How to authenticate when sending to local user

[tonnuchimse]

Hello,
I've successfully configured Outgoing SMTP Authentication. So If I want to send to outside domain, I must authenticated before sending.
But If I send to other guy in local domain (from a@mydomain.com to b@mydomain.com), I can do it without authentication.
So is there any way to change this?
Thank you very much

[tonnuchimse]

Hello,
I've configured SMTP Auth following RestrictPostfixRecipients - Zimbra :: Wiki
In smtpd_sender_restrictions, I have two parameters:

reject_authenticated_sender_login_mismatch
reject_unauthenticated_sender_login_mismatch.

With this configuration, user using POP server can not send email (to local or outside) without authentication.
But if user using Zimbra client or using webmail, they can not send email and they receive notification

Delivery Failure Notification: Invalid address: John Smith <a@domain.com>. com.zimbra.cs.mailbox.MailSender$SafeSendFailedExc eption: MESSAGE_NOT_DELIVERED; chained exception is: com.zimbra.cs.mailclient.smtp.InvalidRecipientExce ption: RCPT failed: Invalid recipient a@domain.com: 553 5.7.1 <a@domain.com>: Sender address rejected: not logged in

So I think the problem is that Zimbra client or webmail can not send authentication parameter to MTA.
So I want to know how Zimbra client or webmail actually work? Is there anyway to extend authentication from Zimbra client or webmail to MTA to be able to send email
Thank you very much

[tuanta]

Originally Posted by tonnuchimse

I've configured SMTP Auth following RestrictPostfixRecipients - Zimbra :: Wiki

This should not be the right way to solve your problem.

To get your goals, you should separate the "way" Zimbra server send/receive mails (using SMTP port 25) and the one end-user push mails to Zimbra (using Submission port 587).
To prevent users from using SMTP port 25, you can configure your firewall to filter this port from LAN-side access.

[tonnuchimse]

Hi all,
There is some mistake of my previous post. I follow the guide RestrictPostfixSenders - Zimbra :: Wiki
and it works. I can force user to authentication when sending both local and outside network.
So this problem is resolved. Please help me to close this case
Thank you very much

[phoenix]

Originally Posted by tonnuchimse

Hi all,
There is some mistake of my previous post. I follow the guide RestrictPostfixSenders - Zimbra :: Wiki
and it works. I can force user to authentication when sending both local and outside network.
So this problem is resolved. Please help me to close this case
Thank you very much

The correct solution to your problem is mentioned in post # 3 above, your users should be using the correct Submission port 587 (which requires authentication) not port 25 - that port is for MTAs to communicate not submit mail for delivery.