[SOLVED] Help with external clients

[Viking0]

Hello.

I´m using zimbra 5.0.11 and its working fine for my internal clients, but I have several users that works outside the office and need to use outlook on theri laptops.
They can send email within the domain without problems but they get relay error for mails going outside the domain.
I solved this specifying their IP in the mta, but now I'm getting an error that tells me that the field is only 250 character long and I cant put in more IP.

What can I do for solving this problem.

Regards

[uxbod]

Could you not setup a VPN connection and then allow that network block to relay or look at using SMTP AUTH ?

[Viking0]

I'm trying smtp auth. seems to work fine.

Thanks

[phoenix]

Originally Posted by Viking0

I solved this specifying their IP in the mta, but now I'm getting an error that tells me that the field is only 250 character long and I cant put in more IP.

Do not specify the users IP addresses in the mynetwork field unless you trust the external network/IP 100%, you open your server to the possibility of being an open relay. Authenticated connection is what's needed for roaming users, please remove the IPs from the server.

[Viking0]

thanks.

I configurated smtp auth in the outlooks clients and it works just fine.

I'll remove the IP like you suggested.

Regards

[phoenix]

Originally Posted by Viking0

thanks.

I configurated smtp auth in the outlooks clients and it works just fine.

I'll remove the IP like you suggested.

Regards

Just for clarification, you should only have the loopback IP and the the LAN subnet that your server is on for that field. Read the details in this wiki article so you understand what's involved and what that field does.

[Viking0]

Thanks.

I left only the ips for the lan subnets - loopbak and an ip for an external server that realys on my server.

Regards

[phoenix]

Originally Posted by Viking0

I left only the ips for the lan subnets - loopbak and an ip for an external server that realys on my server.

You would be far better getting the remote mail server to authenticate as well and remove their IP from your mynetworks. The same rule applies, they would be able to use you as an open relay if their machine was compromised - if you're happy letting them relay then it's fine the way you have it.

[Viking0]

Thanks again for your recomendation.

I'll comented it with the server administrator and we will change the software scripts.

Regards