris · December 14, 2023, 10:24am

Try this first if it is not working delete the zen.spamhaus.org black list…

yesbhautik · December 14, 2023, 10:50am

I runned
sed -i “/zen.spamhaus.org/d” /etc/exim4/dnsbl.conf [worked surely]
systemctl restart exim4

before checking out Email and mail server | Hestia Control Panel

Can you drop the command to re enable it