SMTP relaying exemption

Hi,

How can I allow a certain address to use SMTP relaying.
example I use:
Email Server Test - Online SMTP diagnostics tool - MxToolbox

I am getting this result:

MAIL FROM: <supertool@mxtoolbox.com>
250 2.1.0 Ok [31 ms]
RCPT TO: <test@example.com>
554 5.7.1 <test@example.com>: Relay access denied [31 ms]

In /var/log/zimbra.log

Dec 6 22:24:34 zimbra postfix/smtpd[27983]: NOQUEUE: reject: RCPT from mxtb-pws3.mxtoolbox.com[64.20.227.133]: 554 5.7.1 <test@example.com>: Relay access denied; from=<supertool@mxtoolbox.com> to=<test@example.com> proto=ESMTP helo=<please-read-policy.mxtoolbox.com>

How can I add this address 64.20.227.133 to allow relaying.
I have tried this,

zmprov modifyServer zimbra.example.com zimbraMtaMyNetworks '127.0.0.0/8 64.20.227.133/32'
postfix reload

(I have removed the IP of zimbra at the example above)
but it is not working.

Quote:

---

Originally Posted by juanpablo

How can I allow a certain address to use SMTP relaying.

---

If you mean through your server then you should not use port 25, the corect submission port which is 587 and that will require authentication by the client, you certainly do want to allow anyone to relay through your server without authentication - think of 'spammer'.

Quote:

---

Originally Posted by juanpablo

Hi,

How can I allow a certain address to use SMTP relaying.
example I use:
Email Server Test - Online SMTP diagnostics tool - MxToolbox

I am getting this result:

MAIL FROM: <supertool@mxtoolbox.com>
250 2.1.0 Ok [31 ms]
RCPT TO: <test@example.com>
554 5.7.1 <test@example.com>: Relay access denied [31 ms]

In /var/log/zimbra.log

Dec 6 22:24:34 zimbra postfix/smtpd[27983]: NOQUEUE: reject: RCPT from mxtb-pws3.mxtoolbox.com[64.20.227.133]: 554 5.7.1 <test@example.com>: Relay access denied; from=<supertool@mxtoolbox.com> to=<test@example.com> proto=ESMTP helo=<please-read-policy.mxtoolbox.com>

How can I add this address 64.20.227.133 to allow relaying.
I have tried this,

zmprov modifyServer zimbra.example.com zimbraMtaMyNetworks '127.0.0.0/8 64.20.227.133/32'
postfix reload

(I have removed the IP of zimbra at the example above)
but it is now working.

---

It is sensitive in linux with "Server" and "server". Make sure you have executed suitable command.
It`ll be easier to achieve it in web console. Add the ip you want to apply relay service.

But it is now working or it is not working ?

Quote:

---

Originally Posted by xuyanru

It is sensitive in linux with "Server" and "server". Make sure you have executed suitable command.
It`ll be easier to achieve it in web console. Add the ip you want to apply relay service.

But it is now working or it is not working ?

---

oh sorry, it should be "not" not "now". I have edited my original post.

About the capital "S", I just copy paste the command from zimbra wiki, it should be capital "S". Anyway you are right, it is better and safer to use the web console.

Quote:

---

Originally Posted by phoenix

If you mean through your server then you should not use port 25, the corect submission port which is 587 and that will require authentication by the client, you certainly do want to allow anyone to relay through your server without authentication - think of 'spammer'.

---

OK I will try port 587 and with authentication.
What strange is, I tried another web SMTP mail server test:
https://www.wormly.com/test_smtp_server

You need to input only:
SMTP server
Sender email
Recipient email

and it is successful. It successfully sends the mail to the recipient email with no authentication. I have not also added their IP in my MTA trusted networks. Now my concern is, if my zimbra mail server is open to relay, then this is a big problem.

telnet YourMailHost 25
ehlo mail.xx.com
...
mail from:abc@cde.com
250 2.1.0 Ok
rcpt to:123@321.com
here is the key words of the output

If your mail system reply with "250 2.1.0 Ok" after your command of rcpt to, it means your system is a open relay system. Otherwise it is normal.