Problem with Alias Address with External SMTP Authorization

Use this forum if you want to discuss a problem or ask a question related to a hMailServer beta release.
Post Reply
andy
New user
New user
Posts: 11
Joined: 2008-01-01 10:20

Problem with Alias Address with External SMTP Authorization

Post by andy » 2009-07-31 19:47

Hi, I've searched posts about this, but no solutions yet...

I've few aliases email address which pointed to 1 main account, before was everything works, but after 5.x version, seems many troubles we've got... now don't know how to config it to work...

But one point I know that, its we lost many email because our email server blocked by authorization...

when I use other smtp server to send a message to our server's alias addresses, the server will reply us following message:
This is a permanent error; I've given up. Sorry it didn't work out.
<staff1@domain.com>:
xxx.xxx.xxx.xxx does not like recipient.
Remote host said: 530 SMTP authentication is required.
Giving up on xxx.xxx.xxx.xxx.
on the ip range settings, we have setup profile "Internet" from 0.0.0.0 to 255.255.255.255

Allow "ALL" connections
Allow deliveries from "ALL"
Require SMTP auth:
[V] local to local (real user from other place must login for sending mails)
[V] local to external (real user from other place must login for sending mails )
[ ] external to local (allow receive email from other servers)
[V] extrnal to external (not allow other people use our email server to send junks to others)

my a/c:
sales@domain.com

my alias to my a/c something like:
staff1@domain.com
staff2@domain.com
staff3@domain.com

ok... case study...

somebody send staff1 an email, our server should be receive an e-mail from the sender's smtp server (external), right? I know hMailServer will filtered all our aliases as external too...

So this connection should be external to external, and sender's server will be asked for SMTP auth. and then, sender's SMTP server to our SMTP server's connection will be auth failure...

Our server should protect external to external by SMTP auth, because of protect somebody use our server to send junks to others.

my problem is that, all my staff1 to staff3 aliases cannot receive mails from any (but not 100% dunno why)... any solution?

On 4.x I don't feel I've lost mail before... but after we upgraded to 5.x, I just feel in these months, why the email deliveries so often... after I tried to send a mail to alias, I got the message above, which caused by SMTP Auth... what should I do now?

I've readed Martin's replies to others, seems alias filter as External is must... how about filter aliases which pointed to local real a/c as internal?

I'm was using 5.1.2-B345 at this moment... and just upgraded to 5.2-B355 now

Keba
Normal user
Normal user
Posts: 126
Joined: 2009-04-11 11:43

Re: Problem with Alias Address with External SMTP Authorization

Post by Keba » 2009-07-31 21:19

Some log snippets (enable SMTP logging if you haven't already) would be useful to see what is actually going wrong here.

Unless you are specifying the same domain in the 'from' field on the second SMTP server, it should not require authentication against the server that is accepting email on that domain.
Keba

andy
New user
New user
Posts: 11
Joined: 2008-01-01 10:20

Re: Problem with Alias Address with External SMTP Authorization

Post by andy » 2009-08-01 03:42

Keba wrote:Some log snippets (enable SMTP logging if you haven't already) would be useful to see what is actually going wrong here.

Unless you are specifying the same domain in the 'from' field on the second SMTP server, it should not require authentication against the server that is accepting email on that domain.
nope... my "other SMTP server" means something like you, you send me a mail to my staff1@domain.com alias... of couse you are external, but my alias also filtered as alias too... it will be asked for smtp auth...

User avatar
mattg
Moderator
Moderator
Posts: 19994
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: Problem with Alias Address with External SMTP Authorization

Post by mattg » 2009-08-01 05:36

andy wrote:ok... case study...

somebody send staff1 an email, our server should be receive an e-mail from the sender's smtp server (external), right? I know hMailServer will filtered all our aliases as external too...

So this connection should be external to external, and sender's server will be asked for SMTP auth. and then, sender's SMTP server to our SMTP server's connection will be auth failure...
I'm not sure that this is correct wrt to receiving mail from the internet.

I use 5.1.2 and aliases work for me.
I just sent from my gmail account to an alias and greylisting is making gmail try again. Normal response I reckon.
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

Keba
Normal user
Normal user
Posts: 126
Joined: 2009-04-11 11:43

Re: Problem with Alias Address with External SMTP Authorization

Post by Keba » 2009-08-01 10:45

I'm not having any issues with unauthenticated 'external to local' where 'local' is an alias address on the domain.

Post some logs - show us what is actually happening when an 'other smtp server' triggers the error on your server. Without logs, its really hard to guess what is going on.
Keba

andy
New user
New user
Posts: 11
Joined: 2008-01-01 10:20

Re: Problem with Alias Address with External SMTP Authorization

Post by andy » 2009-08-01 11:32

Here is the log, which I just send a e-mail from hotmail to our alias.

Code: Select all

"TCPIP"	848	"2009-08-01 17:10:47.203"	"TCPConnection - Posting AcceptEx on 0:25"
"DEBUG"	848	"2009-08-01 17:10:47.203"	"Creating session 2176"
"SMTPD"	848	2176	"2009-08-01 17:10:47.203"	"65.55.116.32"	"SENT: 220 Welcome to SMTP Server"
"SMTPD"	848	2176	"2009-08-01 17:10:47.468"	"65.55.116.32"	"RECEIVED: EHLO blu0-omc1-s21.blu0.hotmail.com"
"SMTPD"	848	2176	"2009-08-01 17:10:47.468"	"65.55.116.32"	"SENT: 250-mail.domain.com[nl]250-SIZE[nl]250 AUTH LOGIN PLAIN"
"SMTPD"	848	2176	"2009-08-01 17:10:47.734"	"65.55.116.32"	"RECEIVED: MAIL FROM:<andysoft@msn.com>"
"DEBUG"	848	"2009-08-01 17:10:47.734"	"BLCheck::ClientExistsInDNSBL()"
"TCPIP"	848	"2009-08-01 17:10:47.734"	"DNS - INAddr lookup: 32.116.55.65.sbl-xbl.spamhaus.org"
"TCPIP"	848	"2009-08-01 17:10:48.125"	"DNS - INAddr Lookup result for 32.116.55.65.sbl-xbl.spamhaus.org: 0 responses"
"DEBUG"	848	"2009-08-01 17:10:48.125"	"BLCheck::~ClientExistsInDNSBL()"
"DEBUG"	848	"2009-08-01 17:10:48.125"	"BLCheck::ClientExistsInDNSBL()"
"TCPIP"	848	"2009-08-01 17:10:48.125"	"DNS - INAddr lookup: 32.116.55.65.bl.spamcop.net"
"TCPIP"	848	"2009-08-01 17:10:48.437"	"DNS - INAddr Lookup result for 32.116.55.65.bl.spamcop.net: 0 responses"
"DEBUG"	848	"2009-08-01 17:10:48.437"	"BLCheck::~ClientExistsInDNSBL()"
"DEBUG"	848	"2009-08-01 17:10:48.437"	"Spam test: SpamTestDNSBlackLists, Score: 0"
"DEBUG"	848	"2009-08-01 17:10:48.468"	"Spam test: SpamTestSPF, Score: 0"
"DEBUG"	848	"2009-08-01 17:10:48.468"	"Total spam score: 0"
"SMTPD"	848	2176	"2009-08-01 17:10:48.468"	"65.55.116.32"	"SENT: 250 OK"
"SMTPD"	848	2176	"2009-08-01 17:10:48.734"	"65.55.116.32"	"RECEIVED: RCPT TO:<staff1@domain.com>"
"SMTPD"	848	2176	"2009-08-01 17:10:48.750"	"65.55.116.32"	"SENT: 530 SMTP authentication is required."
"SMTPD"	848	2176	"2009-08-01 17:10:49.015"	"65.55.116.32"	"RECEIVED: QUIT"
"DEBUG"	848	"2009-08-01 17:10:49.015"	"Deleting message file"
"SMTPD"	848	2176	"2009-08-01 17:10:49.015"	"65.55.116.32"	"SENT: 221 goodbye"
"DEBUG"	848	"2009-08-01 17:10:49.015"	"Closing TCP/IP socket"
"DEBUG"	848	"2009-08-01 17:10:49.015"	"Ending session 2176"
Dunno why this time both main and aliases a/c also got this SMTP Auth problem too... I'm checking the settings on IP Range... is that any confilts...

I've 3 IP Ranges:

Localhost 127.0.0.1 - 127.0.0.1 (Priority 15)
Connections all allowed, Deliveries all allowed
Requires SMTP Auth: External to External

Office 202.xx.xxx.89 - 202.xx.xxx.94 (Priority 10)
Connections all allowed, Deliveries all allowed
Requires SMTP Auth: External to External

Internet 0.0.0.0 - 255.255.255.255 (Priority 10)
Connections all allowed, Deliveries all allowed
Requires SMTP Auth: Local to Local, Local to External, External to External

Keba
Normal user
Normal user
Posts: 126
Joined: 2009-04-11 11:43

Re: Problem with Alias Address with External SMTP Authorization

Post by Keba » 2009-08-01 12:40

I just did a similar test on my production server (so that I could see the debug logs which I don't have on very often!) and couldn't reproduce the error.

The only main difference is that I get one extra line after the RCPT message (gmail have SPF records I guess!)
"DEBUG" 2776 "2009-08-01 11:24:02.754" "SPF passed, skipping greylisting."

On my IP ranges, I do have my 'office' equivalent range priority set to 21 - I don't have any ranges with identical priorities, but I'm not sure if that would ever cause an issue.

Personally I can't see anything that you have listed in your posts that would cause the issue as you have described it - very bizzare! Hopefully somebody who can see what the problem is will post...
Keba

andy
New user
New user
Posts: 11
Joined: 2008-01-01 10:20

Re: Problem with Alias Address with External SMTP Authorization

Post by andy » 2009-08-01 13:05

Keba wrote:I just did a similar test on my production server (so that I could see the debug logs which I don't have on very often!) and couldn't reproduce the error.

The only main difference is that I get one extra line after the RCPT message (gmail have SPF records I guess!)
"DEBUG" 2776 "2009-08-01 11:24:02.754" "SPF passed, skipping greylisting."

On my IP ranges, I do have my 'office' equivalent range priority set to 21 - I don't have any ranges with identical priorities, but I'm not sure if that would ever cause an issue.

Personally I can't see anything that you have listed in your posts that would cause the issue as you have described it - very bizzare! Hopefully somebody who can see what the problem is will post...
if I don't limit the external to external require for SMTP Auth by ip range, there will have many scam servers/programs use our server to send 1000 junk mails to others unknown external addresses per hours...

Because we're public mail server... usually connect to world wide mail servers, some bad guys or virus always trying to collect mail servers list which can help them send junks to the world...

Keba
Normal user
Normal user
Posts: 126
Joined: 2009-04-11 11:43

Re: Problem with Alias Address with External SMTP Authorization

Post by Keba » 2009-08-01 13:58

I have 'external to external' authentication required and do not have the same issue - I would never recommend not having that particular option disabled...

From what you have stated in your posts, our domains are configured the same way. We both want 'external to local' to work without needing the 'external' to need to authenticate when sending to an alias or account, and both do not have that particular option enabled on the Internet range... Why yours is failing is obviously something else that is different, but I can't tell what.
Keba

^DooM^
Site Admin
Posts: 13861
Joined: 2005-07-29 16:18
Location: UK

Re: Problem with Alias Address with External SMTP Authorization

Post by ^DooM^ » 2009-08-01 14:53

Is the domain enabled that the user is sending to?
If at first you don't succeed, bomb disposal probably isn't for you! ヅ

User avatar
mattg
Moderator
Moderator
Posts: 19994
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: Problem with Alias Address with External SMTP Authorization

Post by mattg » 2009-08-01 15:15

As a side issue, I would set these to priority at least greater than 20, especially if you have autoban enabled...
andy wrote:I've 3 IP Ranges:
Localhost 127.0.0.1 - 127.0.0.1 (Priority 15)
Office 202.xx.xxx.89 - 202.xx.xxx.94 (Priority 10)
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

andy
New user
New user
Posts: 11
Joined: 2008-01-01 10:20

Re: Problem with Alias Address with External SMTP Authorization

Post by andy » 2009-08-01 15:29

^DooM^ wrote:Is the domain enabled that the user is sending to?
Yeap, all domains, accounts, aliases are enabled.

all the domain settings all are default.

Just Checked: Enabled, Add Signature to local mail, Enable Greylisting

and I didn't modified anything except account quota for accounts.

SMTP Protocol Settings:
Max Connections: 0 (unlimited)
Delivery retries: 6
Minutes every retry: 60
host name: mail.domain.com

SMTP Relayer: blank (Port: 25)
RFC: allow "plain text auth", "empty sender address", "incorrectly formatted line endings".

Max recipients in batch: 100
Rule loop limit: 5

Default domain: domain.net
Auto-ban: Enabled 3/30/60

Incoming Relays: Blank

User avatar
mattg
Moderator
Moderator
Posts: 19994
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: Problem with Alias Address with External SMTP Authorization

Post by mattg » 2009-08-01 15:37

These aliases, they point to an active, locally hosted account, for a locally hosted domain?

They don't perhaps point to an account not hosted on your server?
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

andy
New user
New user
Posts: 11
Joined: 2008-01-01 10:20

Re: Problem with Alias Address with External SMTP Authorization

Post by andy » 2009-08-01 15:45

mattg wrote:These aliases, they point to an active, locally hosted account, for a locally hosted domain?

They don't perhaps point to an account not hosted on your server?
I just have 1 mail server, it just a alias of same domain's user account.

I never have any alias pointed to other server or address which not in our server.

Thanks :P

andy
New user
New user
Posts: 11
Joined: 2008-01-01 10:20

Re: Problem with Alias Address with External SMTP Authorization

Post by andy » 2009-08-01 15:57

I total have 8 domains, 13 names

since I upgraded to B355, there are some deliveries success, but not all.

few [local domain] to [local domain]
few [external] to [local domain] and [local domain alias]


some accounts which have the SMTP auth problems, those will suddenly success without sending SMTP auth request, but 90% failed by SMTP auth request.

today processed 392 messages and 255 spams after upgraded to B355, but also failed a lots by SMTP auth.

andy
New user
New user
Posts: 11
Joined: 2008-01-01 10:20

Re: Problem with Alias Address with External SMTP Authorization

Post by andy » 2009-08-01 16:09

mattg wrote:As a side issue, I would set these to priority at least greater than 20, especially if you have autoban enabled...
andy wrote:I've 3 IP Ranges:
Localhost 127.0.0.1 - 127.0.0.1 (Priority 15)
Office 202.xx.xxx.89 - 202.xx.xxx.94 (Priority 10)
So, you meant Local and Office are 20, Internet keep 10 (priority)?

still failure...

P.S. a month ago because of mail lost so much, I've tried to use other server (which I stopped the mail service for a year already) to upgrade the hmailserver to newest version 5.1, both of them are started from 4.1, and move 2 of domains to there, but the same result (lost much), so I change back to this original server again.

I'm not sure is that there any other settings make this fails, but hmailserver not really so much settings and easy to use.

I've used check command to checked the mysql, there don't have any problem too.

will the betas upgrade script cause this problem? I've used 5.0 beta for production for a while...

User avatar
mattg
Moderator
Moderator
Posts: 19994
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: Problem with Alias Address with External SMTP Authorization

Post by mattg » 2009-08-01 16:51

andy wrote:
mattg wrote:As a side issue, I would set these to priority at least greater than 20, especially if you have autoban enabled...
andy wrote:I've 3 IP Ranges:
Localhost 127.0.0.1 - 127.0.0.1 (Priority 15)
Office 202.xx.xxx.89 - 202.xx.xxx.94 (Priority 10)
So, you meant Local and Office are 20, Internet keep 10 (priority)?

still failure...
Wasn't offered as a solution to this issue. Was offered as other advice - a side issue.

And no, I mean that local and office should be 21 or greater, not 20.

An Autoban will give a priority of 20, and this will ban the IP completely. This ISN'T the issue that you are experiencing.
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

User avatar
martin
Developer
Developer
Posts: 6834
Joined: 2003-11-21 01:09
Location: Sweden
Contact:

Re: Problem with Alias Address with External SMTP Authorization

Post by martin » 2009-08-02 11:14

And you have no routes set up? For example, if you have a route for msn.com, you could get this problem depending on the routes configuration.

Please backup your config and send it to me at martin@hmailserver.com so that I can have a look at it.

andy
New user
New user
Posts: 11
Joined: 2008-01-01 10:20

Re: Problem with Alias Address with External SMTP Authorization

Post by andy » 2009-08-02 19:16

martin wrote:And you have no routes set up? For example, if you have a route for msn.com, you could get this problem depending on the routes configuration.

Please backup your config and send it to me at martin@hmailserver.com so that I can have a look at it.
my routes are empty.

today when I want to giveup, I did removed all ip ranges, reset all IP range again, and did some tests, now seems work fine, looking forward on tomorrow. (business days)

any problem I will post here :P thanks martin.
---
other request:
Don't know is it possible to use alias address as pop3 / smtp / imap's login username? of couse meaning the alias which have real local accounts.

and the alias just use the same password as real local account, which good for IMAP web mail which use to reply/send mail with the alias address...

User avatar
mattg
Moderator
Moderator
Posts: 19994
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: Problem with Alias Address with External SMTP Authorization

Post by mattg » 2009-08-03 02:09

andy wrote:
martin wrote:other request:
Don't know is it possible to use alias address as pop3 / smtp / imap's login username?
I don't believe this is possible. You can set up an alias to an account not hosted on the server, ie an external account, which wouldn't have a locally stored password...
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

andy
New user
New user
Posts: 11
Joined: 2008-01-01 10:20

Re: Problem with Alias Address with External SMTP Authorization

Post by andy » 2009-08-03 05:19

mattg wrote:
andy wrote:
martin wrote:other request:
Don't know is it possible to use alias address as pop3 / smtp / imap's login username?
I don't believe this is possible. You can set up an alias to an account not hosted on the server, ie an external account, which wouldn't have a locally stored password...
nope. I meant just local alias which pointed to local account only. this function MDaemon was supported for long long ago already :P

User avatar
mattg
Moderator
Moderator
Posts: 19994
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: Problem with Alias Address with External SMTP Authorization

Post by mattg » 2009-08-03 06:54

Yes, I understand what you are asking.
My understanding is that No, this is not currently possible in hMailserver, partly because of the fact that in hmailserver you can alias to an external address.

I see that there was a feature request that was moved to archive - http://www.hmailserver.com/forum/viewto ... =13&t=2268
Perhaps Martin can explain.
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

^DooM^
Site Admin
Posts: 13861
Joined: 2005-07-29 16:18
Location: UK

Re: Problem with Alias Address with External SMTP Authorization

Post by ^DooM^ » 2009-08-03 09:42

This is as matt says not possible. Add a feature request if you would like this feature adding to hMail then everyone can vote on it.
If at first you don't succeed, bomb disposal probably isn't for you! ヅ

Post Reply