Spamfiltering and Helo command rejected

Hi,
We are having issue with our Apple Mavericks server with Spamfiltering turned on. Due to the facts that our e-mail cannot be sent to the outside world without a fully qualified domain hostname, we commented out the 'smtp_helo_restrictions' in the postfix main.cf file. We use SSL for pop3, imap, and smtp. If this is turned off (commented out), then we are receiving a lot spams coming through (spamfiltering turned off). If spamfiltering is turned on then we lose the ability to send and bounced back with the following message:
Server error: '504 5.5.2 <computer.: Helo command rejected: need fully-qualified hostname'.
Any thoughts are solution for this?
hugh

Without knowing what os you're on, I'll assume solaris . .
You can address your helo/ehlo greeting two ways:
1. Fix your /etc/hosts so that the fqdn comes before your nickname
xx.xx.xx.xx hostname.domain hostname
or
2. Add the fqdn to the daemon line in the imta.cnf file:
! tcp_local
tcp_local smtp mx single_sys remotehost inner \ switchchannel identnonelimited subdirs 20\
maxjobs 20 pool SMTP_POOL maytlsserver\ maysaslserver saslswitchchannel tcp_auth\
threaddepth 64 dequeue_removeroute
tcp-daemon HOSTNAME.YOUR_DOMAIN

Similar Messages

Error: Helo command rejected: need fully-qualified hostname

Im trying to setup a SL Server as mail server for internal and external use (company.lan and company.net).
When I try to send to the internal (company.lan) I get the following error:
Helo command rejected: need fully-qualified hostname.
Here is my postconf -n output
I guess the error is in the line with the bold letters. How can I change it and should I?
Thanks
Kostas
Last login: Mon Nov 16 23:42:18 on console
server:~ admin$ postconf -n
biff = no
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debugpeerlevel = 2
enableserveroptions = yes
header_checks = pcre:/etc/postfix/customheaderchecks
html_directory = /usr/share/doc/postfix/html
inet_interfaces = all
mail_owner = _postfix
mailboxsizelimit = 0
mailbox_transport = dovecot
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
messagesizelimit = 10485760
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
mydomain = COMPANY.lan
mydomain_fallback = localhost
myhostname = server.COMPANY.lan
mynetworks = 127.0.0.0/8,192.168.16.0
newaliases_path = /usr/bin/newaliases
queue_directory = /private/var/spool/postfix
readme_directory = /usr/share/doc/postfix
recipient_delimiter = +
relayhost =
sample_directory = /usr/share/doc/postfix/examples
sendmail_path = /usr/sbin/sendmail
setgid_group = _postdrop
smtpdclientrestrictions = permit_mynetworks permitsaslauthenticated permit
smtpdenforcetls = no
smtpdhelorequired = yes
*smtpdhelorestrictions = rejectinvalid_helohostname rejectnon_fqdn_helohostname*
smtpdpw_server_securityoptions = cram-md5
smtpdrecipientrestrictions = permitsaslauthenticated permit_mynetworks rejectunauthdestination checkpolicyservice unix:private/policy permit
smtpdsasl_authenable = yes
smtpdtlsCAfile = /etc/certificates/server.COMPANY.lan.57680B96FCEC7F50F59A01D8F7DC4E841B2DB453.c hain.pem
smtpdtls_certfile = /etc/certificates/server.COMPANY.lan.57680B96FCEC7F50F59A01D8F7DC4E841B2DB453.c ert.pem
smtpdtls_excludeciphers = SSLv2, aNULL, ADH, eNULL
smtpdtls_keyfile = /etc/certificates/server.COMPANY.lan.57680B96FCEC7F50F59A01D8F7DC4E841B2DB453.k ey.pem
smtpduse_pwserver = yes
smtpdusetls = yes
unknownlocal_recipient_rejectcode = 550
virtualaliasdomains = $virtualaliasmaps hash:/etc/postfix/virtual_domains
virtualaliasmaps = hash:/etc/postfix/virtual_users
server:~ admin$

Παρακαλώ (you are welcome) Kostas,
If mail is for internal use only, you can keep the .lan address as long as you authenticate to send.
If you need to send to external addresses, then make sure you use a valid e-mail address or your mails will be rejected by other mail servers.
HTH,
Alex

10.6 Email-Server/Postfix Helo command rejected - local SMTP clients won't use FQDN

Hi,
I set up a 10.6 server as mail-server which works (more or less) fine. I can send and receive internal and external Emails from various Macs with mail.app and Windows-Boxes with Thunderbird. However, some clients will be rejected due to wrong Helo strings
e.g. a Windows-Box using Outlook express
server postfix/smtpd[73194]: NOQUEUE: reject: RCPT from winbox.intranet.example.com[192.168.2.21]: 504 5.5.2 <winbox>: Helo command rejected: need fully-qualified hostname; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<winbox>
similar happens with my router sending status-Emails (replace "winbox" with "router")
finally my stand-alone-fax-machine uses it's ip-address as helo-string (helo=<192.168.2.10>, similar error)
For now I've commented out
smtpd_helo_restrictions = reject_invalid_helo_hostname
#reject_non_fqdn_helo_hostname
which makes things work. But that's not the right way, I guess, moreover since this entry is "fixed" by Server-Admin ever now and then.
Does this problem arise from misconfigured boxes or a misconfigured OSX-Server? Hope the latter since there're no options to change this in my router nor my fax-machine...
Thanks

Try this.
Symptoms Users who use Microsoft Outlook as their email client and whoconnect to an email server running on Mac OS X Server v10.6 may not beable to send mail. The following (or similar) alert is returned toOutlook clients: The message could not be sent becauseone of the recipients was rejected by the server. The rejected emailaddress was "[email protected]" is subject "example", account:"mail.example.com" , server "mail.example.com", protocol: SMTP, serverresponse: "504 5.5.2 < hostname > : Helo command rejected: needfully qualified host name", port: 25, secure (SSL): no, server error:504, error number: 0x800CCC79. Products Affected Mac OS X Server 10.6 Resolution In Mac OS X Server v10.6, Postfix is configuredto require a fully qualified hostname from SMTP clients. This settingis configurable and the restriction can be removed, however anymodification of a security-related setting should be evaluated prior tomaking the change. Once you have evaluated the change, you can use the following steps to implement it: Note: Before proceeding, back up the /etc/postfix/main.cf file as a precaution.
In /etc/postfix/main.cf, locate the smtpd_helo_restrictions setting
Remove "reject_non_fqdn_helo_hostname" from the list of settings.
Restart the Mail service.

Powershell send-mailmessage error - helo command rejected: need fully-qualified

did you try the From and To email addresses in the format of
"User01 "
"User02 "
Like the examples here?
https://technet.microsoft.com/en-us/library/hh849925.aspx

Hello,I need help with sending e-mails via Powershell using SMTP authentication. I've described the problem here on StackOverflow already:
http://stackoverflow.com/questions/31542444/powershell-send-mailmessage-error-helo-command-rejected-...Re-pasting here: """I've read many sources regarding this issue, but no luck :/I am trying to use Powershell 4.0 (Windows server 2012 R2) to send e-mails via the Send-MailMessage commandlet in this way:PHP$From = "[email protected]"$To = "[email protected]"$Subject = "e-mail odeslany z powershellu :)"$Body = "..."$SMTPServer = "smtp.mydomain.cz"$SMTPPort = "587"$credentials = new-object Management.Automation.PSCredential “[email protected]”, (“xxxpasswordxxx” | ConvertTo-SecureString -AsPlainText -Force)Send-MailMessage -From $From -to $To -Subject $Subject -Body $Body -SmtpServer...
This topic first appeared in the Spiceworks Community

504 5.5.2 windows : Helo command rejected: need fully-qualified hostname

Hello2all!
Just try to send e-mail from PC client running Outlook 2003 clien, and can't, the returning message is *504 5.5.2 <windows>: Helo command rejected: need fully-qualified hostname*
From other e-mail client e-mail's sending and recieving very well, but Outlook 2003 return this message.
Anybody has idea?

I am so sorry, found great answer from Apple.
May be someone will be interested.
http://support.apple.com/kb/TS3023

10.6.8 -- 10.9 Upgrade = 451 4.3.5 Helo command rejected: Server configuration error

Full backup and upgraded my properly working Xserver 10.6.8 to Mavericks 10.9.1.
Web service running fine, File Service running fine.
Mail service: I can't send mail through my Mavericks Server.
(i think my mail.lukedesign.com is "offline")
What am I missing ? I can no longer send mail after the upgrade !
Helo command rejected: Server configuration
   error (in reply to RCPT TO command)
Reporting-MTA: dns
X-Outbound-Mail-Relay-Queue-ID: 930307000008E
X-Outbound-Mail-Relay-Sender: rfc822;
Arrival-Date: Sat, 28 Dec 2013 17:48:36 -0500 (EST)
Action: failed
Status: 4.3.5
Remote-MTA: dns
Diagnostic-Code: smtp; 451 4.3.5 >: Helo command rejected:
   Server configuration error
          bh=LIrD+hJmwz+5MZLs4vaxCpbJMUJarfXJSIlQFwtzPV4=;
          h=From:To:Subject:Message-Id:Date:MIME-Version:Content-Type;
          b=aqJBFaESW7MinKgXTlokj6WU0UxrmNYjYsXhcedpJr1io9uJ82XuN+FjKF0SLtebQ
          DhEIuYEEVU6sKsyh/y9+jKUtK2GCHexaXhWouA++9+FvT2NdqczDTdMEd/Q8kHdUOO
          Vre27uIG4VlMMlFW9CScIt9ZL3qsH+xR3oKlT7JM=
x-aol-sid: 3039ac1af95452bf554450bb
<Email Edited by Host>

Postfix Debugging Howto

Helo command rejected: need fully-qualified hostname

Hi,
I am using iPlanet messaging server 5.2. My email is rejected by some mail servers with following reason:
Helo command rejected: need fully-qualified hostname
Could you please give me some sujjestions to fix this problem?
Thanks in advance!
Francis

Without knowing what os you're on, I'll assume solaris . .
You can address your helo/ehlo greeting two ways:
1. Fix your /etc/hosts so that the fqdn comes before your nickname
xx.xx.xx.xx hostname.domain hostname
or
2. Add the fqdn to the daemon line in the imta.cnf file:
! tcp_local
tcp_local smtp mx single_sys remotehost inner \ switchchannel identnonelimited subdirs 20\
maxjobs 20 pool SMTP_POOL maytlsserver\ maysaslserver saslswitchchannel tcp_auth\
threaddepth 64 dequeue_removeroute
tcp-daemon HOSTNAME.YOUR_DOMAIN

Server error: '504 5.5.2 LITBSL2 : Helo command rejected: need fully-qualified hostname'

Clearly I've messed up my DNS.
Non of my Windows clients using Outlook can send mail, though they can all receive mail.
what am i missing?
tks,

I am so sorry, found great answer from Apple.
May be someone will be interested.
http://support.apple.com/kb/TS3023

Defining Hostname to be used in Helo command

Hi,
First of all I would like to say that I am not a Java developer or am too familar with JRE's, JDK's etc so please can all responses be in plain english!
We use an application supplied by HP called Quality Center. It is a Test Management/Repository tool and one of the functions it offers is auto email generation to keep users updated. QC is install on a Win 2003 server and it utilises JBoss.
Our company has recently changed our SMTP gateway so that any request that does not contain a fully qualifed domain name in the HELO command will be rejected. This is causing us a problem as the emails from the QC application is not using a FQDN. Below is the error we are seeing(I have replaced the server name below with locahost+):
javax.mail.SendFailedException: Invalid Addresses;
nested exception is:
     class javax.mail.SendFailedException: 504 5.5.2 <+localhost+>: Helo command rejected: need fully-qualified hostname
at com.sun.mail.smtp.SMTPTransport.rcptTo(SMTPTransport.java:926)at com.sun.mail.smtp.SMTPTransport.sendMessage(SMTPTransport.java:389)at com.mercury.optane.core.mail.CMailService.sendMail(CMailService.java:334)     wrapped in com.mercury.optane.core.CTdException: Invalid Addresses;
nested exception is:
     class javax.mail.SendFailedException: 504 5.5.2 <+localhost+>: Helo command rejected: need fully-qualified hostname
at com.mercury.optane.core.mail.CMailService.sendMail(CMailService.java:342)at com.mercury.td.saserver.api.logics.CAdminLogic.testSendMail(CAdminLogic.java:711)     wrapped in com.mercury.optane.core.CTdException: Failed to send mail. Please make sure that the server 'smtpgate.xxxx.com of type smtp is configured correctlyat com.mercury.td.saserver.api.logics.CAdminLogic.testSendMail(CAdminLogic.java:724)at com.mercury.td.saserver.web.CTdSiteAdminServlet.redirectTestSendMail(CTdSiteAdminServlet.java:742)
My question is simple - is there a Java or JBoss configuration parameter to set the FQDN? If not, where is the hostname being retrieved from?
The server has a fully qualified computername set, using DNS suffix, and we are not using Netbios over TCP. The hosts file has been updated to include the static IP address of ther server and the FQDN - does the 127.0.0.1 localhost line need to be removed?
HP are saying that the QC application does not store the FQDN anywhere in the application so I can only assume that the javax.mail class is using a default hostname value which is the localhost and not the FQDN.
Many thanks,
Steve
Edited by: SteveJR on Jul 30, 2008 5:31 AM

Are there any Java programs around that can retrieve the host name as this would be a good test.I guess it's so trivial I have to write it for you...
public class test {
    public static void main(String[] argv) throws Exception {
        System.out.println(java.net.InetAddress.getLocalHost().getHostName());
}If you can configure your system so that returns the expected value, your application should work.
"You can override what the SMTP provider uses by setting the session property mail.smtp.localhost" and "perhaps by setting it as a System property" - where would I find/do this? Is this a JDK setting or within the jboss config?It's a JavaMail setting. Without knowing how the application creates the JavaMail session,
I can't tell you where to set this, or if it's even possible to set it so that it will be seen by
the application. You could try setting it as a System property and see if that works. (And no,
I don't know how to do that with JBoss.)

ORA-29279: SMTP permanent error: 550 5.0.0 Command rejected

Hi All,
I wrote a procedure to send mails. It is working fine in one Environment and not working in another Environment even I am passing same values to this procedure.
Please help me to fix this.
Error:
ORA-29279: SMTP permanent error: 550 5.0.0 Command rejected
ORA-06512: at "SYS.UTL_SMTP", line 21
ORA-06512: at "SYS.UTL_SMTP", line 99
ORA-06512: at "SYS.UTL_SMTP", line 222
ORA-06512: at "NIKU.Z_PRO_TEST_MAIL", line 14
ORA-06512: at line 15
The Procedure is :
CREATE OR REPLACE PROCEDURE Z_Pro_Test_Mail(
pInSender IN VARCHAR2,
pInRecipient IN VARCHAR2,
pInSubject IN VARCHAR2,
pInBody IN VARCHAR2,
pInMailhost IN VARCHAR2)
IS
c utl_smtp.connection;
BEGIN
c := utl_smtp.open_connection(pInMailhost, 25); -- SMTP on port 25
utl_smtp.helo(c, pInMailhost);
utl_smtp.mail(c, pInSender);
utl_smtp.rcpt(c, pInRecipient);
utl_smtp.data(c,'From: '||pInSender || utl_tcp.crlf ||
'To: ' || pInRecipient || utl_tcp.crlf ||
'Subject: ' || pInSubject ||
utl_tcp.crlf || pInBody);
utl_smtp.quit(c);
END Z_Pro_Test_Mail;
/

Hi,
I think you can check your SMTP server with your system administrator firstly. does it work normally?
And if you are using a Windows PC for APEX, you can check you SMTP server in your IIS administration.
From your error info : Unable to relay, you can follow below to have a check, if you are working on MS Window
IIS -> Default SMTP Virtual Server -> Properties -> Access -> Relay resitrictions -> Relay -> All except the list below.
Hope this helpfull.
PPMonkey.

5.7.1 Command rejected - EPrint / Works from laptops not mobile devices

I have a new HP6500A Plus Printer and have trouble using EPrint with 3 mobile devices (Blackberry, Samsung & iTouch). I get an error stating "5.3.0 Other mail system problem - '5.7.1 Command rejected'. The process works fine when I send an email to print from my 2 laptops. The ePrint Center records the emails that come in from my laptops but do not list the emails sent via my 3 mobile devices. I followed all the typical/basic things - printer on, network on, correct address, no restrictions on who can sent printer emails, etc. Any suggestions on how to get the mobile devices to work?

One of these links should help:
http://h10025.www1.hp.com/ewfrf/wc/document?docname=c02623193&cc=us&dlc=en&lc=en&jumpid=reg_R1002_US...
For more information on HP mobile printing solutions in general, look here:
http://www.hp.com/global/us/en/consumer/digital_photography/free/software/mobile-printing-solutions....
******Clicking the Thumbs-Up button is a way to say -Thanks!.******
**Click Accept as Solution on a Reply that solves your issue to help others**

Reading conformation 550 5.7.1 command rejected

how do I fix reading conformation 550 5.7.1 command rejected

Hello sgteman,
You may want to read through a different forum thread that has had a similar question asked and see if this helps assist you with this issue. The link to this thread is:
http://h30434.www3.hp.com/t5/ePrint-Print-Apps-Mobile/550-5-7-1-Command-rejected/m-p/424837#M1943]
Hope this helps.
If I have solved your issue, please feel free to provide kudos and make sure you mark this thread as solution provided!
Although I work for HP, my posts and replies are my own opinion and not those of HP.

550 5.7.1 Command rejected

I've seen some other threads about this type of problem, but no resolution for it so I thought I'd post to help HP to know how widespread and disappointing this is.
It appears, from reading other threads, that the eprint email system on HP's end of things is extremely finicky about what emails it will accept.
This is not acceptable. If a person's email setup, client, computer system, and ISP works fine for them for every purpose except eprint, then the problem is at HP's end of things. And this is the problem I'm having now.
We bought this printer to put at my mother's house so that the rest of the family could send photos or notes to her from their email accounts. She doesn't have the desire or computer savvy to constantly troubleshoot problems with this all.
I've spent about the last eight hours fighting through a succession of problems just getting this printer to connect to the wireless router, then connect to the eprint center, and now, with all of that seeming to work, all of my emails to the printer's email address are being rejected "bounced" with this error coming back:
"This message was created automatically by the mail system (ecelerity).
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
>>> [email protected] (reading confirmation): 550 5.7.1 Command rejected"
When can we expect the eprint service to work properly for ALL otherwise perfectly functional email setups on my family's various computers, ISPs, and devices?

I have identified and solved this problem in our environment, just today. That's the good news. The bad news is that if my solution applies to your environment, as a consumer there may not be anything you can do about it personally. I happen to be both an affected business user and an affected consumer; with an HP Eprint-enabled printer in both environments, and a mail administrator and DNS adminstrator for my company's Exchange 2007 mail organization. So I was perhaps rather uniquely situated to study this problem and to resolve it.
There is an internet standard known as SPF (referred to in the MS world as SenderID.) SPF stands for Sender Policy Framework. It involves a DNS administrator putting a TXT record in DNS that identifies, by IP address, the mail servers from which email from your domain may properly come.
When email purporting to be from your domain ([email protected]) arrives at an MX server, the MX server (if it is implementing SPF; not all do) will do a DNS lookup for your sender-side SPF record. The SPF record will say, in effect, "If this email from @mydomain.com is coming from 12.98.67.216, or an address within the 64.15.8.0/24 network, then that is a valid IP source address. If not, there's something skanky about that email's origins; it may be spam, being sent from an inappropriate soure; that is, its sender address [email protected] has probably been spoofed. React accordingly."
In our case, HPEPRINT's PostFix mail server was apparently finding something in our SPF/v2.0 record it did not like (we have had that record for several years and none of our email has ever bounced for this reason, so I am not sure exactly what the issue was, but...). I deleted our SPF 2.0 record and the problem with HPEPRINT vanished immediately. We have had 100% email-printing success since then, and no more "rejected" NDRs from hpeprint.com.
We still have an SPF/v1 record in our DNS, which HP's PostFix mail server apparently likes well enough. The issue in our case was with our SPF/v2.0 record, or the way PostFix was evaluating it. I'm not sure which. If our SPF record was bad, I have to wonder why we haven't had problems with any other mail domain during the last four years or more since I created that record. But anyhow..
The main moral based on our situation is: this was NOT a problem with the printer. It MAY HAVE BEEN a problem with the way hpeprint.com's mail server evaluated SPFv2 records. It MAY HAVE BEEN a problem with our SPFv2.0 record syntax or structure. But the printers in this respect are just fine. If you are sending mail through an ISP or a company email system and are not in a position to fix it, talk to your mail administrator about it and suggest he check SPF records.
The tipoff in my case was when I tried to send to hpepprint.com from the command line and got the blowback from hpeprint.com's PostFix:
"#550 5.7.1 Can't determine Purported Responsible Address."
In referring this error back to our senders, Exchange was paraphrasing as
#550 5.7.1 Command rejected
The PRA is SPF-speak.

I get 5.3.0 other mail system problem, 550-5.7.1 command rejected

I get 5.3.0 other mail system problem, 550-5.7.1 command rejected. When ever I try to email my New deskjet 3051a, I'm using windows xp,Printer is installed, say's I have correct-e print address. help!

Hi All,
Does the ePrint job gets rejected if you use Gmail, Yahoo or Hotmail email ID's? Have you tried with the Black Berry email ID provided by your carrier?
For AT&T I believe it will be [email protected]
Try sending emails with this ID and check if it works or not.
Say "Thanks" by clicking the Kudos Star in the post that helped you.
Please mark the post that solves your problem as "Accepted Solution"

What is the diffrence between OMB plus command and OMB command

what is the diffrence between OMB plus command and OMB command?
are they both TCL command?

Hi Alena,
Welcome to SDN.
Check this
EXIT in Loops and Modularization Units
Basic form
EXIT.
Effect
Within a loop structure:
Terminates looop processing (DO, WHILE, LOOP, SELECT).
Within subroutines and other modularization units (but not in a loop structure):
Leaves the subroutine or modularization unit (FORM, MODULE, FUNCTION, TOP-OF-PAGE, END-OF-PAGE).
Outside loop structures and modularization units (report processing):
Terminates report processing and triggers list display.
But not sure about
atexit() .. ,may use in Object Oriented Programming.
(C++)
"At exit-command in module pool."
Mohinder
Edited by: Mohinder Singh Chauhan on Aug 1, 2008 8:06 AM

Spamfiltering and Helo command rejected

Similar Messages

Maybe you are looking for