Trouble with some mail delivery, possibly SES issues?

knighthawk

I found I have not been receiving some mail that may have something to do with SES. The emails fail in postfix and never reach rspamd. I’ve tried getting help from ChatGPT and CoPilot, but both seem to go down rabbit holes of trying a bunch of stuff and then circling right back to things that didn’t work.

Here’s an example transaction:

postfix-mailcow-1  | Mar 11 08:58:22 eca637a4e25c postfix/postscreen[390]: CONNECT from [54.240.124.194]:49065 to [172.22.1.253]:25
postfix-mailcow-1  | Mar 11 08:58:22 eca637a4e25c postfix/postscreen[390]: ALLOWLISTED [54.240.124.194]:49065
postfix-mailcow-1  | Mar 11 08:58:22 eca637a4e25c postfix/smtpd[393]: connect from a124-194.smtp-out.amazonses.com[54.240.124.194]
postfix-mailcow-1  | Mar 11 08:58:22 eca637a4e25c postfix/smtpd[393]: lost connection after EHLO from a124-194.smtp-out.amazonses.com[54.240.124.194]
postfix-mailcow-1  | Mar 11 08:58:22 eca637a4e25c postfix/smtpd[393]: disconnect from a124-194.smtp-out.amazonses.com[54.240.124.194] ehlo=1 commands=1
postfix-mailcow-1  | Mar 11 08:58:22 eca637a4e25c postfix/postscreen[390]: CONNECT from [54.240.124.194]:43119 to [172.22.1.253]:25
postfix-mailcow-1  | Mar 11 08:58:22 eca637a4e25c postfix/postscreen[390]: ALLOWLISTED [54.240.124.194]:43119
postfix-mailcow-1  | Mar 11 08:58:22 eca637a4e25c postfix/smtpd[393]: connect from a124-194.smtp-out.amazonses.com[54.240.124.194]
postfix-mailcow-1  | Mar 11 08:58:26 eca637a4e25c postfix/smtpd[393]: EBDA8320D54: client=a124-194.smtp-out.amazonses.com[54.240.124.194]
postfix-mailcow-1  | Mar 11 08:58:54 eca637a4e25c postfix/smtpd[393]: disconnect from a124-194.smtp-out.amazonses.com[54.240.124.194] ehlo=1 mail=1 rcpt=1 rset=1 quit=1 commands=5

I’ve tried disabling postscreen and DNSBL checks, which made no difference.

Any suggestions?

Much appreciated.

ETNyx

First of all use code “```” for logs,… Those are all log you can find? Last log shows show amazon is able co established connection and make commands ehlo=1 mail=1 rcpt=1 rset=1 quit=1 what is missing is data= i would expect to have in logs others lines whit some reject warning or something,… More specificly i would expect some message about recipient not found, you see it there helo -> mail (try to send mail) -> rcpt (to whom) -> rest (reset, something got wrong) -> quit.

knighthawk

Sorry, I’ve updated the post.

That is what I get tailing the log with:
docker compose logs -f postfix-mailcow | grep -i 54.240

Thanks

ETNyx

Thanks for the update! Just a heads up on that grep filter by targeting the specific IP, you may be missing some related log lines that use a local IP or no IP at all. It’s also worth looking beyond just the postfix container, as related activity can sometimes show up in other containers like PHP or nginx.

A good next step would be to print logs filtered by timestamp to get a complete picture of everything happening around that time window. From there, you can narrow things down further using the message ID EBDA8320D54, which should help you trace that specific transaction across all the logs.

If you don’t have a log management setup in place, it can get a bit tedious, but this community tool might make your life easier: https://community.mailcow.email/d/5704-mailcow-logs-viewer-a-faster-cool-way-to-monitor-your-emails/239 (I haven’t personally used it, but it looks like it could save you a lot of time!)

knighthawk

I enabled more logging and did a full capture, but it’s way too much to post it all. As far as I can tell everything up to this point passes all the checks, ie, sender, recipient, domains, etc. According to CoPilot:

Amazon SES aborted the SMTP transaction before sending DATA.
This is why no message appears in the queue, and nothing is delivered.

🟦 Why SES aborts at this stage (common causes)
Since you didn’t ask for diagnosis, I’ll keep this tight and factual:

SES sometimes aborts if it thinks the connection is too slow
SES aborts if it hits an internal timeout
SES aborts if it sees something unexpected in the greeting or capabilities
SES aborts if it internally retries a different outbound node
SES aborts if it thinks the recipient is invalid (even if Postfix accepted it)
SES aborts if TLS negotiation was borderline but succeeded
SES aborts if its internal spam/abuse heuristics trigger mid‑session

postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: ctable_locate: leave existing entry key 020000001kcao1nv-d4od0ptd-504a-2dsm-4sfp-mkgfo6210do0-000000@amazonses.com?user@mydomain.com postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: send attr request = lookup postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: send attr table = mysql:/opt/postfix/conf/sql/mysql_recipient_canonical_maps.cf postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: send attr flags = 524352 postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: send attr key = user@mydomain.com postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: private/proxymap socket: wanted attribute: status postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: input attribute name: status postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: input attribute value: 1 postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: private/proxymap socket: wanted attribute: value postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: input attribute name: value postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: input attribute value: (end) postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: private/proxymap socket: wanted attribute: (list terminator) postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: input attribute name: (end) postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: dict_proxy_lookup: table=mysql:/opt/postfix/conf/sql/mysql_recipient_canonical_maps.cf flags=lock|utf8_request key=user@mydomain.com -> status=1 result= postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: maps_find: recipient_canonical_maps: user@mydomain.com: not found postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: match_string: mydestination: mydomain.com ~? localhost.localdomain postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: match_string: mydestination: mydomain.com ~? localhost postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: match_list_match: mydomain.com: no match postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: send attr request = lookup postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: send attr table = mysql:/opt/postfix/conf/sql/mysql_recipient_canonical_maps.cf postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: send attr flags = 524352 postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: send attr key = @mydomain.com postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: private/proxymap socket: wanted attribute: status postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: input attribute name: status postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: input attribute value: 1 postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: private/proxymap socket: wanted attribute: value postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: input attribute name: value postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: input attribute value: (end) postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: private/proxymap socket: wanted attribute: (list terminator) postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: input attribute name: (end) postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: dict_proxy_lookup: table=mysql:/opt/postfix/conf/sql/mysql_recipient_canonical_maps.cf flags=lock|utf8_request key=@mydomain.com -> status=1 result= postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: maps_find: recipient_canonical_maps: @mydomain.com: not found postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: mail_addr_find: user@mydomain.com -> (not found) postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: maps_find: canonical_maps: user@mydomain.com: not found postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: match_string: mydestination: mydomain.com ~? localhost.localdomain postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: match_string: mydestination: mydomain.com ~? localhost postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: match_list_match: mydomain.com: no match postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: maps_find: canonical_maps: @mydomain.com: not found postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: mail_addr_find: user@mydomain.com -> (not found) postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: send attr request = lookup postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: send attr table = mysql:/opt/postfix/conf/sql/mysql_virtual_alias_maps.cf postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: send attr flags = 524352 postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: send attr key = user@mydomain.com postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: private/proxymap socket: wanted attribute: status postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: input attribute name: status postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: input attribute value: 0 postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: private/proxymap socket: wanted attribute: value postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: input attribute name: value postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: input attribute value: user@mydomain.com postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: private/proxymap socket: wanted attribute: (list terminator) postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: input attribute name: (end) postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: dict_proxy_lookup: table=mysql:/opt/postfix/conf/sql/mysql_virtual_alias_maps.cf flags=lock|utf8_request key=user@mydomain.com -> status=0 result=user@mydomain.com postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: maps_find: virtual_alias_maps: proxy:mysql:/opt/postfix/conf/sql/mysql_virtual_alias_maps.cf(0,lock|fold_fix|utf8_request): user@mydomain.com = user@mydomain.com postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: mail_addr_find: user@mydomain.com -> user@mydomain.com postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: report recipient to all milters (flags=0x0) postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: milter_macro_lookup: "i" postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: milter_macro_lookup: "{rcpt_addr}" postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: ctable_locate: leave existing entry key 020000001kcao1nv-d4od0ptd-504a-2dsm-4sfp-mkgfo6210do0-000000@amazonses.com?user@mydomain.com postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: milter_macro_lookup: result "user@mydomain.com" postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: milter_macro_lookup: "{rcpt_host}" postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: ctable_locate: leave existing entry key 020000001kcao1nv-d4od0ptd-504a-2dsm-4sfp-mkgfo6210do0-000000@amazonses.com?user@mydomain.com postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: milter_macro_lookup: result "inet:dovecot:24" postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: milter_macro_lookup: "{rcpt_mailer}" postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: ctable_locate: leave existing entry key 020000001kcao1nv-d4od0ptd-504a-2dsm-4sfp-mkgfo6210do0-000000@amazonses.com?user@mydomain.com postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: milter_macro_lookup: result "lmtp" postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: milter8_rcpt_event: milter inet:rspamd:9900: rcpt <user@mydomain.com> postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: event: SMFIC_RCPT; macros: {rcpt_addr}=user@mydomain.com {rcpt_host}=inet:dovecot:24 {rcpt_mailer}=lmtp postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: skipping reply for event SMFIC_RCPT from milter inet:rspamd:9900 postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: before input_transp_cleanup: cleanup flags = enable_header_body_filter enable_automatic_bcc enable_address_mapping enable_milters postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: after input_transp_cleanup: cleanup flags = enable_header_body_filter enable_automatic_bcc enable_address_mapping enable_milters postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: name_mask: sendmail postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: name_mask: verify postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: connect to subsystem public/cleanup postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: public/cleanup socket: wanted attribute: protocol postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: input attribute name: protocol postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: input attribute value: cleanup_protocol postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: public/cleanup socket: wanted attribute: queue_id postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: input attribute name: queue_id postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: input attribute value: 3A9243228C5 postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: public/cleanup socket: wanted attribute: (list terminator) postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: input attribute name: (end) postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: send attr flags = 242 postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: send 0 milters postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: 3A9243228C5: client=a124-194.smtp-out.amazonses.com[54.240.124.194] postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: > a124-194.smtp-out.amazonses.com[54.240.124.194]: 250 2.1.5 Ok postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: smtp_stream_setup: maxtime=300 enable_deadline=0 min_data_rate=0 postfix-mailcow-1 | Mar 11 12:27:20 eca637a4e25c postfix/smtpd[417]: watchdog_pat: 0x55fdbf5d0430 postfix-mailcow-1 | Mar 11 12:27:23 eca637a4e25c postfix/smtpd[417]: < a124-194.smtp-out.amazonses.com[54.240.124.194]: RSET postfix-mailcow-1 | Mar 11 12:27:23 eca637a4e25c postfix/smtpd[417]: abort all milters postfix-mailcow-1 | Mar 11 12:27:23 eca637a4e25c postfix/smtpd[417]: milter8_abort: abort milter inet:rspamd:9900 postfix-mailcow-1 | Mar 11 12:27:23 eca637a4e25c postfix/smtpd[417]: > a124-194.smtp-out.amazonses.com[54.240.124.194]: 250 2.0.0 Ok postfix-mailcow-1 | Mar 11 12:27:23 eca637a4e25c postfix/smtpd[417]: smtp_stream_setup: maxtime=300 enable_deadline=0 min_data_rate=0 postfix-mailcow-1 | Mar 11 12:27:23 eca637a4e25c postfix/smtpd[417]: watchdog_pat: 0x55fdbf5d0430 postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: < a124-194.smtp-out.amazonses.com[54.240.124.194]: QUIT postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: > a124-194.smtp-out.amazonses.com[54.240.124.194]: 221 2.0.0 Bye postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: match_hostname: smtpd_client_event_limit_exceptions: a124-194.smtp-out.amazonses.com ~? 127.0.0.0/8 postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: match_hostaddr: smtpd_client_event_limit_exceptions: 54.240.124.194 ~? 127.0.0.0/8 postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: match_hostname: smtpd_client_event_limit_exceptions: a124-194.smtp-out.amazonses.com ~? 192.168.1.0/23 postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: match_hostaddr: smtpd_client_event_limit_exceptions: 54.240.124.194 ~? 192.168.1.0/23 postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: match_hostname: smtpd_client_event_limit_exceptions: a124-194.smtp-out.amazonses.com ~? 172.16.59.0/24 postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: match_hostaddr: smtpd_client_event_limit_exceptions: 54.240.124.194 ~? 172.16.59.0/24 postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: match_hostname: smtpd_client_event_limit_exceptions: a124-194.smtp-out.amazonses.com ~? 172.22.1.0/24 postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: match_hostaddr: smtpd_client_event_limit_exceptions: 54.240.124.194 ~? 172.22.1.0/24 postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: match_hostname: smtpd_client_event_limit_exceptions: a124-194.smtp-out.amazonses.com ~? 104.139.4.27 postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: match_hostaddr: smtpd_client_event_limit_exceptions: 54.240.124.194 ~? 104.139.4.27 postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: match_list_match: a124-194.smtp-out.amazonses.com: no match postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: match_list_match: 54.240.124.194: no match postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: send attr request = disconnect postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: send attr ident = smtpd:54.240.124.194 postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: private/anvil: wanted attribute: status postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: input attribute name: status postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: input attribute value: 0 postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: private/anvil: wanted attribute: (list terminator) postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: input attribute name: (end) postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: abort all milters postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: milter8_abort: abort milter inet:rspamd:9900 postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: disconnect event to all milters postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: milter8_disc_event: quit milter inet:rspamd:9900 postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: disconnect from a124-194.smtp-out.amazonses.com[54.240.124.194] ehlo=1 mail=1 rcpt=1 rset=1 quit=1 commands=5 postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: free all milters postfix-mailcow-1 | Mar 11 12:27:45 eca637a4e25c postfix/smtpd[417]: free milter inet:rspamd:9900

Does this make any sense?

Thanks

ETNyx

Yes, logs are hard,… Anyway from the log we can see that what I thought is wrong, MC find recipient in this case and response to amazon > a124-194.smtp-out.amazonses.com[54.240.124.194]: 250 2.1.5 Ok it does not like it so it response < a124-194.smtp-out.amazonses.com[54.240.124.194]: RSET basically abort.

Not sure what is wrong. CoPilot assessment is quiet wide and plausible,..

Those messages from Amazon, that’s is you sending? Or are you able to initiate sending? There should be log on their side too, at least whit some reason why sending failed,…

knighthawk

In this case they are from a travel site with one of the big banks. I can initiate more get sent, but that is the extent of it.

They deliver fine to gmail and hotmail.

I guess I could try to go down the rabbit hole of trying to find someone there that can help. My fear is if these are failing, what else is failing that I don’t even know about.

Thanks

I should say, I do get other email from this bank, it’s just the travel side that seems to be failing, specifically sending itineraries. They are different domain names.

ETNyx

Well Amazon SES have free tier just make account and make test.

knighthawk

Thanks, I will check that out.

knighthawk

Hello. Is there any way to just temporarily disable rspamd and tell postfix to accept everything without making wholesale changes to config files?

Thanks
James

knighthawk

Looks like adding this to /opt/mailcow-dockerized/data/conf/postfix/extra.cf does the trick, but that did not fix my issue.

smtpd_milters =
non_smtpd_milters =
milter_default_action = accept
postscreen_dnsbl_action = ignore
postscreen_dnsbl_sites =
postscreen_dnsbl_threshold = 100

ETNyx

From the last log you provided, we can see that the most likely problem is not in your MC but in SES, it is resetting the connection. So unless you are hiding some progress, poking around in MC will not help (most-likely).

Did you set up a free tier of SES? If so, can you check the logs there to see what’s going on from their side?

knighthawk

Hello. I was thinking of trying a plain MTA just to prove it’s not MC, which I basically have done. Here’s the connection from SES to my plain old postfix MTA, which is exactly what I get from MC of course.

2026-03-30T15:35:57.154525+00:00 INFO    postfix/smtpd[84224]: connect from a124-194.smtp-out.amazonses.com[54.240.124.194]
2026-03-30T15:35:57.197089+00:00 INFO    postfix/smtpd[84224]: NOQUEUE: lost connection after EHLO from a124-194.smtp-out.amazonses.com[54.240.124.194]
2026-03-30T15:35:57.197118+00:00 INFO    postfix/smtpd[84224]: disconnect from a124-194.smtp-out.amazonses.com[54.240.124.194] ehlo=1 commands=1
2026-03-30T15:35:57.213046+00:00 INFO    postfix/smtpd[84224]: connect from a124-194.smtp-out.amazonses.com[54.240.124.194]
2026-03-30T15:35:57.300379+00:00 INFO    postfix/smtpd[84224]: 494EF122D69: client=a124-194.smtp-out.amazonses.com[54.240.124.194]
2026-03-30T15:36:20.169788+00:00 INFO    postfix/cleanup[84227]: 494EF122D69: removed (canceled)
2026-03-30T15:36:42.304933+00:00 INFO    postfix/smtpd[84224]: disconnect from a124-194.smtp-out.amazonses.com[54.240.124.194] ehlo=1 mail=1 rcpt=1 rset=1 quit=1 commands=5

I did look at SES, but even setting up the free tier felt like I was agreeing to more than I wanted to. I will have to look at it again.

Thanks