force smtp auth zimbra

[sandeepdas]

Hi All,

Please let me know how to force smtp auth in zimbra so that unauthenticated clients can not use my server for sending mails.

Regards,
Sandeep

[raj]

this is a Default behaviour. no user (outside your local network or whats allowed in ZimbraMtaMyNetworks ) should be able to send email without SMTP AUTH.
if you seeing your users/email clients send email out "without" SMTP AUTH then you need to check your "ZimbraMtaMyNetworks" settings and you may edit it to restrict even the local network (make sure to allow 127.0.0.1 and Zimbra's own local ip)

there is more info here:
ZimbraMtaMyNetworks - Zimbra :: Wiki

Raj

[sandeepdas]

Originally Posted by raj

this is a Default behaviour. no user (outside your local network or whats allowed in ZimbraMtaMyNetworks ) should be able to send email without SMTP AUTH.
if you seeing your users/email clients send email out "without" SMTP AUTH then you need to check your "ZimbraMtaMyNetworks" settings and you may edit it to restrict even the local network (make sure to allow 127.0.0.1 and Zimbra's own local ip)

there is more info here:
ZimbraMtaMyNetworks - Zimbra :: Wiki

Raj

Hi Raj,

Thanks for the reply. I did the same in my server but still am able to send mails without authentication

Here are some of the outputs of my server.
-----------------------------------------------------------------------------------------------------------------------------------
zmprov modifyServer testmail.impxxxx.co.in zimbraMtaMyNetworks '127.0.0.0/8 192.168.103.50/32'

[zimbra@testmail ~]$ postconf mynetworks
mynetworks = 127.0.0.0/8 192.168.103.50/32
[zimbra@testmail ~]$

Here 192.168.103.50 is my zimbra server’s ip
------------------------------------------------------------------------------------------------------------------------------------
[zimbra@testmail ~]$ zmprov getServer testmail. impxxxx.co.in | grep Auth
zimbraMtaAuthEnabled: TRUE
zimbraMtaAuthHost: testmail. impxxxx.co.in
zimbraMtaAuthTarget: TRUE
zimbraMtaAuthURL: http://testmail. impxxxx.co.in:80/service/soap/
zimbraMtaSaslAuthEnable: TRUE
zimbraMtaTlsAuthOnly: TRUE
-------------------------------------------------------------------------------------------------------------------------------------

[zimbra@testmail ~]$ zmprov getServer testmail.impxxxx.co.in | grep Mode
zimbraBackupMode: Standard
zimbraMailMode: mixed
zimbraMailReferMode: wronghost
zimbraReverseProxyImapStartTlsMode: only
zimbraReverseProxyMailMode: http
zimbraReverseProxyPop3StartTlsMode: only

Please let me know if you need more info from my side.

[dalmate]

IN admin console, you must uncheck "enable TLS authenticate only" option.
or zimbraMtaTlsAuthOnly = FALSE

[sandeepdas]

Originally Posted by dalmate

IN admin console, you must uncheck "enable TLS authenticate only" option.
or zimbraMtaTlsAuthOnly = FALSE

Still no luck..

[dalmate]

after change, did you restart postfix?
you must restart it by this command:
su zimbra
and
postfix restart

[sandeepdas]

Originally Posted by dalmate

after change, did you restart postfix?
you must restart it by this command:
su zimbra
and
postfix restart

Yes i did that but still am able to send mails using this server without authentication.

[dalmate]

In global settings: you check:
Client's IP address (reject_unknown_client)
Hostname in greeting (reject_unknown_hostname)
Sender's domain (reject_unknown_sender_domain)
Hostname in greeting violates RFC (reject_invalid_hostname)
Client must greet with a fully qualified hostname (reject_non_fqdn_hostname)
Sender address must be fully qualified (reject_non_fqdn_sender)
hope this help

[rgiapratama]

Hi dalmate

I'm get same problem like sandeepdas i want my user authenticate before sent email. I follow all your instruction but user still can send email without authentication.

Thx.

[dalmate]

please restart postfix after you made any changes
In my system, I've done by doing these thing