I have a Zimbra server on my LAN. I've set up SMTP auth and only TLS.
I can do this from any machine on my LAN:
telnet server.mydomain.com 25
MAIL FROM: firstname.lastname@example.org
RCPT TO: email@example.com
Zimbra MTA does not ask me for authentication (nor user nor password). I can send emails to any user account from any user account in my local network. Is there any way of avoiding this?
The only 'solution' I've found till now is firewalling port 25 in my local network and opening 587 for submission, but this is not operative: I need port 25 opened to my DMZ network, and I can do the same from there...
Also, I've changed the zimbraMtaMyNetworks variable equal to '127.0.0.0/8', but I still can do the same I've posted on top (telnet, mail from...)
I've reloaded postix (postfix reload) and zimbra (zmcontrol stop / zmcontrol start) but nothing happens.
Any idea? I think I'm getting crazy...