554 5.7.1 Relay access denied from web mail [Solved]

[neutronscott]

that is much different than my fresh install on RHEL7.
look at /opt/zimbra/conf/zmconfigd/smtpd_recipient_restrictions.cf and put permit_mynetworks first for now. then after a minute zmconfigd should refresh and it will show in postconf smtpd_recipient_restrictions and see if mail works.

edit: probably easier to just change on command line for the test

Code: Select all

postconf -e smtpd_recipient_restrictions='reject_non_fqdn_recipient, permit_sasl_authenticated, permit_mynetworks, reject_unlisted_recipient, reject_invalid_helo_hostname, reject_non_fqdn_sender, permit'

[neutronscott]

I hope you saw my reply on page two and your job is still intact.. :\

[sarmamv]

Hello neutronscott,

Greetings for a very Happy, Peaceful and Prosperous New Year 2020.

I saw your reply and could not make the changes immediately, as I was trying to undo lot of Antispam stuff that was repetitive.

And undo/redo of only necessary Antispam steps took quite some time.

By the time I finished, it was too late and I had to rush to office for shutting down this zimbra and raising the current postfix server, so that users are not affected.

Thank you for your kind help. I will raise this zimbra again by 20:00 IST on this Friday, the 4th of January.

[sarmamv]

Hello Fayaz,

Greetings for a Prosperous, Happy and Peaceful New Year 2020.

I made the change that you had suggested, by running:

`zmprov gs mail.mydomain.in zimbraMtaMyNetworks '127.0.0.0/8 10.42.63.4/32'` and checked the same with:

`postconf mynetworks`

The issue seems to be with the mandatory TLS authentication, which the browser used to log-in as user was unable to negotiate.

I think I will need to create a new SSL self-signed certificate for web mail MTA URL: https://mail.mydomain.in to proceed further.

I will raise the zimbra server again at 20:00 IST on Friday, the 4th of January 2020, after shutting down the postfix server running since morning.

I will update you on the progress tomorrow night.

Thanks and Regards

[sarmamv]

Hello neutronscott/Fayaz,

I have finally managed to resolve the issue.

I have removed reject_unauth_destination from smtpd_recipient_restrictions.

Postfix documentation mentions that reject_unauth_destination need not be mentioned in smtpd_recipient_restrictions if the same is specified under smtpd_relay_restrictions.

Thanks once again for your kind support.

I request Administrators to close this Issue now.

[phoenix]

I request Administrators to close this Issue now.

We don't close threads in these forum but you could mark the thread as [Solved] if you edit your original post and add that to the thread title.

[sarmamv]

Hello phoenix,

Thank you for guiding me in the right direction.

Wish you a belated Happy, Peaceful and Prosperous New Year 2020.

[phoenix]

Hello phoenix,

Thank you for guiding me in the right direction.

Wish you a belated Happy, Peaceful and Prosperous New Year 2020.

You too.