problems with emails from clients

Discussion in 'General' started by cybereatl, Jan 22, 2007.

  1. cybereatl

    cybereatl Member

    Hi folks,

    Happy new year to all of you!!

    Folks i got a problem with the emails that am sending from ISPConfig email box configured email account to any other domain, such as hotmail, yahoo, google and some others and getting the following error from email client:

    Foxmail:
    SMTP server reply:
    535 Error
    authentication failed

    Outlook 2003:
    some recipients did not receive your message.

    Subject: Testing outlook
    sent: 21/01/2007 08:56

    Unable to locate following recipients:

    '[email protected]' en 21/01/2007 08:56
    554 <[email protected]>: Relay access denied

    Any ideas or suggestions will be appreciated!!

    Thanks in advance
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Did you enable SMTP authentication in outlook? The option is named "Server requires authentication" in the outlook settings.
     
  3. cybereatl

    cybereatl Member

    Thank you for your reply Till,

    Check this out, my ISPConfig server is on IP .204 and this computer is on IP .202 and I got 3 machines running Linux, MacOS and Win XP each one uses evolution, Thunderbird and Outlook 2003 and none of them have checked "SMTP authentication" and am able to send emails with no problem.

    When ever am in other location I got those errors, even if I take my laptop I got that error....

    Any other ideas??
     
  4. falko

    falko Super Moderator Howtoforge Staff

  5. cybereatl

    cybereatl Member

    what should I change?? Also am trying to send some neswletter from home and I kept receiving this error: 535 Error: authentication failed

    What should I do to get going and be able to use client software instead of access webmail.

    Here is main.cf file.

    Thank you
     

    Attached Files:

    • main.txt
      File size:
      26.5 KB
      Views:
      220
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Your server is currently a open relay for many IP addresses, which means that many poeple can use your server to send mail and your server will be blacklisted as spam sender sooner or later.

    Please add this line to your main.cf file:

    mynetworks = 127.0.0.0/8

    And then enable SMTP authentication in all email clients that shall send trough your server.
     
  7. cybereatl

    cybereatl Member

    Ok, I've added that line at the end of document, but still am able to send emails with no SMTP authentication selected!!!

    readme_directory = /usr/share/doc/postfix-2.2.2/README_FILES
    smtpd_sasl_local_domain =
    smtpd_sasl_auth_enable = yes
    smtpd_sasl_security_options = noanonymous
    broken_sasl_auth_clients = yes
    smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination
    smtpd_tls_auth_only = no
    smtp_use_tls = yes
    smtpd_use_tls = yes
    smtp_tls_note_starttls_offer = yes
    smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
    smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
    smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
    smtpd_tls_loglevel = 1
    smtpd_tls_received_header = yes
    smtpd_tls_session_cache_timeout = 3600s
    tls_random_source = dev:/dev/urandom
    mynetworks = 127.0.0.0/8

    virtual_maps = hash:/etc/postfix/virtusertable

    mydestination = /etc/postfix/local-host-names
     
  8. till

    till Super Moderator Staff Member ISPConfig Developer

    Have you restarted postfix? From where do you try to send emails?
     
  9. cybereatl

    cybereatl Member

    Hi Till,

    Yers, in fact I've restarted postfix, but now am unable to send any email at all, is request for my login information "web1_admin" and password but it doesn't matter how do I write those can get thru!! :( :eek:

    What can I do then otherwise, I might to remove mynetworks line.

    Thanks
     
  10. till

    till Super Moderator Staff Member ISPConfig Developer

    Then your SASL configuration might be incorrect. Please check your mail.log for errors.
     
  11. cybereatl

    cybereatl Member

    Where should I check mail.log file??

    /etc/postfix

    am looking over file system but not sure where is it!! :confused:
     
  12. martinfst

    martinfst Member Moderator

    Linux log files are almost always located in /var/log
     
  13. cybereatl

    cybereatl Member

    Thanks for the hint!!

    There is a lot of errors also it mentions mailbox vulnerable :eek: :eek:

    How to correct SASL Config!!!

    Thanks
     

    Attached Files:

  14. falko

    falko Super Moderator Howtoforge Staff

    Please post the important parts of your mail log here directly instead of attaching it as a zip file.

    Which distribution are you using?
     
  15. martinfst

    martinfst Member Moderator

    Don't be too worried. Unless you have allowed users to login to your box with ssh, this doesn't harm immediately. Should be fixed though, but I don't know how right now (sorry, time limitation on my side).
     
  16. cybereatl

    cybereatl Member

    Currently am using Fedora Core 4!!

    Sorry , about large files, but I wan't sure really what to look for!! My bad ;)
     
  17. falko

    falko Super Moderator Howtoforge Staff

  18. cybereatl

    cybereatl Member

    Hi Falko,

    Thank you for your reply, about the log file is hard to tell what is important or not, there is a lot of errors which I don't know what to look for: there is something that is very consistant and is:

    Mailbox vulnerable - directory /var/spool/mail must have 1777 protection

    Also:
    warning: SASL authentication problem: unknown password verifier
    Jan 24 07:46:58 morticia postfix/smtpd[8979]: warning: unknown[xxx.xx.xxx.202]: SASL LOGIN authentication failed
    Jan 24 07:46:58 morticia postfix/smtpd[8979]: lost connection after AUTH from unknown[xxx.xx.xxx.202]

    And checking the postfix setup here is same as tutorial:

    [root@morticia ~]# telnet localhost 25
    Trying 127.0.0.1...
    Connected to localhost.localdomain (127.0.0.1).
    Escape character is '^]'.
    220 morticia.educandote.net ESMTP Postfix
    ehlo localhost
    250-morticia.educandote.net
    250-PIPELINING
    250-SIZE 10240000
    250-VRFY
    250-ETRN
    250-STARTTLS
    250-AUTH PLAIN LOGIN
    250-AUTH=PLAIN LOGIN
    250 8BITMIME
    quit
    221 Bye
    Connection closed by foreign host.
    [root@morticia ~]#

    Thanks
     
  19. falko

    falko Super Moderator Howtoforge Staff

    Please run
    Code:
    chmod 1777 /var/spool/mail
    What's in /usr/lib/sasl2/smtpd.conf?
    What's the output of
    Code:
    uname -m
    ?
     
  20. cybereatl

    cybereatl Member

    Ok, I have run chmod

    Content of smtpd.conf

    pwcheck_method: saslauth
    mech_list: plain login

    Results of uname -m
    i686

    Thanks
     

Share This Page