Error: Helo command rejected: need fully-qualified hostname

Im trying to setup a SL Server as mail server for internal and external use (company.lan and company.net).
When I try to send to the internal (company.lan) I get the following error:
Helo command rejected: need fully-qualified hostname.
Here is my postconf -n output
I guess the error is in the line with the bold letters. How can I change it and should I?
Thanks
Kostas
Last login: Mon Nov 16 23:42:18 on console
server:~ admin$ postconf -n
biff = no
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debugpeerlevel = 2
enableserveroptions = yes
header_checks = pcre:/etc/postfix/customheaderchecks
html_directory = /usr/share/doc/postfix/html
inet_interfaces = all
mail_owner = _postfix
mailboxsizelimit = 0
mailbox_transport = dovecot
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
messagesizelimit = 10485760
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
mydomain = COMPANY.lan
mydomain_fallback = localhost
myhostname = server.COMPANY.lan
mynetworks = 127.0.0.0/8,192.168.16.0
newaliases_path = /usr/bin/newaliases
queue_directory = /private/var/spool/postfix
readme_directory = /usr/share/doc/postfix
recipient_delimiter = +
relayhost =
sample_directory = /usr/share/doc/postfix/examples
sendmail_path = /usr/sbin/sendmail
setgid_group = _postdrop
smtpdclientrestrictions = permit_mynetworks permitsaslauthenticated permit
smtpdenforcetls = no
smtpdhelorequired = yes
*smtpdhelorestrictions = rejectinvalid_helohostname rejectnon_fqdn_helohostname*
smtpdpw_server_securityoptions = cram-md5
smtpdrecipientrestrictions = permitsaslauthenticated permit_mynetworks rejectunauthdestination checkpolicyservice unix:private/policy permit
smtpdsasl_authenable = yes
smtpdtlsCAfile = /etc/certificates/server.COMPANY.lan.57680B96FCEC7F50F59A01D8F7DC4E841B2DB453.c hain.pem
smtpdtls_certfile = /etc/certificates/server.COMPANY.lan.57680B96FCEC7F50F59A01D8F7DC4E841B2DB453.c ert.pem
smtpdtls_excludeciphers = SSLv2, aNULL, ADH, eNULL
smtpdtls_keyfile = /etc/certificates/server.COMPANY.lan.57680B96FCEC7F50F59A01D8F7DC4E841B2DB453.k ey.pem
smtpduse_pwserver = yes
smtpdusetls = yes
unknownlocal_recipient_rejectcode = 550
virtualaliasdomains = $virtualaliasmaps hash:/etc/postfix/virtual_domains
virtualaliasmaps = hash:/etc/postfix/virtual_users
server:~ admin$

Παρακαλώ (you are welcome) Kostas,
If mail is for internal use only, you can keep the .lan address as long as you authenticate to send.
If you need to send to external addresses, then make sure you use a valid e-mail address or your mails will be rejected by other mail servers.
HTH,
Alex

Similar Messages

Helo command rejected: need fully-qualified hostname

Hi,
I am using iPlanet messaging server 5.2. My email is rejected by some mail servers with following reason:
Helo command rejected: need fully-qualified hostname
Could you please give me some sujjestions to fix this problem?
Thanks in advance!
Francis

Without knowing what os you're on, I'll assume solaris . .
You can address your helo/ehlo greeting two ways:
1. Fix your /etc/hosts so that the fqdn comes before your nickname
xx.xx.xx.xx hostname.domain hostname
or
2. Add the fqdn to the daemon line in the imta.cnf file:
! tcp_local
tcp_local smtp mx single_sys remotehost inner \ switchchannel identnonelimited subdirs 20\
maxjobs 20 pool SMTP_POOL maytlsserver\ maysaslserver saslswitchchannel tcp_auth\
threaddepth 64 dequeue_removeroute
tcp-daemon HOSTNAME.YOUR_DOMAIN

504 5.5.2 windows : Helo command rejected: need fully-qualified hostname

Hello2all!
Just try to send e-mail from PC client running Outlook 2003 clien, and can't, the returning message is *504 5.5.2 <windows>: Helo command rejected: need fully-qualified hostname*
From other e-mail client e-mail's sending and recieving very well, but Outlook 2003 return this message.
Anybody has idea?

I am so sorry, found great answer from Apple.
May be someone will be interested.
http://support.apple.com/kb/TS3023

Powershell send-mailmessage error - helo command rejected: need fully-qualified

did you try the From and To email addresses in the format of
"User01 "
"User02 "
Like the examples here?
https://technet.microsoft.com/en-us/library/hh849925.aspx

Hello,I need help with sending e-mails via Powershell using SMTP authentication. I've described the problem here on StackOverflow already:
http://stackoverflow.com/questions/31542444/powershell-send-mailmessage-error-helo-command-rejected-...Re-pasting here: """I've read many sources regarding this issue, but no luck :/I am trying to use Powershell 4.0 (Windows server 2012 R2) to send e-mails via the Send-MailMessage commandlet in this way:PHP$From = "[email protected]"$To = "[email protected]"$Subject = "e-mail odeslany z powershellu :)"$Body = "..."$SMTPServer = "smtp.mydomain.cz"$SMTPPort = "587"$credentials = new-object Management.Automation.PSCredential “[email protected]”, (“xxxpasswordxxx” | ConvertTo-SecureString -AsPlainText -Force)Send-MailMessage -From $From -to $To -Subject $Subject -Body $Body -SmtpServer...
This topic first appeared in the Spiceworks Community

Server error: '504 5.5.2 LITBSL2 : Helo command rejected: need fully-qualified hostname'

Clearly I've messed up my DNS.
Non of my Windows clients using Outlook can send mail, though they can all receive mail.
what am i missing?
tks,

I am so sorry, found great answer from Apple.
May be someone will be interested.
http://support.apple.com/kb/TS3023

"need fully-qualified hostname" error

Can someone please help me with a basic problem with setting up the mail server, I can't seem to get to first base. The following is a Terminal session using telnet to do some basic testing (with personal info substituted for generic names) -
==============================
mbp-5:~ Tony$ telnet mailserver.mydomain 25
Trying 82.7.140.46...
Connected to mailserver.mydomain.
Escape character is '^]'.
220 mailserver.mydomain ESMTP Postfix
helo me
250 mailserver.mydomain
Mail from:myaddress@somedomain
250 2.1.0 Ok
Rcpt to:[email protected]
504 5.5.2 <me>: Helo command rejected: need fully-qualified hostname
=============================================
In my Server Admin/Mail/General settings I have the host name set to mailserver.mydomain
Can anyone give me a pointer please

Thanks for that info.
However, is the FQDN mailserver.example.com or example.com ?
Hey guys - old thread, but was poking about and came across this. I'll assume you've fix this, but the reason for the behavior (in case others find this) is that Postfix's default configuration requires a FQHN at HELO. This helps with spam and reverse DNS. If you want to turn this behavior off, then change this line in main.cf from:
[smtpd_helo_restrictions = reject_non_fqdn_helo_hostname reject_invalid_helo_hostname]
To:
[smtpd_helo_restrictions = reject_invalid_helo_hostname]
Personally, I do NOT like changing this. However, mail clients on Windows (Outlook, OE and maybe others) pull the hostname off the TCP/IP stack. So if your machine is named FOO, even if you have a domain suffix of "bar.com" which is forced, or if you force it in the "Computer Name" tab with the "More" button, Win7 will only send FOO to Outlook or OE which is sloppy. RFC1123 states you MUST send FQHN, but MSFT doesn't allways care about RFC. And actually, it is a lack of communication between OS and Apps.
Many people have asked how to force Outlook to send the FQHN. This is a misnomer as it is the OS that sends it. Regardless, once can force the hostname by editing the registry. Note this regards the TCP/IP parameters only. These two values can be changed:
In [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet\services\Tcpip\Parameters]
For the [Hostname] value, you would change [FOO] to [foo.bar.com]
Likewise for the [NV Hostname] value, you would change [FOO] to [foo.bar.com]
If you have many systems, you could always write a .reg file to do it for you.
In this way, you can leave your server more secure and provide functionality to your Windows clients.
Hope this helps.
t

Relay Access denied /fully-qualified hostname

hello guys,
I have made an application that sends emails (with attachments) to different users. It works fine when I use an email account (smtp server) from my network but not otherwise.... For example if i use it from my university then uni's smtp server must be used. But when i run it from my job, my uni's server does not work (vice versa).
I get the following exceptions:
Thu Feb 05 12:46:40 CET 2004
ERROR MESSAGE: javax.mail.SendFailedException: Sending failed;
nested exception is:
     class javax.mail.SendFailedException: Invalid Addresses;
nested exception is:
     class javax.mail.SendFailedException: 554 <[email protected]>: Recipient address rejected: Relay access denied
     at javax.mail.Transport.send0(Transport.java:218)
     at javax.mail.Transport.send(Transport.java:80)
     at MailUtil.testOutgoingSmtp(Main.java:692)
     at EmailConfigDialog.testBtActionPerformed(Main.java:1578)....
Thu Feb 05 12:30:58 CET 2004
ERROR MESSAGE: javax.mail.SendFailedException: Sending failed;
nested exception is:
     class javax.mail.SendFailedException: Invalid Addresses;
nested exception is:
     class javax.mail.SendFailedException: 504 <cube>: Helo command rejected: need fully-qualified hostname
     at javax.mail.Transport.send0(Transport.java:218)
     at javax.mail.Transport.send(Transport.java:80)
     at MailUtil.testOutgoingSmtp(Main.java:692)
     at EmailConfigDialog.testBtActionPerformed(Main.java:1578)
my hostname is cube. Can someone please help? It is driving me crazy :::(.
I am using windows xp
cheers
Awan

Sorry, hit the post button before addressing the other problem. While your getting the DNS problem solved find the guy that is administering the SMTP server and tell him it is not relaying messages for you. He'll probably want to know the address so bring the stack trace with you and show him the 500 series error.

Spamfiltering and Helo command rejected

Hi,
We are having issue with our Apple Mavericks server with Spamfiltering turned on. Due to the facts that our e-mail cannot be sent to the outside world without a fully qualified domain hostname, we commented out the 'smtp_helo_restrictions' in the postfix main.cf file. We use SSL for pop3, imap, and smtp. If this is turned off (commented out), then we are receiving a lot spams coming through (spamfiltering turned off). If spamfiltering is turned on then we lose the ability to send and bounced back with the following message:
Server error: '504 5.5.2 <computer.: Helo command rejected: need fully-qualified hostname'.
Any thoughts are solution for this?
hugh

Without knowing what os you're on, I'll assume solaris . .
You can address your helo/ehlo greeting two ways:
1. Fix your /etc/hosts so that the fqdn comes before your nickname
xx.xx.xx.xx hostname.domain hostname
or
2. Add the fqdn to the daemon line in the imta.cnf file:
! tcp_local
tcp_local smtp mx single_sys remotehost inner \ switchchannel identnonelimited subdirs 20\
maxjobs 20 pool SMTP_POOL maytlsserver\ maysaslserver saslswitchchannel tcp_auth\
threaddepth 64 dequeue_removeroute
tcp-daemon HOSTNAME.YOUR_DOMAIN

10.6 Email-Server/Postfix Helo command rejected - local SMTP clients won't use FQDN

Hi,
I set up a 10.6 server as mail-server which works (more or less) fine. I can send and receive internal and external Emails from various Macs with mail.app and Windows-Boxes with Thunderbird. However, some clients will be rejected due to wrong Helo strings
e.g. a Windows-Box using Outlook express
server postfix/smtpd[73194]: NOQUEUE: reject: RCPT from winbox.intranet.example.com[192.168.2.21]: 504 5.5.2 <winbox>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<winbox>
similar happens with my router sending status-Emails (replace "winbox" with "router")
finally my stand-alone-fax-machine uses it's ip-address as helo-string (helo=<192.168.2.10>, similar error)
For now I've commented out
smtpd_helo_restrictions = reject_invalid_helo_hostname
#reject_non_fqdn_helo_hostname
which makes things work. But that's not the right way, I guess, moreover since this entry is "fixed" by Server-Admin ever now and then.
Does this problem arise from misconfigured boxes or a misconfigured OSX-Server? Hope the latter since there're no options to change this in my router nor my fax-machine...
Thanks

Try this.
Symptoms Users who use Microsoft Outlook as their email client and whoconnect to an email server running on Mac OS X Server v10.6 may not beable to send mail. The following (or similar) alert is returned toOutlook clients: The message could not be sent becauseone of the recipients was rejected by the server. The rejected emailaddress was "[email protected]" is subject "example", account:"mail.example.com" , server "mail.example.com", protocol: SMTP, serverresponse: "504 5.5.2 < hostname > : Helo command rejected: needfully qualified host name", port: 25, secure (SSL): no, server error:504, error number: 0x800CCC79. Products Affected Mac OS X Server 10.6 Resolution In Mac OS X Server v10.6, Postfix is configuredto require a fully qualified hostname from SMTP clients. This settingis configurable and the restriction can be removed, however anymodification of a security-related setting should be evaluated prior tomaking the change. Once you have evaluated the change, you can use the following steps to implement it: Note: Before proceeding, back up the /etc/postfix/main.cf file as a precaution.
In /etc/postfix/main.cf, locate the smtpd_helo_restrictions setting
Remove "reject_non_fqdn_helo_hostname" from the list of settings.
Restart the Mail service.

Configure Postfix to allow a non fully-qualified hostname to send email

I have a Mushroom Networks Porcini box that sends notifications from email address bbna@bbna
When I set up the Porcini to send notifications to my email address using a Mac Mini running Snow Leopard Server the email session aborts:
macbookenet:~ pderby$ telnet red.pderby.com 25
Trying 208.37.99.226...
Connected to red.pderby.com.
Escape character is '^]'.
220 red.pderby.com ESMTP Postfix
HELO bbna
250 red.pderby.com
MAIL FROM:<bbna@bbna>
250 2.1.0 Ok
RCPT TO:<[email protected]>
504 5.5.2 <bbna>: Helo command rejected: need fully-qualified hostname
I would like to configure Postfix to accept mail from this MAIL FROM address as an exception, rejecting any other addresses that are not fully-qualified.
Is there a way to do that?
Thanks for any help!

Launch Terminal.app and buried in the usual postconf -n output for your host, you should find this line:
smtpd_helo_restrictions = reject_invalid_helo_hostname reject_non_fqdn_helo_hostname
If so, then edit it with the following two lines (that first line is one long line) to tweak that:
sudo postconf -e "smtpd_helo_restrictions = permit_mynetworks reject_invalid_helo_hostname reject_non_fqdn_helo_hostname"
sudo postfix reload
That will cause local hosts (from the mynetworks setting) to bypass the SMTP HELO check that's tripping your "underpowered" box here.

10.6.8 -- 10.9 Upgrade = 451 4.3.5 Helo command rejected: Server configuration error

Full backup and upgraded my properly working Xserver 10.6.8 to Mavericks 10.9.1.
Web service running fine, File Service running fine.
Mail service: I can't send mail through my Mavericks Server.
(i think my mail.lukedesign.com is "offline")
What am I missing ? I can no longer send mail after the upgrade !
Helo command rejected: Server configuration
   error (in reply to RCPT TO command)
Reporting-MTA: dns
X-Outbound-Mail-Relay-Queue-ID: 930307000008E
X-Outbound-Mail-Relay-Sender: rfc822;
Arrival-Date: Sat, 28 Dec 2013 17:48:36 -0500 (EST)
Action: failed
Status: 4.3.5
Remote-MTA: dns
Diagnostic-Code: smtp; 451 4.3.5 >: Helo command rejected:
   Server configuration error
          bh=LIrD+hJmwz+5MZLs4vaxCpbJMUJarfXJSIlQFwtzPV4=;
          h=From:To:Subject:Message-Id:Date:MIME-Version:Content-Type;
          b=aqJBFaESW7MinKgXTlokj6WU0UxrmNYjYsXhcedpJr1io9uJ82XuN+FjKF0SLtebQ
          DhEIuYEEVU6sKsyh/y9+jKUtK2GCHexaXhWouA++9+FvT2NdqczDTdMEd/Q8kHdUOO
          Vre27uIG4VlMMlFW9CScIt9ZL3qsH+xR3oKlT7JM=
x-aol-sid: 3039ac1af95452bf554450bb
<Email Edited by Host>

Postfix Debugging Howto

Fail to install 9iAS9.0.2-a fully qualified hostname has not be specified

hello
in order to study oracle9iAS,i download the 9iAS9.0.2 from your website,but at the first disk installation,it tell me:
"installation has detected that a fully qualified hostname has not be specified for this host,oracle9i Application server installation need a default domain name to be specified..........................."
and my host file under "C:\WINNT\system32\drivers\etc" is as following:
# Copyright (c) 1993-1999 Microsoft Corp.
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
# For example:
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost
who can help me to solve the problem?
thank you

You should enter another ip-address like
199.999.99.0 hostename.domain
127.0.0.1 localhost
If you don't intend to publish the website outside your own domain you can use a localdomain If you do want to be able to see the website from outside then you will need a fully qualified internet adress like web.oracle.com.
Try a ping from a commandbox (start > run > cmd) and you can see what adress your machine has now.
If you have windows 2000 SP 3 operating system don't even begin trying to install Portal
Oracle Portal is not working op service pack 3.
Regards
Arnoud
Senior Oracle Internet Consultant
http://www.thedoc.nl

Fully Qualified Hostname problem with 9iAS install on WinNT

I am working within a corporate lan and installing 9ias to a Windows NT Sp 6 PC. I am using a fixed ip address and a fixed dns server. Although in the tcp/ip properties, dns tab I specify the hostname (shashi_build) and the domain (optus.com.au) and have an entry in the hosts and lmhosts files (192.168.218.238 shashi_build.optus.com.au shashi_build), the installer keeps coming up with an error message saying:
"Installation has detected that a fully qualified hostname has not been specified for this host. Oracle 91AS installation requires a default domain name to be specified for each host where it is installed. Please consult your operating system instructions for detials on assigning a default domain name. If you are not using a DNS server, then the file c:\winnt\system32\drivers\etc\hosts must also include a line of the the form:
<IP_ADDRESS> <FULLY_QUALIFIED_HOSTNAME< <ALIASES>
After making these changes, please reboot the host and restart the install."
Unquote.
The use dns for name resolution box is checked on the wins tab. Use lmhosts is checked too.
I even tried using DHCP, but to no effect.
I have ensured that the temp directory has sufficient space, page file is a minimum 1024 mb etc.
Can someone please help urgently? Thanks in anticipation.

This is a big deal. Please search the forum for "fully qualified host name" or "fully qualified domain name." You must get this right at install because you cannot make any changes later.
I made several posts relating to this issue in detail ca. Jan. 2003.
Mike

[svn:bz-trunk] 14749: Change tests to use fully qualified hostname of flexteam.corp.adobe. com as flexteam was not resolving on all regression boxes.

Revision: 14749
Revision: 14749
Author:   [email protected]
Date:     2010-03-14 05:43:14 -0700 (Sun, 14 Mar 2010)
Log Message:
Change tests to use fully qualified hostname of flexteam.corp.adobe.com as flexteam was not resolving on all regression boxes.
Modified Paths:
    blazeds/trunk/qa/apps/qa-regress/testsuites/mxunit/tests/proxyService/202863/bug202863Doc Lit.mxml
    blazeds/trunk/qa/apps/qa-regress/testsuites/mxunit/tests/proxyService/202863/bug202863Rpc Enc.mxml

Defining Hostname to be used in Helo command

Hi,
First of all I would like to say that I am not a Java developer or am too familar with JRE's, JDK's etc so please can all responses be in plain english!
We use an application supplied by HP called Quality Center. It is a Test Management/Repository tool and one of the functions it offers is auto email generation to keep users updated. QC is install on a Win 2003 server and it utilises JBoss.
Our company has recently changed our SMTP gateway so that any request that does not contain a fully qualifed domain name in the HELO command will be rejected. This is causing us a problem as the emails from the QC application is not using a FQDN. Below is the error we are seeing(I have replaced the server name below with locahost+):
javax.mail.SendFailedException: Invalid Addresses;
nested exception is:
     class javax.mail.SendFailedException: 504 5.5.2 <+localhost+>: Helo command rejected: need fully-qualified hostname
at com.sun.mail.smtp.SMTPTransport.rcptTo(SMTPTransport.java:926)at com.sun.mail.smtp.SMTPTransport.sendMessage(SMTPTransport.java:389)at com.mercury.optane.core.mail.CMailService.sendMail(CMailService.java:334)     wrapped in com.mercury.optane.core.CTdException: Invalid Addresses;
nested exception is:
     class javax.mail.SendFailedException: 504 5.5.2 <+localhost+>: Helo command rejected: need fully-qualified hostname
at com.mercury.optane.core.mail.CMailService.sendMail(CMailService.java:342)at com.mercury.td.saserver.api.logics.CAdminLogic.testSendMail(CAdminLogic.java:711)     wrapped in com.mercury.optane.core.CTdException: Failed to send mail. Please make sure that the server 'smtpgate.xxxx.com of type smtp is configured correctlyat com.mercury.td.saserver.api.logics.CAdminLogic.testSendMail(CAdminLogic.java:724)at com.mercury.td.saserver.web.CTdSiteAdminServlet.redirectTestSendMail(CTdSiteAdminServlet.java:742)
My question is simple - is there a Java or JBoss configuration parameter to set the FQDN? If not, where is the hostname being retrieved from?
The server has a fully qualified computername set, using DNS suffix, and we are not using Netbios over TCP. The hosts file has been updated to include the static IP address of ther server and the FQDN - does the 127.0.0.1 localhost line need to be removed?
HP are saying that the QC application does not store the FQDN anywhere in the application so I can only assume that the javax.mail class is using a default hostname value which is the localhost and not the FQDN.
Many thanks,
Steve
Edited by: SteveJR on Jul 30, 2008 5:31 AM

Are there any Java programs around that can retrieve the host name as this would be a good test.I guess it's so trivial I have to write it for you...
public class test {
    public static void main(String[] argv) throws Exception {
        System.out.println(java.net.InetAddress.getLocalHost().getHostName());
}If you can configure your system so that returns the expected value, your application should work.
"You can override what the SMTP provider uses by setting the session property mail.smtp.localhost" and "perhaps by setting it as a System property" - where would I find/do this? Is this a JDK setting or within the jboss config?It's a JavaMail setting. Without knowing how the application creates the JavaMail session,
I can't tell you where to set this, or if it's even possible to set it so that it will be seen by
the application. You could try setting it as a System property and see if that works. (And no,
I don't know how to do that with JBoss.)

Error: Helo command rejected: need fully-qualified hostname

Similar Messages

Maybe you are looking for