Howto enable relay for network printer?

[kri164]

I have local network printer with static IP, what sends scanned images over email.
How to allow relay for this one IP adress?

I did try Settings -> SMTP -> Inbound -> RCPT stage with condition

remote_ip("192.168.0.10") true

(see attached picture), but this make open relay for all devices in local network.

Thank for help

[mdecimus]

remote_ip is a variable, not a function. It should be:

remote_ip == "192.168.0.10"

[mdecimus]

Regarding the invalid EHLO name, if your printer is sending an invalid ehlo name you also need to add an exception for the IP address so it is allowed. Check the EHLO stage docs for details.

Regarding the DKIM and SPF failures. Unless you have a strict policy the email is going to be accepted even if these fail.
You can also use an expression to disable these checks for your printer IP.

[sukafun]

Thank you. I'm still struggling with the SPF/DKIM. I couldn't figure out how to disable the checks for the IP. The sending IP is 192.168.3.104. Can you please tell me what am I missing?
I added it here

Also added it here

The email gets sent out by the mailserver however I can see in the header DKIM and SPF fail

I also get the DMARC authentication failure report
This is an authentication failure report for an email message received from IP address 192.168.3.104 on Sun, 18 Aug 2024 07:24:58 +0000.

[sukafun]

@mdecimus are you able to assist?

[mdecimus]

are you able to assist?

Yes but I am not able to answer immediately since I am busy with development.

Can you please tell me what am I missing?

The local_port == 25 is being evaluated first, you need to move the remote_ip == "192.168.3.104" condition up.

[sukafun]

Thanks @mdecimus. That worked for me.

[sukafun]

hey @kri164 did you get it to work?

[kri164]

Yes, it is working very well. But I have a classic linux system install, not in container.
I guess docker uses NATed networks, so incoming connection is from ip address different than real printer address.

[sukafun]

@kri164 I'm using macvlan network so directly on the network.
Can you show me a screenshot from the gui and the config plz?

[kri164]

Use the Double quotes, Luke!

[sukafun]

I tried the double quotes as well