does the default installtion of zimbra's postfix open relay ?

[nxzwt]

in default installtion of zimbra,when i use x-scan tool scanning the machine for security problem ,this tool report that the postfix is open-relayed.

then i test it by this manal.
#telnet 192.168.1.8 25
i can not see the auth method of the postfix.

i am not sure why this is happend.

does the default installtion of zimbra's postfix really open-relayed?

[phoenix]

No, it isn't an open relay - that wouldn't be a very good selling point would it? Search google for some of the open releay test sites and try them.

[rsharpe]

Zimbra doesn't required the AUTH mechanism are you on the same local LAN as the Zimbra server.

[nxzwt]

when i tested the server ,i saw something like this:

c:>telnet 192.168.1.10 25

220 centos.test.org ESMTP Postfix
ehlo centos.test.org
250-centos.test.org
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250 8BITMIME
mail from:<test@abc.com>
250 Ok
rcpt to:<nxzwwt1@21cn.com>
250 Ok
data
354 End data with <CR><LF>.<CR><LF>
test
test
test spam.
.
250 Ok: queued as 2E2315644E4

the email address test@abc.com does not exist,i am sure the email address nxzwt1@21cn.com received the test mail.

did this show that my server is openrelayed?

postfix has configed for sasl_auth,why the ehlo command not show that ?why i can not see:

250 auth xxxxxx

[phoenix]

Just to reiterate the two posts earlier. Zimbra isn't an open relay - search google for some of the open relay test sites.

If you are on the same local LAN as the zimbra server it doesn't need authentication. You test shows nothing other than the fact you connected to the serevr and sent an email. That's not an open relay test. If you want to test your server, I'll say it again, search google for some of the open relay test sites.