POP - Relay Access Denied

[msf004]

I recently installed Zimbra and I have slowly started migrating customers. I am sure this issue is addressed somewhere in the forums, wiki, or documentation; however, after an hour of searching while customers are complaining, I thought I would just post the question in hopes of a quick answer.

Basically, I have something setup wrong - at least I think.

My customers who are using an email client, for POP or IMAP, are unable to send messages. I have even tried to configure email clients, and I cannot get the SMPT connection test to work.

For Outgoing Mail Settings, I insert my mail server into the outgoing mail server box: I.e.: mail.servername.net

I then check the "Use Authentication" box, and I enter my full username: username@domainname.com.

Obviously, in the above examples, "servername" in the outgoing mail server settings, and "domainname" in the username settings can differ as I have multiple domains configured within the GUI Admin Console for Zimbra. I currently have 30+ domains for which we host email.

Any suggestions, or can someone point me to a previous thread? For some reason I am having a heck of a time finding documentation or threads on this.

Basically, my customers currently either cannot configure their email clients, or they are getting a 554 Relay Access Denied error.

Thanks,
-Marc

[mmorse]

ZimbraMtaMyNetworks - ZimbraWiki
That's also easily set in the mta tabs in the admin console...reboot and your set.
Global settins>mta tab (this gets overwritten if you set the server>mta tab different)

And for the next question you'll probably ask...try with and without "clear text login" enabled

[msf004]

Thank you for the reply; however, after reading, I do not think that is exactly what I wanted. Let me try to explain more - please keep in mind that I will admit that I, definitely, may be misunderstanding something too.

I was thinking back to our existing Postfix mail server - prior to migrating to Zimbra. In the old setup I installed popb4smtp and added the needed settings to the main.cf to basically allow anyone who authenticated via POP to send mail via SMTP.

I guess I am looking to achieve the same thing; however, I was *assuming* (I hate using that word) that there was a better was of handling this via Zimbra besides installing popb4smtp. I.e.: my customers need to setup their mail clients to authenticate SMTP.

Basically, I am not looking to create a mynetwork list for all of my customers IP addresses; however, I also do not want to be an open-relay for sending email.

Thanks again,
-Marc

[mmorse]

30+ domains, are we talking a multi-server install?
if so enable imap/pop proxy as well
Configuring IMAP & POP proxy - ZimbraWiki
Configuring Perdition - ZimbraWiki

[msf004]

No, the install is on a single, new, Dual Core proc server. Even though we have 30+ domains, there are only 1-3 email accounts per domain. Lots of small companies for which we have their website and offer email services, now via Zimbra.

So, on a single server install, does the POP and IMAP Proxy still need to be set? Or is that only for a multi-server install?

Thanks,
-Marc


Also, I check the settings per this article: SMTP Auth Problems - ZimbraWiki

The results look accurate to the example:


zimbraMtaAuthEnabled: TRUE
zimbraMtaAuthHost: mail.{mailserver}.net
zimbraMtaAuthURL: https://mail.{mailserver}.net/service/soap/
zimbraMtaTlsAuthOnly: TRUE


However, when I set the outgoing mail server via an email client it doesn't connect:

"Trying to log into the SMTP server “mail.{mailserver}.net” has failed. Please make sure the username and password are correct. If you continue, you may not be able to receive any email.

[mmorse]

Perdition IMAP/Pop Proxy should not be set on a single server install. Hence my wording of "if so"

Originally Posted by mmorse

are we talking a multi-server install?
if so enable imap/pop proxy as well

Originally Posted by phoenix

No, under no circumstances should you enable that feature if you have a single server.

[msf004]

I have continued to read posts, the Wiki, etc. without any success yet.

zmprov gs {server}.{domain}.net | grep Auth

returns:
zimbraMtaAuthEnabled: TRUE
zimbraMtaAuthHost: {server}.{domain}.net
zimbraMtaAuthURL: https://{server}.{domain}.net/service/soap/
zimbraMtaTlsAuthOnly: TRUE

zmprov gs {server}.{domain}.net | grep MailMode

returns:
zimbraMailMode: http

...and the ultimate problem is that when I attempt to utilize a mail client, Thunderbird, Mac Mail, Outlook, etc., I am unable to authenticate the SMTP outgoing mail server.

Any other thoughts, suggestions, or otherwise?

Thanks,
-Marc

[mmorse]

just wanted to check- is "clear text login" enabled for these tests?
try with tls auth false: (zimbraMtaTlsAuthOnly False)

[msf004]

I went in and checked for both IMAP and POP "clear text login" is checked.

[mmorse]

Notice the bolded:

Originally Posted by msf004

zmprov gs bacchus.razorball.net | grep Auth

returns:
zimbraMtaAuthEnabled: TRUE
zimbraMtaAuthHost: {server}.{domain}.net
zimbraMtaAuthURL: https://{server}.{domain}.net/service/soap/
zimbraMtaTlsAuthOnly: TRUE

zmprov gs bacchus.razorball.net | grep MailMode

returns:
zimbraMailMode: http

From: SMTP Auth Problems - ZimbraWiki
Make sure the url in the zimbraMtaAuthURL will work with the zimbraMailMode. For example, if the MailMode is "https" or "mixed", the AuthURL must begin with "https://" (so that auth will be attempted over ssl), but if the MailMode is "http" (tomcat is only listening on http), the AuthURL must begin with "http://"

If the URL is wrong, re-set the hostname like this in order to regenerate the AuthURL:
zmprov ms zimbra.domain.com zimbraMtaAuthHost zimbra.domain.com

also try with tls off (zimbraMtaTlsAuthOnly) -sry i tried to sneek that in instead of making another post bug I guess you didn't see it