Page 1 of 1

outbound mail problem

Posted: Mon May 08, 2006 7:32 pm
by kabalah
hi all, i know this is many places on the forum, but none of the other examples of this problem have fixed my problem. from the unix command line i can send mail just fine and i see entries in the /var/log/mail logs. when i try to send from the web interface it just tells me it's unable to send to my email address. there are no entries in the /var/log/mail logs and i'm not sure where to go from here. i've tried making changes to the smtpd.cfg file, but i'm not sure what's causing the problem nor where the logs are that could help. here' s my smtpd.cfg file:

###############################################################################

RELAY accept 192.168.64.41
SMTPFILTER=TRUE
RELAY accept 127.0.0.1
RELAY accept .xtime.com
RELAY Log_Reject ALL
SUBMIT accept 10.0.0.0/255.0.0.0
AUTH_SUCCESS accept ALL
ANONYMOUS Log_Reject ALL
ANONYMOUS accept 10.0.0.0/255.0.0.0

# extra rules added to prevent open relay usage
RECIPIENT Log_Reject *@*@*
RECIPIENT Log_Reject *%*
RECIPIENT Log_Reject *!*
RECIPIENT Log_Reject *#*@*

thanks for any light you can shed on this subject...
jim

additional info

Posted: Mon May 08, 2006 8:02 pm
by kabalah
i found this in the tmp/smtpd.log

Cli 13064/1 rcvd: 'MAIL FROM:<james.fischer@y-time.com>'
Rejected anonymous submission from james.fischer@y-time.com at 192.168.64.41
Cli 13064/1 sent : 530 Authentication required

Re: outbound mail problem

Posted: Mon May 08, 2006 8:07 pm
by ScalixSupport
kabalah wrote:AUTH_SUCCESS accept ALL
ANONYMOUS Log_Reject ALL
ANONYMOUS accept 10.0.0.0/255.0.0.0


Your problem lies in these three lines.

You do not need AUTH_SUCCESS as the rule is implicit, i.e. if anyone authenticates, they can send messages.

You should not reject anonymous connections as the SMTP Relay is the incoming MTA for the server. If you can always guarantee that every connection will authenticate, by all means add the line. Otherwise remove it. If you don't, you will not receive mail from anyone who does not authenticate.

The rules in the smtpd.cfg file are processed in order so as soon as there is a match, the rule is processed. This meanst that the ANONYMOUS accept rule will never be matched. Taking my previous comment into account, you do not need that rule.

Cheers

Dave

thanks

Posted: Mon May 08, 2006 8:18 pm
by kabalah
well, that did it. thanks dave
jim