AWS Lightsail Webserver

Support
1

Using Bookworm and Sympl 12 on AWS Lightsail. I have everything setup fine and dandy except SMTP

Incoming mail is fine. I know they block port 25. Yeah fine whatever. So I decided to open up ports 587 and 465 on the Firewall Settings. Entered the email on thunderbird no problems. Sent an email - Thunderbird days its sent… Look at the logs and I see:

2023-07-25 12:46:13 1qO1Sj-0006ly-EH H=gmail-smtp-in.l.google.com [2a00:1450:400c:c03::1b]: SMTP timeout after initial connection: Connection timed out
2023-07-25 12:48:24 1qO1Sj-0006ly-EH H=alt4.gmail-smtp-in.l.google.com [74.125.200.26]: SMTP timeout after initial connection: Connection timed out
2023-07-25 12:48:24 1qO1Sj-0006ly-EH == xxxxxxxxxxx@gmail.com R=dnslookup_with_dkim T=remote_smtp_with_dkim defer (110): Connection timed out H=alt4.gmail-smtp-in.l.google.com [74.125.200.26]: SMTP timeout after initial connection
2023-07-25 12:50:35 1qO3Cw-0008ZE-L1 H=gmail-smtp-in.l.google.com [2a00:1450:400c:c09::1a]: SMTP timeout after initial connection: Connection timed out
2023-07-25 12:50:35 1qO3Cw-0008ZE-L1 == xxxxxxxxxxx@gmail.com R=dnslookup_with_dkim T=remote_smtp_with_dkim defer (110): Connection timed out H=gmail-smtp-in.l.google.com [2a00:1450:400c:c09::1a]: SMTP timeout after initial connection
2023-07-25 12:50:35 1qO20f-0007Mw-TD Message is frozen

So I guess they are blocking all SMTP ports then? As this should have been sent via port 587??

Or WAS it sent via port 587, then when it gets to the server, it goes via 25? I have no idea…
Is anyone else rinning Sympl on Lightsail? How easy was it to get them to remove the block?

Environment

  • Sympl Version [9.0/10.0]: 12
  • Sympl Testing Version? No
  • Debian Version [Buster/Stretch]: Bookworm
  • Hardware Type? Virtual
  • Hosted On? AWS Lightsail
2

So I guess they are blocking all SMTP ports then?

The logs show the mail being received from a client, and attempting to be sent on via SMTP on IPv4 and IPv6, so It looks like Lightsail is blocking port 25 traffic in and out, so you’ll probably need to contact them to ask them to remove the block.

As this should have been sent via port 587??

Port 587 is only for mail submission (ie: a client sending mail) rather than normal server-to-server mail transfers which exclusively use port 25.