How to stop unauthenticated user to send mail to my mailserver

[sadiq007]

Hi friends,
port 25 and port 587 both are open at my mail-server... using port 587 user must need user-nameassword for sending mail..... but using port 25 no user-nameassword need to send mail to my mail-server users.... any non-exist user can also send mail to my users by using port 25 without authenticate. also my mail-server is not an open-relay.
So how can i stop sending mail from my mail-server( from email client like outlook etc) to my local users or any external emails for unauthenticated users. Simply i want that only authenticated users can send mail to my users.

[uxbod]

Uh; so you want nobody, unless they have a account with you, to be able to send your users email ? Port 25 is designed to receive email without authentication. If you do not want that then block port 25

[sadiq007]

hi UX,
i want nobody from my domain ,unless they have account with me. i also try to close port 25 , but in that case i am not able to receiving mail from external domains like yahoo, gmail,hotmail etc.I mean any extrenal domain users and my domain users can only mail to my users. i just want to stop non-exist user from my domain(non-existuser@mydomain.com) to send mail to my exist users. and also want to set that only authenticated local users can send mail to my domains users.

[uxbod]

Search the forums for SPF records and spoofprotection.

[sadiq007]

DEar UX,
i already setup SPF... then how can non-exist local user can able to send mail to my local user?

TXT myomain.com 8 hrs v=spf1 ip4:203.137.5.3 a:mail.mydomain.com mx:mail.mydomain.com ~all

any detail explanation to solve this problem?

does this solve my problem? smtpd_client_restrictions = permit_sasl_authenticated, reject

[phoenix]

Originally Posted by sadiq007

DEar UX,
i already setup SPF... then how can non-exist local user can able to send mail to my local user?

TXT myomain.com 8 hrs v=spf1 ip4:203.137.5.3 a:mail.mydomain.com mx:mail.mydomain.com ~all

any detail explanation to solve this problem?

does this solve my problem? smtpd_client_restrictions = permit_sasl_authenticated, reject

The only relevance SPF records have is for mail sent from your server, read this item in the wiki: Improving Anti-spam system - Zimbra :: Wiki

[uxbod]

And look up the other item spoofprotection. We really need to see the headers from one of the emails that is getting through to help.