530 SMTP authentication required for 1 external seneder

Use this forum if you have installed hMailServer and want to ask a question related to a production release of hMailServer. Before posting, please read the troubleshooting guide. A large part of all reported issues are already described in detail here.
Post Reply
peter656761
New user
New user
Posts: 8
Joined: 2016-07-12 10:39

530 SMTP authentication required for 1 external seneder

Post by peter656761 » 2016-07-12 10:51

hMailserver 5.6.4-B2283 works really well except 1 issue. Our web people have created a form on the web site for sending emails to me. they come from peter@mydomain.com to peter@mydomain.com

these are the only mails that do not get through as it seems that authentication is being asked for- but if I issue the same commands using an external telnet server I dont get asked for authentication

"SMTPD" 2740 172374 "2016-07-11 17:33:23.671" "212.227.126.134" "SENT: 220 mydomain ESMTP"
"SMTPD" 1236 172374 "2016-07-11 17:33:23.702" "212.227.126.134" "RECEIVED: EHLO mout.kundenserver.de"
"SMTPD" 1236 172374 "2016-07-11 17:33:23.702" "212.227.126.134" "SENT: 250-mydomain[nl]250-SIZE 20480000[nl]250-AUTH LOGIN[nl]250 HELP"
"SMTPD" 824 172374 "2016-07-11 17:33:23.718" "212.227.126.134" "RECEIVED: MAIL FROM:<peter@mydomain.com> SIZE=5960"
"DEBUG" 824 "2016-07-11 17:33:23.718" "Total spam score: 0"
"SMTPD" 824 172374 "2016-07-11 17:33:23.718" "212.227.126.134" "SENT: 250 OK"
"SMTPD" 2980 172374 "2016-07-11 17:33:23.749" "212.227.126.134" "RECEIVED: RCPT TO:<ceter@mydomain.com>"
"SMTPD" 2980 172374 "2016-07-11 17:33:23.749" "212.227.126.134" "SENT: 530 SMTP authentication is required."
"SMTPD" 2740 172374 "2016-07-11 17:33:23.765" "212.227.126.134" "RECEIVED: QUIT"
"DEBUG" 2740 "2016-07-11 17:33:23.765" "Deleting message file."
"SMTPD" 2740 172374 "2016-07-11 17:33:23.780" "212.227.126.134" "SENT: 221 goodbye"
"DEBUG" 2980 "2016-07-11 17:33:23.780" "Ending session 172374"

I really appreciate any light on this
Thanks

User avatar
jimimaseye
Moderator
Moderator
Posts: 8156
Joined: 2011-09-08 17:48

Re: 530 SMTP authentication required for 1 external seneder

Post by jimimaseye » 2016-07-12 10:57

Assuming 212.227.126.134 is a fixed address of the webserver:

set up an IP range 212.227.126.134 to 212.227.126.134, allow LOCAL TO LOCAL Deliveries without Authentication, set priority at 20. (Alternatively, get the webserver mailer to use authentication.)
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

peter656761
New user
New user
Posts: 8
Joined: 2016-07-12 10:39

Re: 530 SMTP authentication required for 1 external seneder

Post by peter656761 » 2016-07-12 11:05

Thanks although I have the broad IP Range 0.0.0.0 - 255.255.255.255 allow local to local without Requiring smtp authetication so that should cover it already shouldnt it ?

Thanks

User avatar
jimimaseye
Moderator
Moderator
Posts: 8156
Joined: 2011-09-08 17:48

Re: 530 SMTP authentication required for 1 external seneder

Post by jimimaseye » 2016-07-12 11:19

Normally yes but without full knowledge of your setup its difficult to say.

1, do a DIAGNOSTIC and post here.
2, post full screen shot of ALL the IP Range DETAILS
3, State full details of all ROUTES you have set up.
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

peter656761
New user
New user
Posts: 8
Joined: 2016-07-12 10:39

Re: 530 SMTP authentication required for 1 external seneder

Post by peter656761 » 2016-07-12 11:35

Ok thanks

No routes specified

Diagnostics below and IP ranges attached
Regards
Test: Collect server details
hMailServer version: hMailServer 5.6.4-B2283
Database type: PostgreSQL

Test: Test IPv6
IPv6 support is available in operating system.

Test: Test outbound port
SMTP relayer is in use.
Trying to connect to host 10.0.0.10...
Trying to connect to TCP/IP address 10.0.0.10 on port 25.
Received: 220 EDGE-Server.axis.local Microsoft ESMTP MAIL Service ready at Tue, 12 Jul 2016 10:25:28 +0100.
Connected successfully.

Test: Test backup directory
ERROR: Backup directory has not been specified.

Test: Test MX records
Trying to resolve MX records for carolinehuish.co.uk...
Host name found: mail1.carolinehuish.co.uk
Host name found: mail.axisnetworks.co.uk

Test: Test local connect
Connecting to TCP/IP address in MX records for local domain domain carolinehuish.co.uk...
Trying to connect to host mail1.carolinehuish.co.uk...
Trying to connect to TCP/IP address 109.69.80.101 on port 25.
ERROR: It was not possible to connect.
Trying to connect to host mail.axisnetworks.co.uk...
Trying to connect to TCP/IP address 10.0.0.25 on port 25.
Received: 220 EX1-SERVER.axis.local Microsoft ESMTP MAIL Service ready at Tue, 12 Jul 2016 10:25:54 +0100.
Connected successfully.

Test: Test message file locations
Relative message paths are stored in the database for all messages.

Test: Test IP range configuration
No problems were found in the IP range configuration.
Attachments
IP Range Local .jpg
IP Range internet .jpg
IP Ban.jpg

User avatar
jimimaseye
Moderator
Moderator
Posts: 8156
Joined: 2011-09-08 17:48

Re: 530 SMTP authentication required for 1 external seneder

Post by jimimaseye » 2016-07-12 11:40

Do you have any DOMAINS set up on this machine?
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

peter656761
New user
New user
Posts: 8
Joined: 2016-07-12 10:39

Re: 530 SMTP authentication required for 1 external seneder

Post by peter656761 » 2016-07-12 11:41

The domain is carolinehuish.co.uk

User avatar
jimimaseye
Moderator
Moderator
Posts: 8156
Joined: 2011-09-08 17:48

Re: 530 SMTP authentication required for 1 external seneder

Post by jimimaseye » 2016-07-12 12:11

And in your opening post, your log says:

RECEIVED: MAIL FROM:<peter@mydomain.com>

where "@mydomain.com" is carolinehuish.co.uk? Can you double check (check the spelling).
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

peter656761
New user
New user
Posts: 8
Joined: 2016-07-12 10:39

Re: 530 SMTP authentication required for 1 external seneder

Post by peter656761 » 2016-07-12 12:42

yes in my opening post in the log I just replaced the client@carolinehuish.co.uk with peter@mydomain.com ( and mispelt it once when I replaced by mistake)

Thanks

User avatar
jimimaseye
Moderator
Moderator
Posts: 8156
Joined: 2011-09-08 17:48

Re: 530 SMTP authentication required for 1 external seneder

Post by jimimaseye » 2016-07-12 13:03

Peter I need to defer to others for their interpretation and analysis.

Because from what I see there shouldnt be any problem given what you have showed and tell me to be all there is. The only other thing I could ask you for is the realtime log (showing the email addresses without redacting them) as it might will be a spelling mistake. Also show a screen show showing your domains please.

BTW: your thread title, "....required for 1 external seneder", implies you are thinking that this sender is 'external'. This is not true. If the sender is of a domain that exists on the server, then it is seen as an INTERNAL sender.
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

peter656761
New user
New user
Posts: 8
Joined: 2016-07-12 10:39

Re: 530 SMTP authentication required for 1 external seneder

Post by peter656761 » 2016-07-12 13:30

Thanks - Yes it seems linked to that ip as I have telneted to the server and issued the commands as shown in the text and I dont get asked to authenticate - here is the log

DEBUG" 2740 "2016-07-11 17:33:23.671" "TCP connection started for session 172374"
"SMTPD" 2740 172374 "2016-07-11 17:33:23.671" "212.227.126.134" "SENT: 220 carolinehuish ESMTP"
"SMTPD" 1236 172374 "2016-07-11 17:33:23.702" "212.227.126.134" "RECEIVED: EHLO mout.kundenserver.de"
"SMTPD" 1236 172374 "2016-07-11 17:33:23.702" "212.227.126.134" "SENT: 250-carolinehuish[nl]250-SIZE 20480000[nl]250-AUTH LOGIN[nl]250 HELP"
"SMTPD" 824 172374 "2016-07-11 17:33:23.718" "212.227.126.134" "RECEIVED: MAIL FROM:<client@carolinehuish.co.uk> SIZE=5960"
"DEBUG" 824 "2016-07-11 17:33:23.718" "Total spam score: 0"
"SMTPD" 824 172374 "2016-07-11 17:33:23.718" "212.227.126.134" "SENT: 250 OK"
"SMTPD" 2980 172374 "2016-07-11 17:33:23.749" "212.227.126.134" "RECEIVED: RCPT TO:<client@carolinehuish.co.uk>"
"SMTPD" 2980 172374 "2016-07-11 17:33:23.749" "212.227.126.134" "SENT: 530 SMTP authentication is required."
"SMTPD" 2740 172374 "2016-07-11 17:33:23.765" "212.227.126.134" "RECEIVED: QUIT"
"DEBUG" 2740 "2016-07-11 17:33:23.765" "Deleting message file."
"SMTPD" 2740 172374 "2016-07-11 17:33:23.780" "212.227.126.134" "SENT: 221 goodbye"
"DEBUG" 2980 "2016-07-11 17:33:23.780" "Ending session 172374"
"DEBUG" 2740 "2016-07-11 17:33:23.827" "Creating session 172377"

User avatar
jimimaseye
Moderator
Moderator
Posts: 8156
Joined: 2011-09-08 17:48

Re: 530 SMTP authentication required for 1 external seneder

Post by jimimaseye » 2016-07-12 13:57

Yes, me too.
220 carolinehuish ESMTP
EHLO mout.kundenserver.de
250-carolinehuish
250-SIZE 20480000
250-AUTH LOGIN
250 HELP
MAIL FROM:<client@carolinehuish.co.uk> SIZE=5960
250 OK
RCPT TO:<client@carolinehuish.co.uk>
250 OK
quit
221 goodbye
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

peter656761
New user
New user
Posts: 8
Joined: 2016-07-12 10:39

Re: 530 SMTP authentication required for 1 external seneder

Post by peter656761 » 2016-07-12 14:27

Bizzare isnt it - any ideas ?

User avatar
jimimaseye
Moderator
Moderator
Posts: 8156
Joined: 2011-09-08 17:48

Re: 530 SMTP authentication required for 1 external seneder

Post by jimimaseye » 2016-07-12 14:29

Nope. Im afraid we need someone else's fresh eyes to read through the thread.
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: 530 SMTP authentication required for 1 external seneder

Post by Dravion » 2016-07-12 23:22

Looks like an TLS error, but there are more problems...

dig mx carolinehuish.co.uk +short
1 mail1.carolinehuish.co.uk.
5 mail.axisnetworks.co.uk.

#Mailserver
Host: mail1.carolinehuish.co.uk [109.69.80.101]
Port: 25/tcp hMailServer smtpd
Port: 110/tcp hMailServer pop3d
mail1.carolinehuish.co.uk Warning - Does not support TLS.

mail.axisnetworks.co.uk
25/tcp Microsoft Exchange smtpd

#DNS-Server
kara.ns.cloudflare.com [173.245.58.123] DDOS-Protection service
eric.ns.cloudflare.com [173.245.59.112] DDOS-Protection service

#Webserver
Host: s596719992.websitehome.co.uk (87.106.89.235)
21/tcp ProFTPD
80/tcp Apache2
81/tcp Apache2
443/tcp Apache2 SSL / RapidSSL SHA256

#Misc
mail.axisnetworks.co.uk Blacklisted by BARRACUDA
mail.axisnetworks.co.uk Blacklisted by MEGARBL
mail.axisnetworks.co.uk Blacklisted by SORBS SPAM
dns carolinehuish.co.uk SOA Serial Number Format is Invalid
carolinehuish.co.uk SOA Expire Value out of recommended range
spf carolinehuish.co.uk No records found

percepts
Senior user
Senior user
Posts: 5282
Joined: 2009-10-20 16:33
Location: Sceptred Isle

Re: 530 SMTP authentication required for 1 external seneder

Post by percepts » 2016-07-12 23:39

peter656761 wrote:hMailserver 5.6.4-B2283 works really well except 1 issue. Our web people have created a form on the web site for sending emails to me. they come from peter@mydomain.com to peter@mydomain.com

these are the only mails that do not get through as it seems that authentication is being asked for- but if I issue the same commands using an external telnet server I dont get asked for authentication

"SMTPD" 2740 172374 "2016-07-11 17:33:23.671" "212.227.126.134" "SENT: 220 mydomain ESMTP"
"SMTPD" 1236 172374 "2016-07-11 17:33:23.702" "212.227.126.134" "RECEIVED: EHLO mout.kundenserver.de"
"SMTPD" 1236 172374 "2016-07-11 17:33:23.702" "212.227.126.134" "SENT: 250-mydomain[nl]250-SIZE 20480000[nl]250-AUTH LOGIN[nl]250 HELP"
"SMTPD" 824 172374 "2016-07-11 17:33:23.718" "212.227.126.134" "RECEIVED: MAIL FROM:<peter@mydomain.com> SIZE=5960"
"DEBUG" 824 "2016-07-11 17:33:23.718" "Total spam score: 0"
"SMTPD" 824 172374 "2016-07-11 17:33:23.718" "212.227.126.134" "SENT: 250 OK"
"SMTPD" 2980 172374 "2016-07-11 17:33:23.749" "212.227.126.134" "RECEIVED: RCPT TO:<ceter@mydomain.com>"
"SMTPD" 2980 172374 "2016-07-11 17:33:23.749" "212.227.126.134" "SENT: 530 SMTP authentication is required."
"SMTPD" 2740 172374 "2016-07-11 17:33:23.765" "212.227.126.134" "RECEIVED: QUIT"
"DEBUG" 2740 "2016-07-11 17:33:23.765" "Deleting message file."
"SMTPD" 2740 172374 "2016-07-11 17:33:23.780" "212.227.126.134" "SENT: 221 goodbye"
"DEBUG" 2980 "2016-07-11 17:33:23.780" "Ending session 172374"

I really appreciate any light on this
Thanks
Is that your typo when posting here or is it the website using the wrong user name of "ceter@mydomain.com"?
Last edited by percepts on 2016-07-12 23:49, edited 1 time in total.

User avatar
jimimaseye
Moderator
Moderator
Posts: 8156
Joined: 2011-09-08 17:48

Re: 530 SMTP authentication required for 1 external seneder

Post by jimimaseye » 2016-07-12 23:49

He has shown the actual log - no typos or spelling mistakes included:
peter656761 wrote:Thanks - Yes it seems linked to that ip as I have telneted to the server and issued the commands as shown in the text and I dont get asked to authenticate - here is the log

DEBUG" 2740 "2016-07-11 17:33:23.671" "TCP connection started for session 172374"
"SMTPD" 2740 172374 "2016-07-11 17:33:23.671" "212.227.126.134" "SENT: 220 carolinehuish ESMTP"
"SMTPD" 1236 172374 "2016-07-11 17:33:23.702" "212.227.126.134" "RECEIVED: EHLO mout.kundenserver.de"
"SMTPD" 1236 172374 "2016-07-11 17:33:23.702" "212.227.126.134" "SENT: 250-carolinehuish[nl]250-SIZE 20480000[nl]250-AUTH LOGIN[nl]250 HELP"
"SMTPD" 824 172374 "2016-07-11 17:33:23.718" "212.227.126.134" "RECEIVED: MAIL FROM:<client@carolinehuish.co.uk> SIZE=5960"
"DEBUG" 824 "2016-07-11 17:33:23.718" "Total spam score: 0"
"SMTPD" 824 172374 "2016-07-11 17:33:23.718" "212.227.126.134" "SENT: 250 OK"
"SMTPD" 2980 172374 "2016-07-11 17:33:23.749" "212.227.126.134" "RECEIVED: RCPT TO:<client@carolinehuish.co.uk>"
"SMTPD" 2980 172374 "2016-07-11 17:33:23.749" "212.227.126.134" "SENT: 530 SMTP authentication is required."
"SMTPD" 2740 172374 "2016-07-11 17:33:23.765" "212.227.126.134" "RECEIVED: QUIT"
"DEBUG" 2740 "2016-07-11 17:33:23.765" "Deleting message file."
"SMTPD" 2740 172374 "2016-07-11 17:33:23.780" "212.227.126.134" "SENT: 221 goodbye"
"DEBUG" 2980 "2016-07-11 17:33:23.780" "Ending session 172374"
"DEBUG" 2740 "2016-07-11 17:33:23.827" "Creating session 172377"
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

User avatar
mattg
Moderator
Moderator
Posts: 20222
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: 530 SMTP authentication required for 1 external seneder

Post by mattg » 2016-07-13 01:45

jimimaseye wrote:Do you have any DOMAINS set up on this machine?
peter656761 wrote:he domain is carolinehuish.co.uk
What other domains are hosted on this hMailserver?
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

User avatar
mattg
Moderator
Moderator
Posts: 20222
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: 530 SMTP authentication required for 1 external seneder

Post by mattg » 2016-07-13 01:49

ALSO, how long since this server was restarted?
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

peter656761
New user
New user
Posts: 8
Joined: 2016-07-12 10:39

Re: 530 SMTP authentication required for 1 external seneder

Post by peter656761 » 2016-07-13 07:06

Hi

I don't think it is TLS as if a server tried to send an incoming mail using TLS the log is very different and just says - unexpected characters and disconnects

This is the only domain hosted on this server

It's been a week since last reboot



Thanks

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: 530 SMTP authentication required for 1 external seneder

Post by Dravion » 2016-07-13 07:47

Sorry this is indeed your problem.

According to RFC 4954 the only remaining method for AUTH SMTP nowdays requires TLS for AUTH SMTPor it simply doesnt work at all. Thats why your log is showing AUTH SMTP is required errors and rejects incomning connections with State 530.

Enable TLS and report back the new log entries.

User avatar
jimimaseye
Moderator
Moderator
Posts: 8156
Joined: 2011-09-08 17:48

Re: 530 SMTP authentication required for 1 external seneder

Post by jimimaseye » 2016-07-13 08:53

Peter.....

Can you double check your IP RANGES in case there is a range (autoban range) covering 212.227.126.134.

And restart your Hmailserver service and try again.


@other helpers: Guys, the thread has the full details of his setup:

a, a full unedited log of the connection failed for 212.227.126.134 - no TLS in use, no auth logins in use (and none required), no TLS forced or even being offered.
b, a full unedited log of replication (by me) of a connection using the same details/commands showing it is not blocked and so it seems to be IP specific.
c, screenshots of IP RANGEs - nothing specifically blocking this 212.227.126.134 connection
d, single domain in use - matching the account that is being used as FROM and TO (which is subsequently being rejected).
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: 530 SMTP authentication required for 1 external seneder

Post by Dravion » 2016-07-13 12:46

530
Normally, an authentication problem.
But sometimes it's about the recipient's server blacklisting yours, or an invalid email address.
Configure your settings providing a username+password authentication. If the error persists, check all your recipients' addresses and if you've been blacklisted.

mail1.carolinehuish.co.uk Warning - Does not support TLS

##MX Entries for domain carolinehuish.co.uk
1 mail1.carolinehuish.co.uk.
5 mail.axisnetworks.co.uk.

#mail.axisnetworks.co.uk is blacklisted on:
mail.axisnetworks.co.uk Blacklisted by BARRACUDA
mail.axisnetworks.co.uk Blacklisted by MEGARBL
mail.axisnetworks.co.uk Blacklisted by SORBS SPAM

.

User avatar
jimimaseye
Moderator
Moderator
Posts: 8156
Joined: 2011-09-08 17:48

Re: 530 SMTP authentication required for 1 external seneder

Post by jimimaseye » 2016-07-13 14:08

Dravion wrote:530
Normally, an authentication problem.
But sometimes it's about the recipient's server blacklisting yours, or an invalid email address.
Configure your settings providing a username+password authentication. If the error persists, check all your recipients' addresses and if you've been blacklisted.

mail1.carolinehuish.co.uk Warning - Does not support TLS

##MX Entries for domain carolinehuish.co.uk
1 mail1.carolinehuish.co.uk.
5 mail.axisnetworks.co.uk.

#mail.axisnetworks.co.uk is blacklisted on:
mail.axisnetworks.co.uk Blacklisted by BARRACUDA
mail.axisnetworks.co.uk Blacklisted by MEGARBL
mail.axisnetworks.co.uk Blacklisted by SORBS SPAM
Dravion:

This problem is about the OP's hmailserver rejecting an external server, not the other way round. HMS is ISSUING the 530. So issues of his HMS being blacklisted is irrelevant. And the log file shows that there is a SPAM SCORE of 0 for the connecting webserver address 212.227.126.134.

Any reference to 5 mail.axisnetworks.co.uk. being blacklisted is irrelevant as it is not involved in the connection of this HMS and the inbound connecting server 212.227.126.134. (There are thousands of blacklists servers in the world - and all remain irrelevant if they are not the ones being used).

Also, there was no attempt to connect with TLS so it is not a TLS verification/authentication failure. This is because HMS (as you have pointed out) does not support incoming TLS connections. There is also nothing forcing a TLS connection because other servers, coming in on the same 'Internet' IP RANGE are able to connect and send without it. And it is not trying to 'authenticate' as a user.

The recipient addresses are fine and do not reject other addresses trying to send an email with the same addresses, it is only 212.227.126.134.

The logs, tests, screenshots and reports are all in this thread.
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: 530 SMTP authentication required for 1 external seneder

Post by Dravion » 2016-07-13 14:11

Really?
"SMTPD" 2980 172374 "2016-07-11 17:33:23.749" "212.227.126.134" "SENT: 530 SMTP authentication is required."
"SMTPD" 2740 172374 "2016-07-11 17:33:23.765" "212.227.126.134" "RECEIVED: QUIT"
"DEBUG" 2740 "2016-07-11 17:33:23.765" "Deleting message file."

User avatar
jimimaseye
Moderator
Moderator
Posts: 8156
Joined: 2011-09-08 17:48

Re: 530 SMTP authentication required for 1 external seneder

Post by jimimaseye » 2016-07-13 14:20

Really, yes.

Whats your point in highlighting the very problem that we are trying to solve??

If you look back in the thread you will see that none of the IP RANGES require 'Authentication required'. And that a test with the same credentials works:

220 carolinehuish ESMTP
HELO mout.kundenserver.de
250 Hello.
MAIL FROM:<client@carolinehuish.co.uk> SIZE=5960
250 OK
RCPT TO:<client@carolinehuish.co.uk>
250 OK

DATA
354 OK, send.
FROM: jimimaseye - Hmailserver
TO: <client@carolinehuish.co.uk>
subject: Hmailserver test -

viewtopic.php?p=188041#p188041


.
250 Queued (9.312 seconds)
Not a TLS in sight. And the only difference is that I am not 212.227.126.134
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: 530 SMTP authentication required for 1 external seneder

Post by Dravion » 2016-07-13 14:33

Sorry Jimi, you are oon a complete wrong track:

This has nothing todo with Caronline Huish Domain whatsoever. This is the General Customer
Mailservice System of the German Internet Provider 1&1 . They doesnt even use hMailServer in any shape or form

217.72.192.73 mout.kundenserver.de
217.72.192.74 mout.kundenserver.de
217.72.192.75 mout.kundenserver.de
212.227.17.10 mout.kundenserver.de
212.227.17.13 mout.kundenserver.de
212.227.17.24 mout.kundenserver.de
212.227.126.130 mout.kundenserver.de
212.227.126.131 mout.kundenserver.de
212.227.126.133 mout.kundenserver.de
212.227.126.134 mout.kundenserver.de
212.227.126.135 mout.kundenserver.de
212.227.126.187 mout.kundenserver.de

http://postmaster.1and1.com/en/e-mail-server/

mout is only used for forwarding and relaying. Simply you connecting to two diffrent systems.
If you try to diagnose errors, stick to the system where the error is generated:

mail1.carolinehuish.co.uk (hMailServer smtpd)

User avatar
jimimaseye
Moderator
Moderator
Posts: 8156
Joined: 2011-09-08 17:48

Re: 530 SMTP authentication required for 1 external seneder

Post by jimimaseye » 2016-07-13 14:42

The log file shown by the OP is from his hmailserver logs showing an incoming connection from 212.227.126.134 (the mout relay). It is HMS that is issuing the 530 AUTHENTICATION REQUIRED. So how is this nothing to do with his hmailserver? It is his HMS that is issuing the 530 rejection. The same hmailserver that doesnt issue a rejection if I connect to it (as shown in the last post).

Or.... are you saying that the HMS that I connect to is not the same HMS that he has reported from?
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: 530 SMTP authentication required for 1 external seneder

Post by Dravion » 2016-07-13 14:56

Let me put it this way:

If mout.kundenserver.de works as an smtp proxy then you "should" talk to Peters hMailServer Installation, originally reachable under mail1.carolinehuish.co.uk (NGINX SMTP can do something like this).

But if mout.kundenserver.de is not configured as transparent SMTP proxy (and more like an classic
Relay server) then it will receive your telneted mail, enque it and will resend it as realy smtpd to
mail1.carolinehuish.co.uk in some point in time.

Anyway: This is what hMailServer does if the conditions for Error 530 are true:

Code: Select all

  if (authenticationRequired && !isAuthenticated_)
      {
         // Authentication is required, but the user hasn't authenticated.
         SendErrorResponse_(530, "SMTP authentication is required.");
         AWStats::LogDeliveryFailure(GetIPAddressString(), current_message_->
         GetFromAddress(), sRecipientAddress, 530);
         return;
      }
Source:
https://github.com/hmailserver/hmailser ... n.cpp#L672

User avatar
jimimaseye
Moderator
Moderator
Posts: 8156
Joined: 2011-09-08 17:48

Re: 530 SMTP authentication required for 1 external seneder

Post by jimimaseye » 2016-07-13 15:04

You are not explaining anything that makes any difference to me.

Ultimately, the code, as you have shown, says

if SMTP authentication is required and SMTP authentication has not been performed then issue 530.

Well, we know this. We know this from knowledge of HMS and from the logs.

The fact is, the IP RANGES that dictate when SMTP AUTHENTICATION is required, does not say that smtp is required.

So, the question is, why is HMS expecting SMTP AUTHENTICATION REQUIRED then the ip ranges say otherwise.
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

User avatar
mattg
Moderator
Moderator
Posts: 20222
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: 530 SMTP authentication required for 1 external seneder

Post by mattg » 2016-07-13 15:19

@peter656761
Do you have anything in Incoming relays in your hmailserver

or any routes
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: 530 SMTP authentication required for 1 external seneder

Post by Dravion » 2016-07-13 16:37

@Jimmi

The mismatch is maybe related to mout.kundenserver.de
This server needs for sure TLS and SMTP AUTH and resend all mails to Peters hMailServer
installation and only at the end of this chain ip ranges can be effective.

User avatar
jimimaseye
Moderator
Moderator
Posts: 8156
Joined: 2011-09-08 17:48

Re: 530 SMTP authentication required for 1 external seneder

Post by jimimaseye » 2016-07-13 17:27

mattg wrote:@peter656761
Do you have anything in Incoming relays in your hmailserver

or any routes
He did say earlier that there were no routes (confirmed in the screenshots).

Truly bizarre.
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

percepts
Senior user
Senior user
Posts: 5282
Joined: 2009-10-20 16:33
Location: Sceptred Isle

Re: 530 SMTP authentication required for 1 external seneder

Post by percepts » 2016-07-13 18:05

I have a suspicion that the webserver software that is sending the mail may be doing its own connection to hmailserver and trying to authenticate incorrectly, possibly even sending a password. But we have no idea what that software or how its actually trying to send the email. It may be unix based or it may be windows based. It may be opening its own mail sockets or it may be relying on some webserver mta software such as sendmail. I suspect hmail is being confused by the method being used to connect to it which is quite possibly non standard. Who knows, its all guesswork.

So questions to OP are: is the webserver a windows webserver or unix webserver, which scripting language is being used, is the scriptng language doing its own socket opens and closes or is the scripting language using some third party class or mta software, if so, has that software been configured to correctly try and send mail without attempting to authenticate. The list of questions goes on....

If you can send and receive mail via hmail using that user name from a normal email client remotely such as thunderbird or outlook etc, then it points very strongly to the webserver mail sending routines as being the casue of the problem and you won't solve it by looking at hmail logs. Your web form coders need to thouroughly check what they have done and whether are truly trying to send mail without attempting to authenticate.

User avatar
Dravion
Senior user
Senior user
Posts: 1466
Joined: 2015-09-26 11:50
Location: Germany
Contact:

Re: 530 SMTP authentication required for 1 external seneder

Post by Dravion » 2016-07-13 18:23

@percepts

The Webserver is a Linux box and mx 0 is a Windows server+ hms (TLS disabled) and mx 1 is windows server + ms exchange. Take a look at my recon report above. The second mx is also blacklisted by some blacklist services and mout.kundenserver.de is used as transparent smtp proxy or relayserver which runs a unix postfix mta.

percepts
Senior user
Senior user
Posts: 5282
Joined: 2009-10-20 16:33
Location: Sceptred Isle

Re: 530 SMTP authentication required for 1 external seneder

Post by percepts » 2016-07-13 19:34

well find the bounced email and see what it contains.

percepts
Senior user
Senior user
Posts: 5282
Joined: 2009-10-20 16:33
Location: Sceptred Isle

Re: 530 SMTP authentication required for 1 external seneder

Post by percepts » 2016-07-13 21:15

I must slowing up :roll:

The obvious solution to this problem is to tell your web developers NOT to use their own relaying service and connect to your mailserver direct which bypasses all these other mail servers.

If they are using PHP they can use PHPMailer class which is free at https://github.com/PHPMailer/PHPMailer and use that to send directly from your own mailserver to your email address which is a fully local send. PHPMailer behaves like a normal email client and you just set params for smtp.server.com, username (and passoword if you set authentication), port etc. It can send using tls if necesary and can send mail without another sending mailserver. A lot of options to play with which should bypass the problem.
If they are using some other scripting language there will be plenty of similar functions/classes which can be used if they take the trouble to look for them.

I assume the webserver has port 25 outbound available but if not you can set up any port on your mailserver and get them to send these special emails for you on that port. All they've got to do is find a port they can use and let you know what it is. Problem solved!!! :lol: :lol: :lol:

Post Reply