Results 1 to 6 of 6

Thread: Relay Access Denied

  1. #1
    Paul Csiki is offline Active Member
    Join Date
    Apr 2012
    Posts
    43
    Rep Power
    3

    Default [Solved]Relay Access Denied

    Hello,

    I've been experiencing "Relay Access Denied" these days. So I've looked up over the wiki and it seems that it's because of the MtaMyNetworks, I've read ZimbraMtaMyNetworks - Zimbra :: Wiki and it seems so I've added the target network to the mynetworks variable, restarted the services and the error keeps showing up:

    My current MtaMyNetworks:
    [zimbra@email root]$ zmprov getServer email.xxxx.it | grep zimbraMtaMyNetworks
    zimbraMtaMyNetworks: 127.0.0.0/8 94.xxx.xxx.192/29 192.168.180.0/24 88.xxx.xxx.128/28
    Error log after change and restart of services:

    May 29 11:22:56 email postfix/smtpd[12073]: connect from host130-111-static.xxxx.business.xxx.xxx[88.xxx.xxx.130]
    May 29 11:22:56 email postfix/smtpd[12073]: NOQUEUE: reject: RCPT from host130-111-static.xxxx.business.xxx.xxx[88.xxx.xxx.130]: 554 5.7.1 <sxxxxxxo@sxxxxxr.info>: Relay access denied; from=<pxxxo@xxxx.it> to= <sxxxxxxo@sxxxxxr.info> proto=ESMTP helo=<pxxxo>
    May 29 11:22:59 email postfix/smtpd[12073]: disconnect from host130-111-static.xxxx.business.xxx.xxx[88.xxx.xxx.130]
    88.xxx.xxx.128/28 includes 88.xxx.xxx.130 right?

    Am I doing something wrong here?

    Yes I restarted all the services after I changed the MtaMyNetworks.

    Thank You,
    Paul.
    Last edited by Paul Csiki; 05-29-2012 at 07:03 AM.

  2. #2
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,582
    Rep Power
    57

    Default

    Quote Originally Posted by Paul Csiki View Post
    88.xxx.xxx.128/28 includes 88.xxx.xxx.130 right?

    Am I doing something wrong here?
    Yes, you're doing something that isn't necessary and you open up a potential security hole - your problem lies elsewhere and I'd suggest you remove those addition entries and leave the LAN IP (or subnet) of your server and the loopback entry only (as described in the wiki article).

    You said:

    Quote Originally Posted by Paul Csiki View Post
    I've been experiencing "Relay Access Denied" these days.
    What does 'these days' mean? Has it just started? Is it for something specific? You've given no details of when this is happening, you need to give exact step to reproduce this problem, which client you're using and whether it's from a LAN user or an external user. When you try sending an email that causes the problem you need to tail the log and post those entries here.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  3. #3
    Paul Csiki is offline Active Member
    Join Date
    Apr 2012
    Posts
    43
    Rep Power
    3

    Default

    Hello,

    Thank you for answering. I have removed the extra 88.xxx.xxx.129/28 ip address from MtaMyNetworks and I left only the

    127.0.0.0/8 94.xxx.xxx.192/29 192.168.180.0/2
    94.xxx.xxx.192/29 is my public ip range, it was there when I installed zimbra, are you sure it's ok to remove it?

    These days means that only today I started seeing them and it's only happening from one particular use only. The user is using Microsoft Office Outlook 2003 (The only MS Outlook 2003 user we have on network), and the error is showing up for 3-4 emails he sent, on different servers.

    Can it be because of Outlook?

  4. #4
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,582
    Rep Power
    57

    Default

    Quote Originally Posted by Paul Csiki View Post
    ...... 94.xxx.xxx.192/29 is my public ip range, it was there when I installed zimbra, are you sure it's ok to remove it?
    Yes.

    Quote Originally Posted by Paul Csiki View Post
    These days means that only today I started seeing them and it's only happening from one particular use only. The user is using Microsoft Office Outlook 2003 (The only MS Outlook 2003 user we have on network), and the error is showing up for 3-4 emails he sent, on different servers.

    Can it be because of Outlook?
    That's not really exact steps to reproduce the problem nor any log output but I'll take a guess that the user is using port 25 as the submission port, they should use Port 587 as the Submission port and that will require authentication.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  5. #5
    Paul Csiki is offline Active Member
    Join Date
    Apr 2012
    Posts
    43
    Rep Power
    3

    Default

    Thank you. It worked. I changed the port to 465 with ssl an everything works now.

    Thanks again.

  6. #6
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,582
    Rep Power
    57

    Default

    Quote Originally Posted by Paul Csiki View Post
    Thank you. It worked. I changed the port to 465 with ssl an everything works now.
    I'm glad you have it working but as I mentioned above, Port 587 is the correct Submission port not 465.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [SOLVED] Relay access denied
    By get2guy in forum Administrators
    Replies: 8
    Last Post: 10-29-2010, 09:40 AM
  2. Relay Access Denied, Help!
    By jpcaldwell in forum Administrators
    Replies: 5
    Last Post: 08-15-2008, 09:11 AM
  3. Relay Access Denied
    By AutootuA in forum Administrators
    Replies: 34
    Last Post: 02-07-2008, 09:26 AM
  4. Backup issues
    By telescop in forum Administrators
    Replies: 3
    Last Post: 03-01-2007, 06:09 PM
  5. Move server to different OS
    By EriSan500 in forum Administrators
    Replies: 7
    Last Post: 03-05-2006, 01:00 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •