ZIMBRA SMTP AUTH problem

than why my email flow is working ?


----------------------------------------------------------------
gateway:~# telnet postfix.domain.net 25
Trying 80.88.242.4...
Connected to postfix.domain.net.
Escape character is '^]'.
220 postfix.domain.net ESMTP Postfix (Debian/GNU)
helo remote.outside.com
250 postfix.domain.net
mail from:<bilal.shah@domain.net>
250 2.1.0 Ok
rcpt to:<bilal.shah@domain.net>
554 5.7.1 <remote.outside.com[w.x.y.z]>: Client host rejected: Access denied
-----------------------------------------------------------------
if I will pass my user name and password here it will accept otherwise not so this is true SMTPAUTH

and what zimbra is doing :D
----------------------------------------------------------
gateway:~# telnet zimbra.domain.net 25
Trying 80.88.242.36...
Connected to zimbra.domain.net.
Escape character is '^]'.
220 zimbra.domain.net ESMTP Postfix
helo remote.outside.com
250 zimbra.domain.net
mail from:<bilal.shah@domain.net>
250 2.1.0 Ok
rcpt to:<bilal.shah@domain.net>
250 2.1.5 Ok
---------------------------------------------------------------
here zimbra should reject this mail which is with out SMTP Auth :D
-------------------------------------------------------------

so this is my question , why zimbra is accepting this smtp request with out smtp auth , is it the way smtp auth works ?

BILAL

Okay, so what have you got set for

Code:

---

su - zimbra
zmprov gs `zmhostname` zimbraMtaMyNetworks

---

Quote:

---

Originally Posted by uxbod

Okay, so what have you got set for

Code:

---

su - zimbra
zmprov gacf zimbraMtaMyNetworks

---

---

[root@zimbra ~]# su - zimbra
[zimbra@zimbra ~]$ zmprov gacf zimbraMtaMyNetworks
[zimbra@zimbra ~]$

no output

:D

Sorry typo :o Please see revised command above.

Quote:

---

Originally Posted by uxbod

Sorry typo :o Please see revised command above.

---

output is


name zimbra.domain.com
zimbraMtaMyNetworks: 127.0.0.0/8 10.127.255.0/24 w.x.y.0/26

FYI

I am using Ethernet bonding in which eth0 and eth1 are bonded to bond0 which have an address 10.127.255.x and on bond0 i have created vlan which is tagged with VID and on that interface I have setup an ip address w.x.y.z from /26 range


:D

Have you included your external IP within MyNetworks then ? If so you have just made your server a open relay :eek:

no its not open relay

i have tested from many internet sites and its just my network

e.g

zimbra ip = 19.20.21.22

mynetworks = 127.0.0.0/8 10.127.255.0/8 19.20.21.0/26

its like that if you think its a open relay :D than how to prevent it from openrelay


:D BILAL

Phew :) Have you setup a catchall account on the domain by any chance ?

Quote:

---

Originally Posted by uxbod

Phew :) Have you setup a catchall account on the domain by any chance ?

---

\

yes i have setup by using this

zmprov mc COS-name zimbraInterceptAddress archive@domain.com

I followed up chapter # 7 network admin guide , is what you are asking about ?

Dear All,

Ehlo output of my old mail server which support smtp auth feature

------------------------
250-old-postfix.domain.com
250-PIPELINING
250-SIZE 171966464
250-ETRN
250-STARTTLS
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
----------------------------------------

ehlo output of zimbra is

-------------------------------

250-zimbra.domain.com
250-PIPELINING
250-SIZE 92160000
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN


------------------------------------------

I want to enable 250-AUTH LOGIN PLAIN & 250-AUTH=LOGIN PLAIN in my zimbra , could please tell me what is recommended way to do it


Looking for your suggestions and solutions

thanks for reading this post

cheers:)
Bilal