8.0.2 Community Edition - no longer allows SMTP auth users send email - RBL blocked

17126thunder04 · Post by **17126thunder04** » Tue Feb 12, 2013 8:21 am

I">https://bugzilla.zimbra.com/show_bug.cgi?id=79415#c12
I believe this is what fixed it for us.

815Minotaur · Post by **815Minotaur** » Fri Jul 12, 2013 4:29 pm

Following a recent 8.0 to 8.04 upgrade I came across a similar issue, but this thread indicates the issue was resolved in 8.03. However, it looks to have been only a partial fix...
Authenticated SMTP clients are able to successfully connect and send mail on 587 (bypassing any RBLs), but not on port 25.
The suggestion from Quanah in the Bugzilla article (permit_sasl_authenticated) seems to resolve the issue, but it would be nice to see if fixed 'officially'.

quanah · Post by **quanah** » Fri Jul 12, 2013 5:16 pm

The only connections to port 25 should be from clients in "my_networks". I don't see an issue here.

815Minotaur · Post by **815Minotaur** » Sun Jul 14, 2013 7:05 pm

[quote user="quanah"]The only connections to port 25 should be from clients in "my_networks". I don't see an issue here.[/QUOTE]The 'issue' is that, for better or worse, most mail clients default to using port 25 for SMTP sending, not 587. If Zimbra is running in a hosted environment where it's unlikely that one would know all the IP addresses/ranges of one's users, this presents a support nightmare in educating potentially hundreds or thousands of users, many of whom might be using different MUAs, in changing the port from 25 to 587.
That's not to mention the many other devices that might need to send mail, such as multifunction printers (which often have a 'scan from unit' facility). On several manufacturers' devices, there isn't an option to change from port 25.

quanah · Post by **quanah** » Mon Jul 15, 2013 4:21 pm

Hi,
Sorry, but I'm quite confused here. I just installed a ZCS7 server, and we do not allow AUTH logins on port 25 on that release either. So your complaint seems to be that something we never configured doesn't work? Or is there something further I'm missing?

zimbra@zre-ldap004:~$ zmcontrol -v

Release 7.2.4_GA_2900.UBUNTU10_64 UBUNTU10_64 NETWORK edition.
zimbra@zre-ldap004:~$ telnet localhost 25

Trying ::1...

Trying 127.0.0.1...

Connected to localhost.

Escape character is '^]'.

220 zre-ldap004.eng.vmware.com ESMTP Postfix

ehlo testing

250-zre-ldap004.eng.vmware.com

250-PIPELINING

250-SIZE 10240000

250-VRFY

250-ETRN

250-STARTTLS

250-ENHANCEDSTATUSCODES

250-8BITMIME

250 DSN

AUTH PLAIN

503 5.5.1 Error: authentication not enabled