open relay??

[rmvg]

Not to alarm anyone but is zimbra functioning as an open relay??

I have checked authentication enabled and TLS authentication only everywhere i can see inside zimbra admin.

However in outlook express i can send mail without setting any username or password for outbound smtp server and also did NOT have to check the this server requires authentication not to mention not enabling the ssl only settings for port 25

am I overlooking something or is zimbra really functioning as an open relay?

[schemers]

Hi. I believe postfix will trust hosts on the same network/subnet as itself. auth is only required if the requesting IP is outside of that network.

See /opt/zimbra/postfix/conf/main.cf, and look for "trust", as it describes the behavior that you are seeing.

roland