Hello,

My system versions are Zimbra 8.0.1 on CentOs 6.3

I am trying to configure my zimbra postfix to make outbound relay to a an external service provider with authentication, zimbra is recieving mail´s from outside but is unable to send.

I have followed the wiki´s for these configuration but i'm unable to resolv this question.

From my ISP provider they tell me that the zimbra try to relay without autentication.

here are the part of the log file where it shows the error:

Code:
  postfix/smtp[20022]: smtp_stream_setup: maxtime=300 enable_deadline=0
  postfix/smtp[20022]: vstream_buf_get_ready: fd 17 got 45
  postfix/smtp[20022]: < outbound[**.**.**.**]:25: 220 ***************************************
  postfix/smtp[20022]: name_mask: disable_esmtp
  postfix/smtp[20022]: name_mask: delay_dotcrlf
  postfix/smtp[20022]: A8DE327C2456: enabling PIX workarounds: disable_esmtp delay_dotcrlf for outbound[**.**.**.**]:25
  postfix/smtp[20022]: > outbound[**.**.**.**]:25: HELO correio.cmarl.pt
  postfix/smtp[20022]: vstream_fflush_some: fd 17 flush 23
  postfix/smtp[20022]: vstream_buf_get_ready: fd 17 got 31
  postfix/smtp[20022]: < outbound[**.**.**.**]:25: 250 outbound-relay.ptprime.pt
  postfix/smtp[20022]: server features: 0x31000 size 0
  postfix/smtp[20022]: smtp_stream_setup: maxtime=300 enable_deadline=0
  postfix/smtp[20022]: > outbound[**.**.**.**]:25: MAIL FROM:<mymail@mydomain.pt>
  postfix/smtp[20022]: smtp_stream_setup: maxtime=300 enable_deadline=0
  postfix/smtp[20022]: vstream_fflush_some: fd 17 flush 37
  postfix/smtp[20022]: vstream_buf_get_ready: fd 17 got 14
  postfix/smtp[20022]: < outbound[**.**.**.**]:25: 250 2.1.0 Ok
  postfix/smtp[20022]: > outbound[**.**.**.**]:25: RCPT TO:<anymail@gmail.com>
  postfix/smtp[20022]: smtp_stream_setup: maxtime=300 enable_deadline=0
  postfix/smtp[20022]: vstream_fflush_some: fd 17 flush 31
  postfix/smtp[20022]: vstream_buf_get_ready: fd 17 got 54
  postfix/smtp[20022]: < outbound[**.**.**.**]:25: 554 5.7.1 <anymail@gmail.com>: Relay access denied
  postfix/smtp[20022]: connect to subsystem private/bounce
  postfix/smtp[20022]: send attr nrequest = 0
  postfix/smtp[20022]: send attr flags = 0
  postfix/smtp[20022]: send attr queue_id = A8DE327C2456
  postfix/smtp[20022]: send attr original_recipient = anymail@gmail.com
  postfix/smtp[20022]: send attr recipient = anymail@gmail.com
  postfix/smtp[20022]: send attr offset = 610
  postfix/smtp[20022]: send attr dsn_orig_rcpt = rfc822;anymail@gmail.com
  postfix/smtp[20022]: send attr notify_flags = 0
  postfix/smtp[20022]: send attr status = 5.7.1
  postfix/smtp[20022]: send attr diag_type = smtp
  postfix/smtp[20022]: send attr diag_text = 554 5.7.1 <anymail@gmail.com>: Relay access denied
  postfix/smtp[20022]: send attr mta_type = dns
  postfix/smtp[20022]: send attr mta_mname = outbound
  postfix/smtp[20022]: send attr action = failed
  postfix/smtp[20022]: send attr reason = host outbound[**.**.**.**] said: 554 5.7.1 <anymail@gmail.com>: Relay access denied (in reply to RCPT TO command)
  postfix/smtp[20022]: vstream_fflush_some: fd 18 flush 480
  postfix/smtp[20022]: vstream_buf_get_ready: fd 18 got 10
  postfix/smtp[20022]: private/bounce socket: wanted attribute: status
  postfix/smtp[20022]: input attribute name: status
  postfix/smtp[20022]: input attribute value: 0
  postfix/smtp[20022]: private/bounce socket: wanted attribute: (list terminator)
  postfix/smtp[20022]: input attribute name: (end)
  postfix/smtp[20022]: A8DE327C2456: to=<anymail@gmail.com>, relay=outbound[**.**.**.**]:25, delay=5.3, delays=0.02/0.02/0.05/5.2, dsn=5.7.1, status=bounced (host outbound[**.**.**.**] said: 554 5.7.1 <anymail@gmail.com>: Relay access denied (in reply to RCPT TO command))
  postfix/smtp[20022]: rec_put_type: 68 at 610
  postfix/smtp[20022]: vstream_fflush_some: fd 16 flush 1
  postfix/smtp[20022]: > outbound[**.**.**.**]:25: RSET
  postfix/smtp[20022]: smtp_stream_setup: maxtime=20 enable_deadline=0
  postfix/smtp[20022]: vstream_fflush_some: fd 17 flush 6
  postfix/smtp[20022]: vstream_buf_get_ready: fd 17 got 14
  postfix/smtp[20022]: < outbound[**.**.**.**]:25: 250 2.0.0 Ok
  postfix/smtp[20022]: > outbound[**.**.**.**]:25: QUIT
  postfix/smtp[20022]: name_mask: resource
  postfix/smtp[20022]: name_mask: software
  postfix/smtp[20022]: vstream_fflush_some: fd 17 flush 6
  postfix/smtp[20022]: vstream_fflush_some: fd 17 flush 0
  postfix/cleanup[20017]: F2E5B27C2454: message-id=<20130530121334.F2E5B27C2454@myserver.cmarl.pt>
  postfix/bounce[20032]: A8DE327C2456: sender non-delivery notification: F2E5B27C2454
  postfix/qmgr[20006]: F2E5B27C2454: from=<>, size=3280, nrcpt=1 (queue active)
  postfix/qmgr[20006]: A8DE327C2456: removed
  postfix/lmtp[20033]: F2E5B27C2454: to=<mymail@mydomain.pt>, relay=myserver.cmarl.pt[**.**.***.***]:7025, delay=0.11, delays=0.02/0.01/0/0.08, dsn=2.1.5, status=sent (250 2.1.5 Delivery OK)



my postfix main.cf

Code:
mail_owner = postfix
bounce_notice_recipient = postmaster
content_filter = smtp-amavis:[127.0.0.1]:10024
smtp_sasl_security_options = noanonymous
relayhost = outbound-relay-in.ptprime.pt
virtual_alias_expansion_limit = 10000
smtpd_sasl_authenticated_header = no
broken_sasl_auth_clients = yes
minimal_backoff_time = 300s
sender_canonical_maps = proxy:ldap:/opt/zimbra/conf/ldap-scm.cf
always_add_missing_headers = yes
smtpd_tls_key_file = /opt/zimbra/conf/smtpd.key
smtpd_helo_required = yes
virtual_transport = error
sendmail_path = /opt/zimbra/postfix/sbin/sendmail
smtpd_recipient_restrictions = reject_non_fqdn_recipient, permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, reject_unlisted_recipient, reject_non_fqdn_sender, permit
smtpd_reject_unlisted_recipient = no
bounce_queue_lifetime = 5d
smtp_sasl_mechanism_filter =
local_header_rewrite_clients = permit_mynetworks,permit_sasl_authenticated
smtpd_data_restrictions = reject_unauth_pipelining
smtpd_tls_security_level = may
smtpd_milters = inet:localhost:8465, inet:127.0.0.1:8092
smtpd_sender_restrictions = check_sender_access regexp:/opt/zimbra/postfix/conf/tag_as_originating.re, permit_mynetworks, permit_sasl_authenticated, permit_tls_clientcerts, check_sender_access regexp:/opt/zimbra/postfix/conf/tag_as_foreign.re
lmtp_host_lookup = dns
delay_warning_time = 0h
header_checks =
queue_run_delay = 300s
virtual_mailbox_maps = proxy:ldap:/opt/zimbra/conf/ldap-vmm.cf
notify_classes = resource,software
command_directory = /opt/zimbra/postfix/sbin
smtpd_client_restrictions = reject_unauth_pipelining
smtpd_tls_auth_only = no
virtual_alias_maps = proxy:ldap:/opt/zimbra/conf/ldap-vam.cf
mailq_path = /opt/zimbra/postfix/sbin/mailq
mynetworks = 127.0.0.0/8 10.27.0.0/16 10.80.0.0/24 [::1]/128
lmtp_connection_cache_time_limit = 4s
transport_maps = proxy:ldap:/opt/zimbra/conf/ldap-transport.cf
virtual_alias_domains = proxy:ldap:/opt/zimbra/conf/ldap-vad.cf
smtpd_sasl_auth_enable = yes
smtpd_tls_loglevel = 1
maximal_backoff_time = 4000s
virtual_mailbox_domains = proxy:ldap:/opt/zimbra/conf/ldap-vmd.cf
inet_protocols = ipv4
non_smtpd_milters =
daemon_directory = /opt/zimbra/postfix/libexec
smtp_tls_security_level = may
setgid_group = postdrop
alias_maps = hash:/etc/aliases
smtp_cname_overrides_servername = no
mydestination = localhost
smtpd_end_of_data_restrictions =
myhostname = correio.cmarl.pt
message_size_limit = 104857600
recipient_delimiter =
in_flow_delay = 1s
smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
queue_directory = /opt/zimbra/data/postfix/spool
propagate_unmatched_extensions = canonical
manpage_directory = /opt/zimbra/postfix/man
smtpd_tls_cert_file = /opt/zimbra/conf/smtpd.crt
smtp_sasl_password_maps = hash:/opt/zimbra/conf/relay_password
lmtp_connection_cache_destinations =
newaliases_path = /opt/zimbra/postfix/sbin/newaliases
smtp_sasl_auth_enable = yes
mailbox_size_limit = 0
disable_dns_lookups = no
debug_peer_level = 3
#smtp_use_tls = yes
smtp_use_tls = no
debug_peer_list = outbound-relay-in.ptprime.pt
smtpd_sasl_security_options = noanonymous
smtpd_banner = $smtp_helo_name ESMTP $mail_name


Thanks in advance

Paulo Caeiro