SMTP-AUTH configuration

[sridharsagi]

Hi All,

I recently installed zimbra community edition.

I want to use (SMTP-AUTH feature) instead allowed network.

when i give the comand:

zmprov getServer zimbra.domain.com | grep Auth

it shows all the True, that means enable.

How do i configure my mail server to authenticate using username and passwd instead allowed network before sending mail.

Regards,
Sridhar

[phoenix]

Please update your forum profile with the output of the following command (do not post the output in this thread):

zmcontrol -v

How do i configure my mail server to authenticate using username and passwd instead allowed network before sending mail.

Use Port 587 as the Submission port for the email clients.

[sridharsagi]

Release 6.0.6_GA_2330.F7_20100505191736 F7 FOSS edition.

Is the version of our zimbra

[phoenix]

Release 6.0.6_GA_2330.F7_20100505191736 F7 FOSS edition.

Is the version of our zimbra

As I mentioned above, that's no use in this thread and needs to go in your forum profile.

[sridharsagi]

Hi Bill

I tired, i loged in to my account and tried,
but i dont have a clue where in my profile i have to update this info

can you help me in this regard

Regards,
Sridhar

[ewilen]

User CP > Edit Profile > Additional Information > Zimbra/OS Version

Now, what you're asking...basically I'm unsure whether Zimbra supports SMTP AUTH over port 25.

It's not really worth investigating, though, because Zimbra does things in a much better and more modern fashion.

Email clients should connect to Zimbra on port 587, which is the RFC-standard SUBMISSION port. When configuring this, you may also have to tell the client to use TLS or SSL...although by standard, 587 is assumed to be TLS.

The client should still be configured to authenticate outbound SMTP connections with username/password.

On my Zimbra, port 465 (with SSL and username/password) is also allowed, although this is nonstandard. It used to be the default in ZCS 5; not sure if it was grandfathered in on upgrade, or if it's still a default in ZCS 6.

The reason that Submission (587) and SMTP over SSL (465) are preferred to port 25 is that many ISPs block outbound traffic over port 25 as an anti-spam measure (e.g., against spam servers residing on botnets). Since 587 and 465 require authentication, they're relatively immune to spamming.

[dhuber]

Hi all,

I have the same issue like Sridhar and I'm working already for the fix for hours...

Here the current situation:
- Authentication is enabled in the Administrationconsole
- zmprov returns following output:

$ zmprov getServer zimbra01.mit-konkret.de | grep Auth
zimbraMtaAuthEnabled: TRUE
zimbraMtaAuthHost: zimbra01.mit-konkret.de
zimbraMtaAuthTarget: TRUE
zimbraMtaAuthURL: http://zimbra01.mit-konkret.de:80/service/soap/
zimbraMtaSaslAuthEnable: TRUE
zimbraMtaTlsAuthOnly: TRUE

So far everything looks good! But if I connect with telnet to port 25 I got the same errormessage like connecting to port 587:

$ telnet 10.164.65.17 587
Trying 10.164.65.17...
Connected to 10.164.65.17.
Escape character is '^]'.
ehlo localhost
220 zimbra01.mit-konkret.de ESMTP Postfix
250-zimbra01.mit-konkret.de
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
AUTH LOGIN
503 5.5.1 Error: authentication not enabled


Why is the MTA authentication enabled in the configuration and not applied to the server?

How can I fix this issue?

Thanks
Dieter

[ewilen]

zimbraMtaTlsAuthOnly: TRUE

I doubt you can have this true and then authenticate via telnet.

Perhaps if in the admin console you turn off "TLS authentication only". I would expect that turn that property to FALSE, and then you might be able to authenticate in plaintext via telnet connection to port 25.

[sridharsagi]

Hi

I have disabled the "TLS only" in admin console located as below

Domain > MTA Tab

####################
Authentication
Enable authentication
TLS authentication only
####################

Then by enabling the client to authenticate with username and passwd it worked.

With correct credentials: Worked
With wrong Credentilas: Rejected

Then by reverting the client setting to not to authenticate with username and passwd.

Its working.

On a over all if you enable or Check the authentication required in mail client,
its works only if you give correct credentials, it will not work if username and passwd is wrong (mena it will not send mail if username and passwd is woring)

But more worring is if you dont enable the client to authentication, still its send the mail with out authentication.

I Tired above senarion by allowing the whole network and only the mail server ip in allowed network.

I am struck with only one solution. that i.e

zimbra should not allow if we uncheck the authentication required option

Can any body can help how to achieve this.

[leandropazc]

I have the same problem.