Page 1 of 2 12 LastLast
Results 1 to 10 of 17

Thread: POP - Relay Access Denied

  1. #1
    Join Date
    Jul 2007
    Location
    St. Louis, MO
    Posts
    84
    Rep Power
    8

    Default POP - Relay Access Denied

    I recently installed Zimbra and I have slowly started migrating customers. I am sure this issue is addressed somewhere in the forums, wiki, or documentation; however, after an hour of searching while customers are complaining, I thought I would just post the question in hopes of a quick answer.

    Basically, I have something setup wrong - at least I think.

    My customers who are using an email client, for POP or IMAP, are unable to send messages. I have even tried to configure email clients, and I cannot get the SMPT connection test to work.

    For Outgoing Mail Settings, I insert my mail server into the outgoing mail server box: I.e.: mail.servername.net

    I then check the "Use Authentication" box, and I enter my full username: username@domainname.com.

    Obviously, in the above examples, "servername" in the outgoing mail server settings, and "domainname" in the username settings can differ as I have multiple domains configured within the GUI Admin Console for Zimbra. I currently have 30+ domains for which we host email.

    Any suggestions, or can someone point me to a previous thread? For some reason I am having a heck of a time finding documentation or threads on this.

    Basically, my customers currently either cannot configure their email clients, or they are getting a 554 Relay Access Denied error.

    Thanks,
    -Marc

  2. #2
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    21

    Default

    ZimbraMtaMyNetworks - ZimbraWiki
    That's also easily set in the mta tabs in the admin console...reboot and your set.
    Global settins>mta tab (this gets overwritten if you set the server>mta tab different)

    And for the next question you'll probably ask...try with and without "clear text login" enabled
    Last edited by mmorse; 08-02-2007 at 10:05 AM. Reason: server tab overwrites global settings

  3. #3
    Join Date
    Jul 2007
    Location
    St. Louis, MO
    Posts
    84
    Rep Power
    8

    Default Maybe I worded Incorrectly...

    Thank you for the reply; however, after reading, I do not think that is exactly what I wanted. Let me try to explain more - please keep in mind that I will admit that I, definitely, may be misunderstanding something too.

    I was thinking back to our existing Postfix mail server - prior to migrating to Zimbra. In the old setup I installed popb4smtp and added the needed settings to the main.cf to basically allow anyone who authenticated via POP to send mail via SMTP.

    I guess I am looking to achieve the same thing; however, I was *assuming* (I hate using that word) that there was a better was of handling this via Zimbra besides installing popb4smtp. I.e.: my customers need to setup their mail clients to authenticate SMTP.

    Basically, I am not looking to create a mynetwork list for all of my customers IP addresses; however, I also do not want to be an open-relay for sending email.

    Thanks again,
    -Marc

  4. #4
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    21

    Default

    30+ domains, are we talking a multi-server install?
    if so enable imap/pop proxy as well
    Configuring IMAP & POP proxy - ZimbraWiki
    Configuring Perdition - ZimbraWiki
    Last edited by mmorse; 08-02-2007 at 10:34 AM. Reason: link

  5. #5
    Join Date
    Jul 2007
    Location
    St. Louis, MO
    Posts
    84
    Rep Power
    8

    Default Single Server Install

    No, the install is on a single, new, Dual Core proc server. Even though we have 30+ domains, there are only 1-3 email accounts per domain. Lots of small companies for which we have their website and offer email services, now via Zimbra.

    So, on a single server install, does the POP and IMAP Proxy still need to be set? Or is that only for a multi-server install?

    Thanks,
    -Marc


    Also, I check the settings per this article: SMTP Auth Problems - ZimbraWiki

    The results look accurate to the example:


    zimbraMtaAuthEnabled: TRUE
    zimbraMtaAuthHost: mail.{mailserver}.net
    zimbraMtaAuthURL: https://mail.{mailserver}.net/service/soap/
    zimbraMtaTlsAuthOnly: TRUE


    However, when I set the outgoing mail server via an email client it doesn't connect:

    "Trying to log into the SMTP server “mail.{mailserver}.net” has failed. Please make sure the username and password are correct. If you continue, you may not be able to receive any email.
    Last edited by msf004; 08-02-2007 at 10:31 AM.

  6. #6
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    21

    Default

    Perdition IMAP/Pop Proxy should not be set on a single server install. Hence my wording of "if so"
    Quote Originally Posted by mmorse View Post
    are we talking a multi-server install?
    if so enable imap/pop proxy as well
    Quote Originally Posted by phoenix View Post
    No, under no circumstances should you enable that feature if you have a single server.

  7. #7
    Join Date
    Jul 2007
    Location
    St. Louis, MO
    Posts
    84
    Rep Power
    8

    Default So, No Luck Yet

    I have continued to read posts, the Wiki, etc. without any success yet.

    zmprov gs {server}.{domain}.net | grep Auth

    returns:
    zimbraMtaAuthEnabled: TRUE
    zimbraMtaAuthHost: {server}.{domain}.net
    zimbraMtaAuthURL: https://{server}.{domain}.net/service/soap/
    zimbraMtaTlsAuthOnly: TRUE

    zmprov gs {server}.{domain}.net | grep MailMode

    returns:
    zimbraMailMode: http

    ...and the ultimate problem is that when I attempt to utilize a mail client, Thunderbird, Mac Mail, Outlook, etc., I am unable to authenticate the SMTP outgoing mail server.

    Any other thoughts, suggestions, or otherwise?

    Thanks,
    -Marc
    Last edited by msf004; 08-02-2007 at 01:04 PM.

  8. #8
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    21

    Default

    just wanted to check- is "clear text login" enabled for these tests?
    try with tls auth false: (zimbraMtaTlsAuthOnly False)
    Last edited by mmorse; 08-02-2007 at 12:13 PM. Reason: try tls off

  9. #9
    Join Date
    Jul 2007
    Location
    St. Louis, MO
    Posts
    84
    Rep Power
    8

    Default Clear Text Login

    I went in and checked for both IMAP and POP "clear text login" is checked.

  10. #10
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    21

    Default

    Notice the bolded:
    Quote Originally Posted by msf004 View Post
    zmprov gs bacchus.razorball.net | grep Auth

    returns:
    zimbraMtaAuthEnabled: TRUE
    zimbraMtaAuthHost: {server}.{domain}.net
    zimbraMtaAuthURL: https://{server}.{domain}.net/service/soap/
    zimbraMtaTlsAuthOnly: TRUE

    zmprov gs bacchus.razorball.net | grep MailMode

    returns:
    zimbraMailMode: http
    From: SMTP Auth Problems - ZimbraWiki
    Make sure the url in the zimbraMtaAuthURL will work with the zimbraMailMode. For example, if the MailMode is "https" or "mixed", the AuthURL must begin with "https://" (so that auth will be attempted over ssl), but if the MailMode is "http" (tomcat is only listening on http), the AuthURL must begin with "http://"

    If the URL is wrong, re-set the hostname like this in order to regenerate the AuthURL:
    zmprov ms zimbra.domain.com zimbraMtaAuthHost zimbra.domain.com
    also try with tls off (zimbraMtaTlsAuthOnly) -sry i tried to sneek that in instead of making another post bug I guess you didn't see it
    Last edited by mmorse; 08-29-2007 at 09:33 PM. Reason: tls

Similar Threads

  1. Relay Access Denied
    By mmj1000 in forum Administrators
    Replies: 8
    Last Post: 03-27-2009, 01:33 PM
  2. Backup issues
    By telescop in forum Administrators
    Replies: 3
    Last Post: 03-01-2007, 06:09 PM
  3. Replies: 12
    Last Post: 03-14-2006, 12:02 PM
  4. Is my server being used to forward spam?
    By sgb in forum Administrators
    Replies: 11
    Last Post: 03-07-2006, 12:42 PM
  5. Move server to different OS
    By EriSan500 in forum Administrators
    Replies: 7
    Last Post: 03-05-2006, 01:00 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •