550 Denied due to spam list - please help....

[peg110]

It seems that when I "Hardened" my mail server according to http://www.scalix.com/wiki/index.php?ti ... ixSecurity that the section for changing the SMTP greeting ( http://www.scalix.com/wiki/index.php?ti ... P_greeting ) caused my Outlook to not look at the authentication. Thus I got the 550 messages. Once I removed that section... It started working fine.

I don't know if that's the solution or not. I guess at this point I will cross my fingers and hope. Any other thoughts or ideas?

Thanks,

[peg110]

It seems that when I "Hardened" my mail server according to http://www.scalix.com/wiki/index.php?ti ... ixSecurity that the section for changing the SMTP greeting ( http://www.scalix.com/wiki/index.php?ti ... P_greeting ) caused my Outlook to not look at the authentication. Thus I got the 550 messages. Once I removed that section... It started working fine.

I don't know if that's the solution or not. I guess at this point I will cross my fingers and hope. Any other thoughts or ideas?

Thanks,

[florian]

what exact greeting line did you put in while things didn't work?

I would like to reproduce this?

Also, what version of Outlook were you using?

Thx,
Florian.

[peg110]

The Original line was
EXTENSIONS=AUTH,DSN,8BITMIME

The "HARDENED one" was changed to the following (as per the doc referenced above)
EXTENSIONS=
GREETING=SMTPd

Should I have left the extensions alone and ADDED the greeting?

[florian]

Yessir!

The Extensions are the supported extensions advertised by the SMTP relay after the connecting server or other client issues it's initial EHLO command.

Obviously, if you remove AUTH from the list, it won't offer any authentication options, so the client - according to the SMTP RFC - should not try to authenticate. For once, Outlook seems to be behaving correctly and follow the relevant standard.

I would also suggest that you leave 8BITMIME in there as it will result in more efficient transmission.

I've also added a note to that effect to the Wiki article you refereced.

Cheers,
Florian.

[peg110]

Then the HOWTO should be modified. As I read it from http://www.scalix.com/wiki/index.php?ti ... P_greeting

Code: Select all

Change SMTP greeting

See http://www.scalix.com/wiki/index.php?title=HowTos/SMTP_Greeting

Note: the smtpd.cfg file is read only, use these commands to write to it:

# chmod u+w /var/opt/scalix/sys/smtpd.cfg
# vi /var/opt/scalix/sys/smtpd.cfg  =>  "EXTENSIONS=" and "GREETING=SMTPd"
# chmod u-w /var/opt/scalix/sys/smtpd.cfg



I interpreted it as EXTENSIONS should be blank and the GREETINGS should be added (since there was no greeting at all in the original smtpd.cfg file.

[florian]

Well, as all the content on the Wiki, there is no formal guarantee for correctness and no side effects. The document in question has been contributed by a community member without Scalix involvement.

I've added a note to that effect (as said in my previous post).

If you believe the wording should be further refined, may I suggest that you change the Wiki document yourself? It's unprotected and open for editing and contributions.

Cheers, Thanks,
Florian.

[peg110]

I believe you have covered the wording adequately. Thanks for the help.

I have registered so that I could edit the WIKI (where I know have the knowledge anyway). Maybe I will be able to add to it at some point.

Thanks

[florian]

No problem - actually thanks to you for the catch, this will probably be helpful for someone else.

Florian.

[skenigma]

Ok I got this 550 Denied due to spam list error

here is a part of my smtp.cfg file

Code: Select all

...
SMTPFILTER=TRUE
# NB Authenticated RELAYs are always allowed
SUBMIT Header DNSBL,zen.spamhaus.org,ALL
SUBMIT Header DNSBL,bl.spamcop.net,ALL
RELAY accept x.x.x.x
RELAY accept x.x.x.x
RELAY accept .wsas.com
RELAY Log_Reject ALL
...


and here is my error log from the smtpd

Code: Select all

REPORT                         SMTP Relay    (SMTPD Relay Pr) 11.11.07 21:25:23
[OM.DMON 2172] SMTP: Rejected relay attempt from X@wsas.com at x.x.x.x to x@y.com


since the user is from @wsas.com shouldn't that allow it to go out or does it have to be a wsas.com rdns?





-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=[Update]1=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

The user did not have their mail client set to authenticate outgoing email. once that was changed it worked.

Any one know right off hand how to force smtp authentication to relay?