![Postfix 服务器无法向 yahoo 发送邮件](https://linux22.com/image/759570/Postfix%20%E6%9C%8D%E5%8A%A1%E5%99%A8%E6%97%A0%E6%B3%95%E5%90%91%20yahoo%20%E5%8F%91%E9%80%81%E9%82%AE%E4%BB%B6.png)
我在 /var/log/mail.log 中收到此错误
postfix/smtp[21774]: SSL_connect error to mta5.am0.yahoodns.net[67.195.204.79]:25: Connection timed out
postfix/smtp[21774]: 1BD3462808: Cannot start TLS: handshake failure
我可以在 Gmail 和 Yandex 上发送邮件,他们收到了邮件,但 Yahoo 没有收到
我在 ubuntu 18.04,postfix SMTP 服务器上。我已经设置了 DKIM 和 SPF 记录,并设置了 rDNS 和 MX 记录。
我是否遗漏了什么?请帮忙解决。
这是 /usr/sbin/postconf -p|grep smtp_tls_ 的输出
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $smtpd_sender_login_maps $sender_bcc_maps $recipient_bcc_maps $smtp_generic_maps $lmtp_generic_maps $alias_maps $smtpd_client_restrictions $smtpd_helo_restrictions $smtpd_sender_restrictions $smtpd_relay_restrictions $smtpd_recipient_restrictions $address_verify_sender_dependent_default_transport_maps $address_verify_sender_dependent_relayhost_maps $address_verify_transport_maps $fallback_transport_maps $lmtp_discard_lhlo_keyword_address_maps $lmtp_pix_workaround_maps $lmtp_sasl_password_maps $lmtp_tls_policy_maps $mailbox_command_maps $mailbox_transport_maps $postscreen_discard_ehlo_keyword_address_maps $rbl_reply_maps $sender_dependent_default_transport_maps $sender_dependent_relayhost_maps $smtp_discard_ehlo_keyword_address_maps $smtp_pix_workaround_maps $smtp_sasl_password_maps $smtp_tls_policy_maps $smtpd_discard_ehlo_keyword_address_maps $smtpd_milter_maps $virtual_gid_maps $virtual_uid_maps
smtp_tls_CAfile =
smtp_tls_CApath =
smtp_tls_block_early_mail_reply = no
smtp_tls_cert_file =
smtp_tls_ciphers = medium
smtp_tls_dane_insecure_mx_policy = dane
smtp_tls_dcert_file =
smtp_tls_dkey_file = $smtp_tls_dcert_file
smtp_tls_eccert_file =
smtp_tls_eckey_file = $smtp_tls_eccert_file
smtp_tls_enforce_peername = yes
smtp_tls_exclude_ciphers =
smtp_tls_fingerprint_cert_match =
smtp_tls_fingerprint_digest = md5
smtp_tls_force_insecure_host_tlsa_lookup = no
smtp_tls_key_file = $smtp_tls_cert_file
smtp_tls_loglevel = 1
smtp_tls_mandatory_ciphers = medium
smtp_tls_mandatory_exclude_ciphers =
smtp_tls_mandatory_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
smtp_tls_note_starttls_offer = no
smtp_tls_per_site =
smtp_tls_policy_maps =
smtp_tls_protocols = !SSLv2, !SSLv3, !TLSv1, !TLSv1.1
smtp_tls_scert_verifydepth = 9
smtp_tls_secure_cert_match = nexthop, dot-nexthop
smtp_tls_security_level = may
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtp_tls_session_cache_timeout = 3600s
smtp_tls_trust_anchor_file =
smtp_tls_verify_cert_match = hostname
smtp_tls_wrappermode = no
答案1
除非您将其用于其他目的,否则请删除该smtp_tls_security_level
选项。
您的服务器表示“如果您愿意,我可以进行 TLS”。Gmail 和 Yandex 并不关心,但 Yahoo 可能会说,如果您进行 TLS,那么您必须提供一份好的证书,但您没有。
因此,要么关闭客户端 TLS(如上所述),要么调试 TLS 连接并查找问题 - 您正在禁用大多数协议,因此可能与 Yahoo 支持的协议没有重叠等。