Troubleshooting eWall SMTP Proxy Free: Common Issues & Fixes
1. Service won’t start
- Symptom: Proxy process fails to start or immediately exits.
- Fixes:
- Check logs (default log file or system journal) for error lines.
- Verify binary permissions and executable bit.
- Ensure required dependencies/libraries are installed.
- Run the process manually in a terminal to capture stderr.
2. Cannot connect from clients (SMTP connection refused or timed out)
- Symptom: Telnet/mail client reports connection refused or timeout on port ⁄587.
- Fixes:
- Confirm proxy is listening:
netstat -tlnporss -tlnp. - Check firewall (iptables/nftables/ufw) and cloud security groups; allow the SMTP port.
- Ensure SELinux/AppArmor rules aren’t blocking the binary.
- Verify the service is bound to the expected IP (0.0.0.0 vs localhost).
- Confirm proxy is listening:
3. Authentication failures with upstream SMTP server
- Symptom: Relay attempts fail with 5xx/4xx auth errors.
- Fixes:
- Check stored credentials for typos and correct encoding.
- Confirm auth method supported by upstream (LOGIN/PLAIN/CRAM-MD5).
- Ensure TLS/SSL settings match upstream requirements (STARTTLS vs SMTPS).
- Inspect logs for SASL errors and test credentials directly with
openssl s_clientorswaks.
4. Emails queued and not relayed
- Symptom: Messages remain in local queue.
- Fixes:
- Inspect queue status via the proxy’s queue command or log messages.
- Check DNS/MX resolution for destination domains.
- Verify upstream connectivity and authentication.
- Look for rate limiting or temporary upstream errors (4xx responses); implement retry/backoff.
5. SSL/TLS handshake failures
- Symptom: TLS negotiation errors, certificate verification failures.
- Fixes:
- Confirm certificate files exist and are readable by the service.
- Verify certificate chain is complete and CA is trusted on the system.
- Check cipher suites and protocol versions; enable compatible TLS versions.
- Test with
openssl s_client -starttls smtpto observe handshake details.
6. High latency or dropped connections
- Symptom: Slow mail delivery, intermittent disconnects.
- Fixes:
- Monitor network performance (ping, traceroute) to upstream server.
- Check system resource usage (CPU, memory, file descriptors).
- Increase connection/timeouts and tune keepalive settings.
- Inspect for throttling by upstream provider (per-IP limits).
7. Logging is sparse or unhelpful
- Symptom: Logs lack detail needed for debugging.
- Fixes:
- Increase log verbosity in configuration (debug/trace).
- Enable structured/log rotation settings to preserve context.
- Capture a repro with debug enabled and examine timestamps and SMTP responses.
8. Spam/blacklisting issues after relay
- Symptom: Delivered mail marked spam or IP listed on RBLs.
- Fixes:
- Check PTR, SPF, DKIM, and DMARC records for your sending domain/IP.
- Ensure proper HELO/EHLO name and matching reverse DNS.
- Request delisting from RBLs after resolving root cause.
- Implement rate limits and outbound content checks.
Quick diagnostic checklist
- Check service status and listening ports.
- Review recent logs (errors and auth attempts).
- Validate DNS and upstream connectivity.
- Confirm TLS and credential settings.
- Verify firewall/SELinux permissions and resource usage.
If you want, tell me the exact error lines from your logs and I’ll give targeted fixes.
Leave a Reply