我有一个 postfix 邮件服务器，用于收发邮件。在我创建 Mailchimp 帐户之前，一切都很顺利。我的 postfix 服务器没有收到激活邮件。来自 Amazon/Paypal/... 的其他几封激活邮件都运行正常。
我的邮件日志：
Dec 20 10:17:30 *** postfix/smtpd[23774]: connect from systemalerts8.mailchimp.com[198.2.140.10]
Dec 20 10:17:30 *** postfix/smtpd[24052]: connect from systemalerts8.mailchimp.com[198.2.140.10]
Dec 20 10:17:30 *** postfix/smtpd[23774]: lost connection after EHLO from systemalerts8.mailchimp.com[198.2.140.10]
Dec 20 10:17:30 *** postfix/smtpd[23774]: disconnect from systemalerts8.mailchimp.com[198.2.140.10]
Dec 20 10:17:30 *** postfix/smtpd[24052]: lost connection after EHLO from systemalerts8.mailchimp.com[198.2.140.10]
Dec 20 10:17:30 *** postfix/smtpd[24052]: disconnect from systemalerts8.mailchimp.com[198.2.140.10]
我的main.cf：
#myorigin = /etc/mailname
soft_bounce = yes
biff = no
append_dot_mydomain = no
readme_directory = no
local_recipient_maps =
luser_relay = info
# TLS parameters
smtpd_sasl_auth_enable = yes
smtp_tls_security_level = may
smtpd_tls_cert_file=/etc/letsencrypt/live/***/fullchain.pem
smtpd_tls_key_file=/etc/letsencrypt/live/***/privkey.pem
smtpd_use_tls=yes
smtpd_enforce_tls = yes
smtp_sasl_security_options = noanonymous noplaintext
smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated permit_tls_clientcerts reject_unauth_destination
smtpd_helo_restrictions = permit_sasl_authenticated permit_mynetworks reject_invalid_hostname reject_unauth_pipelining reject_non_fqdn_hostname
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination
myhostname = sumlane.de
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = ***.de, ***.com, localhost.de, localhost
relayhost =
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mailbox_command = procmail -a "$EXTENSION"
mailbox_size_limit = 1024000000
recipient_delimiter = +
inet_interfaces = all
inet_protocols = all
milter_default_action = accept
milter_protocol = 6
smtpd_milters = inet:localhost:12345
non_smtpd_milters = inet:localhost:12345
谁能帮我？
答案1
smtpd_enforce_tls = 是
您正在对所有传入连接强制执行 STARTTLS。这是一个坏主意，因为许多邮件发件人尚不支持 TLS，并且一旦他们从您的服务器收到“530 5.7.0 必须先发出 STARTTLS 命令”就会放弃。
（请注意，TLS 已在客户消息提交端口使用 master.cf 中的每个端口设置，因此您不需要单独执行此操作。）
将来，用来tcpdump -A "port 25"查看 Mailchimp 的服务器向您发送了什么，以及它接收到了什么错误消息。