Sending emails in eGroupware 1.8 via Zentyal 3.3 SMTP

[fimwarebug]

Hi,

We have changed existing email server with Zentyal 3.3 which have TLS and authentication enabled in default to avoid spam relaying and eavesdropping.

http://doc.zentyal.org/en/mail.html

All clients : Thunderbird, Outlook or Apple Mail works without problems.
Sending and receiving via IMAP and SMTP servers build in Zentyal works OK.

The problem is email settings in eGroupware.

OK, I can connect to IMAP but sending is problem.

Here are the settings of incoming mail server which works OK:
incoming mail server(IMAP)

hostname / address : IPofZentyal
port : 143
Username : user@domaininzentyal.com
Password : passwordinzentyal
encrypted connection STARTTLS

do not validate certificate (not checked)
server supports mailfilter (sieve) (not checked)
port 2000

This section is not working as it should be:
outgoing mail server(SMTP)
hostname / address : IPofZentyal
port : 25
authentication required (checked)
Username : user@domaininzentyal.com
Password : passwordinzentyal

If I use upper configuration sending mails via eMail module reports following error:

SMTP Error: Could not authenticate.

If I disable authentication required (unchecked) the mail goes successfully on the local address but it can’ be sent to external addresses:

    SMTP Error: The following recipients failed: user@externaladdress.com

What does suppose to be a problem? IIRC all desktop clients integrate certificate from Zentyal in their SMTP settings to establish authorisation but there is no such case in eGroupware.

Thank you for any help

Damjan

[Pongracz_Istvan-2]

Hi,

Check your email logs, you should find the answer, at least the first half.

I assume you have problem with cram/whatever authentication, please check it in the logs and send a feedback.

Cheers,
István

----------------eredeti üzenet-----------------
Feladó: “fimwarebug” info@parametica.si
Címzett: egroupware-users@lists.sourceforge.net
Dátum: Tue, 25 Feb 2014 03:24:54 -0800 (PST)

Hi,

We have changed existing email server with Zentyal 3.3 which have TLS and
authentication enabled in default to avoid spam relaying and eavesdropping.

http://doc.zentyal.org/en/mail.html

All clients : Thunderbird, Outlook or Apple Mail works without problems.
Sending and receiving via IMAP and SMTP servers build in Zentyal works OK.

The problem is email settings in eGroupware.

OK, I can connect to IMAP but sending is problem.

Here are the settings of incoming mail server which works OK:
incoming mail server(IMAP)

hostname / address : IPofZentyal
port : 143
Username : user@domaininzentyal.com
Password : passwordinzentyal
encrypted connection STARTTLS

do not validate certificate (not checked)
server supports mailfilter (sieve) (not checked)
port 2000

This section is not working as it should be:
outgoing mail server(SMTP)
hostname / address : IPofZentyal
port : 25
authentication required (checked)
Username : user@domaininzentyal.com
Password : passwordinzentyal

If I use upper configuration sending mails via eMail module reports
following error:

SMTP Error: Could not authenticate.

If I disable authentication required (unchecked) the mail goes successfully
on the local address but it can’ be sent to external addresses:

SMTP Error: The following recipients failed:
user@externaladdress.com

What does suppose to be a problem? IIRC all desktop clients integrate
certificate from Zentyal in their SMTP settings to establish authorisation
but there is no such case in eGroupware.

Thank you for any help

Damjan

–
View this message in context:
http://egroupware.219119.n3.nabble.com/Sending-emails-in-eGroupware-
1-8-via-Zentyal-3-3-SMTP-tp3996117.html
Sent from the egroupware-users mailing list archive at Nabble.com.

---

---

Flow-based real-time traffic analytics software. Cisco certified tool.
Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer
Customize your own dashboards, set traffic alerts and generate reports.
Network behavioral analysis & security monitoring. All-in-one tool.

http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ost
g.clktrk

---

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

---

Flow-based real-time traffic analytics software. Cisco certified tool.
Monitor traffic, SLAs, QoS, Medianet, WAAS etc. with NetFlow Analyzer
Customize your own dashboards, set traffic alerts and generate reports.
Network behavioral analysis & security monitoring. All-in-one tool.
http://pubads.g.doubleclick.net/gampad/clk?id=126839071&iu=/4140/ostg.clktrk

---

eGroupWare-users mailing list
eGroupWare-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/egroupware-users

[fimwarebug]

Hi ,

Here are logs from mail server. I collect logs from 4 diferent scenarios:

Sending to local address WITH autentication in eGW mail settings:

Feb 25 19:54:57 mail postfix/smtpd[12176]: connect from unknown[192.168.2.240]
Feb 25 19:54:57 mail postfix/smtpd[12176]: lost connection after RSET from unknown[192.168.2.240]
Feb 25 19:54:57 mail postfix/smtpd[12176]: disconnect from unknown[192.168.2.240]

Sending to external address WITH autentication in eGW mail settings:

Feb 25 19:56:30 mail dovecot: imap-login: Login: user=<user@domaininzentyal.com >, method=PLAIN, rip=192.168.2.240, lip=IPofZentyal , mpid=12187, TLS
Feb 25 19:56:30 mail dovecot: imap(user@domaininzentyal.com ): Disconnected: Logged out bytes=52/996
Feb 25 19:56:30 mail postfix/smtpd[12176]: connect from unknown[192.168.2.240]
Feb 25 19:56:30 mail postfix/smtpd[12176]: lost connection after RSET from unknown[192.168.2.240]
Feb 25 19:56:30 mail postfix/smtpd[12176]: disconnect from unknown[192.168.2.240]

Sending to external address WITHOUT autentication in eGW mail settings:

Feb 25 19:58:31 mail dovecot: imap-login: Login: user=<user@domaininzentyal.com >, method=PLAIN, rip=192.168.2.240, lip=IPofZentyal , mpid=12207, TLS
Feb 25 19:58:31 mail dovecot: imap(user@domaininzentyal.com ): Disconnected: Logged out bytes=52/996
Feb 25 19:58:31 mail postfix/smtpd[12208]: connect from unknown[192.168.2.240]
Feb 25 19:58:31 mail postfix/smtpd[12208]: NOQUEUE: reject: RCPT from unknown[192.168.2.240]: 554 5.7.1 someaddress@gmail.com: Relay access denied; from=<user@domaininzentyal.com > to=someaddress@gmail.com proto=ESMTP helo=<[IPofZentyal ]>
Feb 25 19:58:31 mail postfix/smtpd[12208]: lost connection after RCPT from unknown[192.168.2.240]
Feb 25 19:58:31 mail postfix/smtpd[12208]: disconnect from unknown[192.168.2.240]

Sending to local address WITHOUT autentication in eGW mail settings (it is the only scenario when mail gets through):

Feb 25 20:00:03 mail dovecot: imap-login: Login: user=<user@domaininzentyal.com >, method=PLAIN, rip=192.168.2.240, lip=IPofZentyal , mpid=12222, TLS
Feb 25 20:00:03 mail dovecot: imap(user@domaininzentyal.com ): Disconnected: Logged out bytes=52/996
Feb 25 20:00:03 mail postfix/smtpd[12208]: connect from unknown[192.168.2.240]
Feb 25 20:00:03 mail postfix/smtpd[12208]: 39247867E79: client=unknown[192.168.2.240]
Feb 25 20:00:03 mail postfix/cleanup[12223]: 39247867E79: message-id=f6f9135b571a11a86774744c2e6daf9d@192.168.2.240
Feb 25 20:00:03 mail postfix/qmgr[15136]: 39247867E79: from=<user@domaininzentyal.com >, size=973, nrcpt=1 (queue active)
Feb 25 20:00:03 mail postfix/smtpd[12208]: disconnect from unknown[192.168.2.240]
Feb 25 20:00:03 mail amavis[10373]: (10373-08) ESMTP::10024 /var/lib/amavis/amavis-20140225T133346-10373: <user@domaininzentyal.com > -> user2@domaininzentyal.com SIZE=973 Received: from mail.mailzentyal.lan ([127.0.0.1]) by localhost (mail.mailzentyal.lan [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for user2@domaininzentyal.com; Tue, 25 Feb 2014 20:00:03 +0100 (CET)
Feb 25 20:00:03 mail amavis[10373]: (10373-08) Checking: 0m4e2nOg5fA2 [192.168.2.240] <user@domaininzentyal.com > -> user2@domaininzentyal.com
Feb 25 20:00:06 mail postfix/smtpd[12229]: connect from localhost.localdomain[127.0.0.1]
Feb 25 20:00:06 mail postfix/smtpd[12229]: 5452E867E7A: client=localhost.localdomain[127.0.0.1]
Feb 25 20:00:06 mail postfix/cleanup[12223]: 5452E867E7A: message-id=f6f9135b571a11a86774744c2e6daf9d@192.168.2.240
Feb 25 20:00:06 mail postfix/qmgr[15136]: 5452E867E7A: from=<user@domaininzentyal.com >, size=1647, nrcpt=1 (queue active)
Feb 25 20:00:06 mail postfix/smtpd[12229]: disconnect from localhost.localdomain[127.0.0.1]
Feb 25 20:00:06 mail amavis[10373]: (10373-08) FWD via SMTP: <user@domaininzentyal.com > -> user2@domaininzentyal.com,BODY=7BIT 250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 5452E867E7A
Feb 25 20:00:06 mail amavis[10373]: (10373-08) Passed, <user@domaininzentyal.com > -> user2@domaininzentyal.com, quarantine 0m4e2nOg5fA2, Message-ID: f6f9135b571a11a86774744c2e6daf9d@192.168.2.240,
Feb 25 20:00:06 mail amavis[10373]: (10373-08) Hits: -0.998
Feb 25 20:00:06 mail amavis[10373]: (10373-08) Passed CLEAN, <user@domaininzentyal.com > -> user2@domaininzentyal.com, Hits: -0.998, tag=0, tag2=5, kill=5, queued_as: 5452E867E7A, L/Y/0/0
Feb 25 20:00:06 mail postfix/smtp[12224]: 39247867E79: to=user2@domaininzentyal.com, orig_to=user2.surname2@domaininzentyal.com, relay=127.0.0.1[127.0.0.1]:10024, delay=3.4, delays=0.23/0.15/0.01/3, dsn=2.0.0, status=sent (250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 5452E867E7A)
Feb 25 20:00:06 mail postfix/qmgr[15136]: 39247867E79: removed
Feb 25 20:00:06 mail dovecot: lda(user2@domaininzentyal.com): msgid=f6f9135b571a11a86774744c2e6daf9d@192.168.2.240: saved mail to INBOX
Feb 25 20:00:06 mail postfix/pipe[12230]: 5452E867E7A: to=user2@domaininzentyal.com, relay=dovecot, delay=0.41, delays=0.12/0.03/0/0.26, dsn=2.0.0, status=sent (delivered via dovecot service)
Feb 25 20:00:06 mail postfix/qmgr[15136]: 5452E867E7A: removed

Hope that this can gives up some insight into problem.
If needed I can also check IMAP settings in eGW.

Br
Damjan

[ingoratsdorf]

Hi.

From the logs I can see that this is not an eGroupware issue but an
email server config issue.
I suspect you email server is set up to accept unauth delivery from
local network, which is fine.
In that instance no auth is required. This is common and will allow you
to use PHP mail etc.

HOWEVER, your email server is also set up to not allow relay access to
external recipients when no auth is enabled. Which is what you want.
No you either have to allow relay access for the local network, or you
have to disallow unauth local network access. Usually you do the first.

Suggest you have a look at:
http://www.postfix.org/SMTPD_ACCESS_README.html

In particular:

 # Relay control (Postfix 2.10 and later): local clients and
 # authenticated clients may specify any destination domain.
 smtpd_relay_restrictions  <http://www.postfix.org/postconf.5.html#smtpd_relay_restrictions>  =permit_mynetworks  <http://www.postfix.org/postconf.5.html#permit_mynetworks>,
     permit_sasl_authenticated  <http://www.postfix.org/postconf.5.html#permit_sasl_authenticated>,
     reject_unauth_destination  <http://www.postfix.org/postconf.5.html#reject_unauth_destination>

Cheers,
Ingo

[fimwarebug]

Hi,

Thank you all of you for pointing me to the right direction.

I have to add IP of the client to mynetworks and everything is working OK now.

Br

Damjan