Hi,

I can send email to client-x, but the client-x can't send us your email.
The client-x receive an email error with the following message:

"553 sorry, your HELO host name has been denied (#5.7.1)"

My mail server is qmail (1.03 version) on Red Hat Enterprise Linux Server release 5.
The client-x have Microsoft Exchange and Sophos Email Appliance
(http://sea.sophos.com/docs/esa/sea_docs/en/ The Email Appliance is an appliance for filtering email.)

The /var/qmail/control/badhelo file on my server doesn't have extdomain.com. For me, extdomain.com is not a badhelo.

Seven month ago I installed qmail-103.patch from http://www.ckdhr.com/ckd/qmail-103.patch
# patch -p1 < qmail-103.patch
# make setup check

I don't know if I need install another patch for qmail to resolve this problem.

I did the following test from my server :

[root@srv ~]# telnet mail.mydomain.com 25
Trying 1.2.3.4...
Connected to mail.mydomain.com.
Escape character is '^]'.
220 mail.mydomain.com ESMTP
EHLO extdomain.com
250-mail.mydomain.com
250-STARTTLS
250-PIPELINING
250-8BITMIME
250-SIZE 22777216
250 AUTH LOGIN PLAIN CRAM-MD5
MAIL FROM:userx@extdomain.com
250 ok
RCPT TO:usery@mydomain.com NOTIFY=success,failure
553 sorry, your HELO host name has been denied (#5.7.1)

I omitted the real domains and IP addresses for confidentiality.

I can send to everybody emails, I can receive a lot of emails, but I can't receive emails from client-x.

Someone can give me an idea of ​​what I should do.

Thanks so much.

Eduardo

This is probably caused by the Sophos email appliance, I have dealt with other Sophos products and they can be very restrictive. If I remember correctly, the Sophos email filter has a built in "Whitelist" which covers 99% of valid email usage, there are some clients and some servers that dont get picked up by it and will cause a rejection.


I think this may be apart of their anti-virus suite and not actually the email appliance. Are you running the sophos anti-virus as well? can you take a quick look at the sophos logs to see if it has anything about a rejection around the time the emails are being denied?

Hi,

Thank you very much for your reply. I'll offer a bit more of details to be sure that we understand each other.

In my server, there are not any Sophos products. I currently use Spamassassin, and clamAV as anti-virus.

I cannot directly verify Sophos' logs, since they are in the client's server.

Thank you