well I upgrade my Zimbra server to 7.2.1 and it stopped relaying the mail from another server to the world (it still relays the mail to its own domain users)
This is how I did it last year:
Its from this page: Outgoing SMTP Authentication - Zimbra :: Wiki
Setting a relay host
see also Sending mail through an external relay
Set the relay host in the admin console, MTA tab to point to your ISPs outgoing mail server. Your ISP can tell you the proper value for this.
You may have to set the port, as well. From the command line:
zmprov ms server.domain.com zimbraMtaRelayHost mailrelay.example.com
Enabling SMTP authentication
Create a text file mapping which name/password should be used for each given outbound destination:
echo mailrelay.example.com username:password > /opt/zimbra/conf/relay_password
Create a postfix lookup table:
To test that the lookup table is correct, the following should return username:password:
postmap -q mailrelay.example.com /opt/zimbra/conf/relay_password
Configure postfix to use the new password map:
postconf -e smtp_sasl_password_maps=hash:/opt/zimbra/conf/relay_password
Configure postfix to use SSL authentication:
postconf -e smtp_sasl_auth_enable=yes
Configure postfix to use the outgoing servername rather than the canonical server name:
postconf -e smtp_cname_overrides_servername=no
smtp_cname_overrides_servername=no is used because many smtp servers forward the connection different server than the one set in the smtp_sasl_password_maps file.
Example of the problem :
but postfix connects to gmail-smtp.l.google.com
Postfix will not send the authentication info contained in smtp_sasl_password_maps file because it as no entry for the server gmail-smtp.l.google.com but has one for smtp.gmail.com
If you apply smtp_tls_per_site settings then smtp_cname_overrides_servername may become obsolete.
As Zimbra user:
postconf -e smtp_use_tls=yes
Worked perfectly until last night (my upgrade to 7.2.1).
Now every mail sent outside the smtp's domain I get this message: host mail.domainname.com[ipaddress] said: 554
5.7.1 <email@example.com>: Relay access denied (in reply to RCPT TO
I googled this forum but I couldnt find anything.
Anyone knows what I should do ?
Can I downgrade to the previous version if there is no way to do it with 7.2.1 ?