No Outbound SMTP Relay Auth After Zimbra 6.0.7 Upgrade

      by Wyatt Walter

I upgraded my Zimbra server at home from 6.0.6 to 6.0.7 this weekend and during the upgrade, it seems to have lost a few settings for my outbound SMTP relay configuration (I relay through my ISP so the server can be at home). I thought I’d share what I had to go through to get it back. FYI, I followed this Zimbra doc to set it up the first time (which says it should carry across upgrades).

After the upgrade, when I tried to send to any external addresses, I got a bounce back from my ISP SMTP servers complaining that it required authentication:

Jul 3 14:32:03 mail postfix/smtp[14324]: F2F91B6002: to=, relay=smtp.relay.com[xx.xx.xx.xx]:587, delay=0.54, dela
ys=0.01/0.01/0.39/0.13, dsn=5.1.0, status=bounced (host smtp.relay.com[xx.xx.xx.xx] said: 550 5.1.0 Authentication required (in reply to MAIL FROM command))

Turns out SMTP auth had been disabled:

zimbra@mail:~$ postconf | grep smtp_sasl_auth
[snipped]
smtp_sasl_auth_enable = no
[snipped]

Easy enough to fix:

postconf -e smtp_sasl_auth_enable=yes

After a postfix reload, messages still wouldn’t relay but I got a different error in the logs:

Jul 3 14:34:17 mail postfix/smtp[15078]: warning: SASL authentication failure: No worthy mechs found
Jul 3 14:34:17 mail postfix/smtp[15078]: F0386B6002: to=, relay=smtp.relay.com[xx.xx.xx.xx]:587, delay=0.43, delays=0.01/0.02/0.39/0, dsn=4.7.0, status=deferred (SASL authentication failed; cannot authenticate to server smtp.relay.com[xx.xx.xx.xx]: no mechanism available)

A quick Google search later, I came across my problem in this forum post. The setting smtp_sasl_security_options had been set back to its default:

zimbra@mail:~$ postconf | grep smtp_sasl_security_options
smtp_sasl_security_options = noplaintext, noanonymous

It’s easy enough to fix:

postconf -e smtp_sasl_security_options=

postfix reload

After that, messages went through no problem.

Tags:
Filed under How-Tos / Tips : Comments (0) : Jul 4th, 2010