[SOLVED] Relay access denied

[Sharpey]

Hi All,

Had someone complain they cannot send email from their iPhone. Each time I test it out - it works. I checked the mail server logs and here are the logs for a failed and a succesful mail send from the iPhone.

FAIL
	Feb 22 16:08:37 svr01 postfix/smtpd[12894]: connect from unknown[82.132.139.18]
	Feb 22 16:08:37 svr01 postfix/smtpd[12894]: setting up TLS connection from unknown[82.132.139.18]
	Feb 22 16:08:38 svr01 postfix/smtpd[12894]: Anonymous TLS connection established from unknown[82.132.139.18]: TLSv1 with cipher AES128-SHA (128/128 bits)
	Feb 22 16:08:38 svr01 postfix/smtpd[12894]: NOQUEUE: reject: RCPT from unknown[82.132.139.18]: 554 5.7.1 <anotheruser@anothercompany.com>: Relay access denied; from=<user@companyname.com> to=<anotheruser@anothercompany.com> proto=ESMTP helo=<[10.25.154.5]>
	Feb 22 16:08:39 svr01 postfix/smtpd[12894]: disconnect from unknown[82.132.139.18]


SUCCESS
	Feb 22 16:27:28 svr01 postfix/smtpd[3316]: connect from unknown[82.132.248.36]
	Feb 22 16:27:29 svr01 postfix/smtpd[3316]: setting up TLS connection from unknown[82.132.248.36]
	Feb 22 16:27:30 svr01 postfix/smtpd[3316]: Anonymous TLS connection established from unknown[82.132.248.36]: TLSv1 with cipher AES128-SHA (128/128 bits)
	Feb 22 16:27:30 svr01 postfix/smtpd[3316]: B40938F4100: client=unknown[82.132.248.36]
	Feb 22 16:27:34 svr01 amavis[26797]: (26797-02) Checking: JLZuke8139HO [82.132.248.36] <user@companyname.com> -> <yetanotheruser@companyname.com>
	Feb 22 16:27:38 svr01 amavis[26797]: (26797-02) Passed CLEAN, [82.132.248.36] [82.132.248.36] <user@companyname.com> -> <yetanotheruser@companyname.com>, Message-ID: <65656EEE-49D1-4947-8709-9333CAAF19F4@companyname.com>, mail_id: JLZuke8139HO, Hits: 2.23, size: 3652, queued_as: B64048F4139, 4825 ms
	Feb 22 16:28:35 svr01 postfix/smtpd[3316]: disconnect from unknown[82.132.248.36]

I just realised this is a rubbish test - as the SUCCESS is to a local user, where as the FAIL is to a remote user. Will re-test and update,

[Sharpey]

So. It failed when we tested it to an external email. I understand that having relay access denied is sensible, but shouldn't the clients be authenticating alongside SMTP - to allow relaying for authorized users?

[uxbod]

What port are they trying to send through ? Are they using 25 or 587 ?

[Sharpey]

Hi uxbod, its using port 25.

I have another iPhone which is working with a seemingly identical configuration!

[Sharpey]

After reading the logs it seems one of the phones manages SASL, and one does not.

[Sharpey]

Updated the iOS version and it works now.. peculiar. might have been fixed by re-creating the profile too. Or me going over the config better


Ta