Posted by This guidance will describe how to configure outgoing smtp authentication on Zimbra 8.5. If you have Zimbra 8.0, you can see at the following link : http://www.excellent.co.id/product-services/zimbra/tips-zimbra-mta-relay-menggunakan-user-authentication-pada-zimbra-8/
INFORMATION
SMTP Relay : mailrelay.example.com username : relay@example.com password : RelayExample port : 587/465
Copy and paste this command to your Zimbra server
echo mailrelay.example.com relay@example.com:RelayExample > /opt/zimbra/conf/relay_password postmap /opt/zimbra/conf/relay_password postmap -q mailrelay.example.com /opt/zimbra/conf/relay_password zmprov ms `zmhostname` zimbraMtaSmtpSaslPasswordMaps lmdb:/opt/zimbra/conf/relay_password zmprov ms `zmhostname` zimbraMtaSmtpSaslAuthEnable yes zmprov ms `zmhostname` zimbraMtaSmtpCnameOverridesServername no zmprov ms `zmhostname` zimbraMtaSmtpTlsSecurityLevel may zmprov ms `zmhostname` zimbraMtaSmtpSaslSecurityOptions noanonymous zmprov ms `zmhostname` zimbraMtaRelayHost mailrelay.example.com:587
Don’t forget to change all information system on above with your system. Updates configuration will be automatic within 2 minutes. This is example log on my Zimbra mail server when sending to outside
to=<xxxxx@gmail.com>, relay=mailrelay.example.com[103.xx.xxx.xxx]:587, delay=7.7, delays=0/0.01/0.16/7.5, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 636893D40E1)
Good luck and hopefully useful 😀
Source : http://wiki.zimbra.com/wiki/Outgoing_SMTP_Authentication
hi after doing this i lost incoming emails id there a connection with this commands? how can i undo this command thanks
im sory local mail is working but may outgoing smtp still not sending out side thanks im using zimbra 8.5 im receiving host not found, do i have to configure may router for outgoing smtp?
Hi Beph,
For sending email to outside, you should have some information below :
1. You should have a real domain
2. You should have internet connection
3. Your internet connection not blocking port 25 outgoing
4. Your public IP not blocked on RBL
maybe i have to use a new ip address thanks i already check the status of ip address
how can i undo this command? thanks
Hi Michael Lam,
Please just run the following command
iman, thanks a lot,
but i got the error :warning: lmdb:/opt/zimbra/conf/relay_password is unavailable. open database /opt/zimbra/conf/relay_password.lmdb: No such file or directory
Hi Michael Lam,
Are you has been do the following command?
yes
hi iman,
it worked.
thanks a lot !!!!
Hi Michael Lam,
Glad to hear that 😀
Hi Iman, Just a question.
This procedure can be used in a domain level?
Hi Miquel,
By default, this procedure is for server level. However, you could combine with this configuration : https://imanudin.net/2014/12/26/relay-tips-based-on-userdomain-sender-on-zimbra-8-5-8-6/ for achieve domain level
Ok, if i do the configuration based on user/domain sender I shouldn’t do the last step in the procedure, isn’t?
Hi Miquel,
Yes, that’s right
Hey this has been hectic to me.. I need to setup only a smtp server to relay emails on our network. We have blocked port 25 and would like to use authentication + ssl. we have several users with different domain names ie xxx1.com, bvgs.com
i have managed to install zimbra on centos6. may be i missed foundamental requirements at the start stage. I kindly need help
Assalamualaikum Pak Iman,
Saya ada problem,sebelumnya posisi saya sudah ikuti aran, namun masih error, kemudian saya tutup lagi dengan cara
zmprov ms `zmhostname` zimbraMtaRelayHost “”
Kemudian, saya hapus relay di adminzimbra 7071, lalu saya mau aktifkan ulang, namun muncul error
SASL authentication failed; server mailrelay.xxxxxx.co.id[8.xxx.xxx.xxx] said: 535 5.7.8 Error: authentication failed: authentication failure)
Mohon arahannya pak
i have a followed these two guides but i hit the rock: How To Install Zimbra 8.6 on Ubuntu 14.04 Part 1 & How To Install Zimbra 8.6 on Ubuntu 14.04 Part 2
sorry they should be centos6 not ubuntu.
Am stuck
i run a small isp with clients that require smtp to relay their emails.
I have extra free public ips on a /29 from my isp
My isp has blocked port 25, normally we use their smtp to relay emails on our network but we are so many that send junk/spam and make our public ip blacklisted. Now i ended up blocking port 25 on my network. unlisted the ip from RBL. Now i require to set up an smtp server that each client has his/her authentication credentials so as to know who is spamming and i can deactivate their account
I need to achieve to create an smtp server only.
Now this is what i have:
1.valid domain name : ie- example.com
2. i have internet connection with static ip
3 . i decide to use host name as: nbi , so i head to my cpanel and create a subdomain nbi.example.com
4. I have assigned my sever: 192.168.20.2 with gateway 192.168.20.1
5. I install cento6.7
6. Prepare my centos for zimbra with this :
wget -c https://imanudin.net/wp-content/uploads/2015/08/prepare-zimbra-centos6.sh
chmod +x prepare-zimbra-centos6.sh
sh prepare-zimbra-centos6.sh
7. after i get to install zimbra folloowing this : https://imanudin.net/2015/03/14/how-to-install-zimbra-8-6-on-centos-6-part-2/
8. i hit a rock while nslookup nbi.example.com does not resolve to my local ip:192.168.20.2 but resolves to my web host shared ip.
9. i proceed and not change the host and at last i get my emails look admin@nbi.example.com
10 everything runs ok but am stuck not aware were to start from .
11. am able to login to zimbra admin console.
Hi Ric,
For the first time, you can install Zimbra normally and can sent and receiving. After all sent and receiving normal, you can improve your server with some method below :
https://imanudin.net/2014/09/08/how-to-install-policyd-on-zimbra-8-5/
https://imanudin.net/2014/09/09/zimbra-tips-how-to-configure-rate-limit-sending-message-on-policyd/
https://imanudin.net/2014/09/11/improving-anti-spam-reject-unlisted-domain-on-zimbra-8-5/
https://imanudin.net/2014/09/12/zimbra-tips-how-to-protect-policyd-webui/
https://imanudin.net/2014/09/29/how-to-restrict-users-sending-to-certain-usersdomains-with-policyd/
https://imanudin.net/2014/09/30/script-automatic-configure-cbpolicyd-on-zimbra-8-5/
https://imanudin.net/2014/09/07/how-to-improvement-sender-must-loginenforcing-a-match-between-from-address-and-sasl-username-on-zimbra-8-5/
Thank you so much. I was able to set up Zimbra.
Now i need to make it an smtp server for mail relay on my network.
hi iman
i need to disable the disclaimer content for single user in zimbra 8.5..
Hi Ram,
For this time, it’s not possible for me. But your requirement is good for testing in the lab 😉
Basically, we are using two email servers in techmech one is for internal emailing that is with extension 1@techmech-uae.com (Zimbra Email) and 2nd one is for external with extension 2@techmech.net on which only selected users have access.
By rule, the uae.com email users are not allowed to send emails outside domain but they could send and receive emails from our second email techmech.net.
Please let us know how you can configure this in Zimbra email.
Hi Syamkumar,
You can configure the first email server for sending/receive email local only like guidance on this link : https://imanudin.net/2014/09/29/how-to-restrict-users-sending-to-certain-usersdomains-with-policyd/
The guidance is for sending, but you can adjust for receiving too
Hi,
how can I use different smtp accounts ?
in zimbra i’ll import different accounts and I need that every account can send trought the same smtp external server but with his own user and pass
Hello Riccardo,
I am haven’t try it
Dear Iman,
Thank you for your explanation, i’m using zimbra 8.6 and i’ve try your command and try to test sending email to yahoo. I got a bounce back email from mailer-daemon the email says ” : host myinternetdomain.com[192.190.XX.XXX] said:
550-Verification failed for 550-The mail
server could not deliver mail to user@mylocaldomain.local. The
account or domain may not exist, they may be blacklisted, or missing the
proper dns entries. 550 Sender verify failed (in reply to RCPT TO command)
”
I have set the ” echo mail.myinternetdomain.com user@myinternetdomain.com:Password > /opt/zimbra/conf/relay_password ” but why the bounce back mail is said 550-The mail
server could not deliver mail to user@mylocaldomain.local. The
account or domain may not exist, they may be blacklisted.
Why mail deliver to local domain? Any wrong with my configuration?
Thank you
Hello Dapid,
You should use domain that recognized by internet. Your domain testing is mylocaldomain.local and i think your domain cannot recognized by internet
Dear Iman,
I’m still confuse, newbie about this. How to make mylocaldomain.local could recognized by internet. My zimbra is using ip private, not ip public.
Thank you
Hello Dapid,
You should use domain known on the internet. You can install your Zimbra with your domain
Dear Iman,
I want to create my local mail server has a function to download email in user a@myinternetdomain.com to a@mylocaldomain.com and distribute to mail client, it is success using fetchmail. Then the problem is when i try to sending out the email i got the error bounce mail. Could i use the smtp.myinternetdomain.com for sending out mail from local server?
Thank you
Hello Dapid,
You can use real domain (local server or on the internet). When you sending email and get rejected by server, it’s caused your domain name could not recognized (mylocaldomain).
You still can use Fetchmail although same domain (local and internet)
Dear Iman,
Thank you for your time,
How do i recognized mylocaldomain in internet?
Thank you
Hello Dapid,
You should registered your domain on registrar such as Godaddy, namecheap and etc
Dear Iman,
Thank you, i just write a wrong port in my smtp relay configuration. It should using port 465. I still get stuck if i use smtp.myinternetdomain.com, i got the postfix status from zimbra log the mail is status=deferred lost connection with myinternetdomain.com while receiving the initial server greeting. But if i use the smtp.gmail.com, everything works good.
hi i have set up the zimbra here and its working internal/local
we have an existing smtp email provider/host from using
out MS outlook
how can i point our local zimbra for outgoing msgs to our existing smtp email provider/host
using our pop and smtp settings
Hello Beph,
Perfect. You can use this guidance for your purpose
hi, sir iman thanks it works upon doing this. so i have to input all users with the same process?
how about incoming mail from our mail do you have a guide?
thanks a lot this site is a big help.
god bless and more power iman.
Hello Beph,
Did you mean this configuration? : https://imanudin.net/2015/03/15/how-to-configure-receive-email-from-the-internetoutside/
hi thanks for replying yes that link is correct if directly configured from our office.
But our emails are hosted by our provider via incoming Pop and SMTP outlook configuration.
meaning to say our email will go first from our email host provider and will be downloaded by zimbra server that i created here at our office.
Hi Iman,
Thank you for your time to response my question before.
I am still stuck with my smtp authentication.
First let me explain my concept, i would like to create local mail server using zimbra at my office. My local mail server installed under nat and using ip private. I would like to create the local mail server has a function to download email from some user in my internet mail server. It success using fetchmail. But if i want to sending email out to all internet domain, i still get stuck. I have following your article above. I already have a domain that could be recognize from internet and already using static ip public. My local server could be accessed from another network using A record pointing to my ip public.
My question is what should I have to prepare to apply my concept? Do I setting up my internet domain in my local server like your explanation before?
Thank You…
Hello Dapid,
Yes, you should configure internet domain on your local server. I can use imanudin.net domain on my local Zimbra. So, i can retrieve email by fetchmail and sending email directly from my local server (have connection internet or relay to relay server)
Hi Iman,
Thanks for your response. I will try to reconfigure my local mail server. One more question, is it possible if i am using a sub domain from myinternetdomain.com for my local mail server?
Thank you
Hi Iman,
I have finished reconfigure my local mail server and set a sub domain from my intenet domain to my local mail server. I have try send and receive from and success. But i still stuck if i try to relay the smtp to myinternetdomain.com, i got bounce mail like this: 550 SMTP
AUTH is required for message submission on port 587 (in reply to RCPT TO
command)
Please advise…
Thank you
Hello Dapid,
Yes, it’s possible 🙂
Many Thanks Iman,
How about this error ” 550 SMTP
AUTH is required for message submission on port 587 (in reply to RCPT TO
command) ”
I still not done when relay to myinternetdomain.com
Hello,
Are you have been perform all process below?
Hi Iman,
Yes i already following all process below.
Could you help me to track my problem?
Thanks in advance
please i want to known if there is a way to receive email from internet with Zimbra Server without register over a dynamic DNS or domain ? (MX record configuration)
Hello Adrien,
No, you cannot receive email directly if not have real domain
Hi Iman,
I’m still have no deal with smtp authentication. Do you have another tips to make the recipients read my email address as @myinternetdomain.com address? Even the mail send through my local mail server with dns @local.myinternetdomain.com
Thanks a lot
Hi Iman,
Hope u r doing good…. I followed the steps to configure the Zimbra. I can able to receive all the mails to my newly configured mail ID but whenever i am sending to other domains most of the mails going in spam any few domains not receiving my mails. pls advice…
Hello,
Please improve your email server with PTR, SPF, DKIM and DMARC. The following are the guidance for configure SPF and DKIM
– SPF : https://imanudin.net/2015/02/09/how-to-configure-spf-sender-policy-framework-records-for-email-server/
– DKIM : https://imanudin.net/2015/02/10/how-to-configure-and-validate-dkim-records-on-zimbra/
Thank you so much Mr.Iman… Now everything working fine 🙂
hi iman ,
can you please me with the error i am facing
few mails are going in to deffer and the error is
time out while sending message body
thanks
hi mas Iman,
saya sedang membuat email server zimbra, saat saya test internal OK, test receive dari external juga OK, tapi pada waktu test sending gagal..
dbi hasil log di zimbra :
Mar 10 11:27:20 mail postfix/smtpd[6877]: connect from mail.domainx.in[10.150.x.xx]
Mar 10 11:27:20 mail postfix/smtpd[6877]: NOQUEUE: filter: RCPT from mail.domainx.in[10.150.x.xx]: : Sender address triggers FILTER smtp-amavis:[127.0.0.1]:10026; from= to= proto=ESMTP helo=
Mar 10 11:27:20 mail postfix/smtpd[6877]: 41DD8420D85: client=mail.domainx.in[10.150.x.xx]
Mar 10 11:27:20 mail postfix/cleanup[6914]: 41DD8420D85: message-id=
Mar 10 11:27:20 mail postfix/qmgr[12245]: 41DD8420D85: from=, size=834, nrcpt=1 (queue active)
Mar 10 11:27:20 mail postfix/smtpd[6877]: disconnect from mail.domainx.in[10.150.x.xx]
Mar 10 11:27:20 mail postfix/dkimmilter/smtpd[6980]: connect from localhost[127.0.0.1]
Mar 10 11:27:20 mail postfix/dkimmilter/smtpd[6980]: 67D01420D86: client=localhost[127.0.0.1]
Mar 10 11:27:20 mail postfix/cleanup[6914]: 67D01420D86: message-id=
Mar 10 11:27:20 mail postfix/qmgr[12245]: 67D01420D86: from=, size=1319, nrcpt=1 (queue active)
Mar 10 11:27:20 mail postfix/dkimmilter/smtpd[6980]: disconnect from localhost[127.0.0.1]
Mar 10 11:27:20 mail postfix/smtp[6929]: 41DD8420D85: to=, relay=127.0.0.1[127.0.0.1]:10026, delay=0.25, delays=0.06/0.01/0.01/0.18, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10030): 250 2.0.0 Ok: queued as 67D01420D86)
Mar 10 11:27:20 mail postfix/qmgr[12245]: 41DD8420D85: removed
Mar 10 11:27:20 mail postfix/amavisd/smtpd[7134]: connect from localhost[127.0.0.1]
Mar 10 11:27:20 mail postfix/amavisd/smtpd[7134]: EC931420D85: client=localhost[127.0.0.1]
Mar 10 11:27:20 mail postfix/cleanup[6914]: EC931420D85: message-id=
Mar 10 11:27:20 mail postfix/qmgr[12245]: EC931420D85: from=, size=1687, nrcpt=1 (queue active)
Mar 10 11:27:20 mail postfix/amavisd/smtpd[7134]: disconnect from localhost[127.0.0.1]
Mar 10 11:27:20 mail postfix/smtp[7005]: 67D01420D86: to=, relay=127.0.0.1[127.0.0.1]:10032, delay=0.56, delays=0.05/0.01/0/0.5, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as EC931420D85)
Mar 10 11:27:20 mail postfix/qmgr[12245]: 67D01420D86: removed
Mar 10 11:27:22 mail postfix/smtp[7136]: connect to gmail-smtp-in.l.google.com[74.125.200.27]:25: Connection refused
Mar 10 11:27:22 mail postfix/smtp[7136]: connect to alt1.gmail-smtp-in.l.google.com[74.125.28.27]:25: Connection refused
Mar 10 11:27:22 mail postfix/smtp[7136]: connect to alt2.gmail-smtp-in.l.google.com[74.125.30.27]:25: Connection refused
Mar 10 11:27:22 mail postfix/smtp[7136]: connect to alt3.gmail-smtp-in.l.google.com[173.194.197.26]:25: Connection refused
Mar 10 11:27:22 mail postfix/smtp[7136]: connect to alt4.gmail-smtp-in.l.google.com[173.194.219.26]:25: Connection refused
Mar 10 11:27:22 mail postfix/smtp[7136]: EC931420D85: to=, relay=none, delay=1.5, delays=0.01/0.01/1.5/0, dsn=4.4.1, status=deferred (connect to alt4.gmail-smtp-in.l.google.com[173.194.219.26]:25: Connection refused)
kira2 masih ada kurang dimana yah mas? bisa kasih advicenya
terimakasih
Hi mas,
Jika dicek di log, pesannya connection refused. Coba pastikan beberapa info berikut :
– Pastikan port 25 outgoing open di firewall-nya Linux. Jika sudah open
– Pastikan port 25 outgoing open di firewall/router. Jika sudah open
– Coba tanya pada provider internet koneksi apakah port 25 outgoing ditutup sehingga tidak bisa kirim email
Hi Iman
Thank you for the great tutorials. I have followed many of your tutorials. But currently i’m having some trouble with my Zimbra 8.7 server, that is it is sending mails from unknown user/domain which showing the “Origin Host” as localhost.localdomain so I want to enforce authentication to sending mails from localhost.localdomain. Can you kindly give me a way how can I do it?
Thank you,
Hamid
Hi Hamid,
You can apply this improvement : https://imanudin.net/2014/09/07/how-to-improvement-sender-must-loginenforcing-a-match-between-from-address-and-sasl-username-on-zimbra-8-5/
Hello Iman. Thank you very much for your guide. Would this guide work on Zimbra 8.7?
I have DKIM, SPF, DMARC and PTR perfectly configured for my domain. However all e-mails still arrive to spam. Before switching to an external sender, I was wondering
Do you think this could have any effect on the e-mails arriving to the spam folder?
Received: from localhost (localhost.localdomain [127.0.0.1])
by mydomain.com (Postfix)
How could I correct it? I’ve already set the hostname properly via /etc/hosts and zimbra already states my domain is the hostname…
Any advise?
Hi Daniel,
Where you found information like that? whether from full header? if yes, it’s ok because i am also have same information from full header
how can i set up may account for outgoing email in my iphone using zimbra..can i ask what is the host name ? i already set my incoming email .
Hi Vergel,
You can configure with SMTP SSL/TLS with port 465 or 587. The hostname refer into your server that has been defined on Public DNS like mail.imanudin.net.
You can configure outgoing email same as incoming email. Iphone need trusted SSL on your email server. So, please install SSL Certificate on your server such as Symantec, Godaddy, Comodo, Digicert and etc
Help me, please
I can help with this error, so far only happens to send email to info@planetavirtual.biz
Centos 6
Zimbra 8.6, DNSCACHE active.
———————————————————————————————–
—– The following addresses had permanent fatal errors —–
(reason: 550-Verification failed for )
—– Transcript of session follows —–
… while talking to planetavirtual.biz.:
>>> DATA
<<< 550-Verification failed for
<<< 550-No Such User Here
<<< 550 Sender verify failed
550 5.1.1 … User unknown
<<< 503-All RCPT commands were rejected with this error:
<<< 503-Sender verify failed
<<< 503 Valid RCPT command must precede DATA
Hi PeterPedro,
The error very clear. The error is 550-No Such User Here.
Hello Iman.
thanks for answering.
Yes, the answer is very clear. But the user phqr58 it exists in my zimbra server that sends e-mail to info@planetavirtual.biz, the e-mail never reaches the destination because it is rejected.
THE QUESTION IS:
WHAT SHOULD I DO TO AVOID THIS?
There is an SPF record published in the DNS of the ISP that gives the service.
Hi PeterPedro,
User info@planetavirtual.biz did not exist on destination. The problem is not on your server. But the user did not exist on destination
Hi, Iman
The user phqr58@hotelcityplaza.com.ec exists on my zimbra server. The user info@planetavirtual.biz also exists, sending mail from yahoo.hotmail or google and the mails arrive.
From @ hotelcityplaza.com.ec I can not send or receive from info@planetavirtual.biz.
When they perish they have some verification policy if the one who sends it is legitimate. BUT I DO NOT HOW TO SOLVE THE PROBLEM.
best regards:
Hi PeterPedro,
If like that, please improve your email with SPF, DKIM, DMARC and PTR. The following are example configuration about SPF and DKIM
– https://imanudin.net/2015/02/09/how-to-configure-spf-sender-policy-framework-records-for-email-server/
– https://imanudin.net/2015/02/10/how-to-configure-and-validate-dkim-records-on-zimbra/
Hi Iman
I am not an expert in zimbra even though I am handling zimbra here.
We have a Zimbra 8.5.1 opensource here.
Everything is working fine then we found that users can send mail internally without providing password from MS outlook.
How can i remove that option or relay only if the correct password is provided.
We are using 25 port internally.
Regards,
Hi Vibin,
– You should configure trusted network only from 127.0.0.0/8 and ip-of-zimbra/32. For example 127.0.0.0/8 192.168.1.11/32. Please go to Zimbra Admin | Configure | servers | edit your servers | MTA | Trusted Network
– You should enable TLS authentication only on your server. Please go to Zimbra Admin | Configure | servers | edit your servers | MTA
– Please configure all client to use port 465 SSL or 587 TLS
Hi Iman.
Saya masih newbie di zimbra. Bagaimana cara mengganti port 25 menjadi 465 atau 587 di zimbra 8.6 ?
Terima kasih
Hi mas,
Port 25 digunakan untuk komunikasi antar email server. Jadi tidak bisa diganti menjadi port yang lain 🙂
Hi Iman,
Kalo guide diatas saya terapkan, apakan semua akan ada 2 smtp otomatis? Misal, saya memasang smtp di user mail client memakai smtp.mydomain.com dan apakah ketika mau memakai smtp.isp.com harus di rubah lagi setting nya, atau akan otomatis?
Hi mas Hendra,
Konfigurasi yang dilakukan pada panduan disini lebih ke sisi server. Jadi otomatis servernya yang akan nge-relay ke tampat lain. Sedangkan user tetap diarahkan ke SMTP email servernya
Hi Iman,
Terimakasih atas penjelasannya, satu pertanyaan lagi, apabila saya memasng konfigurasi smtp di masing-masing user dikantor saya memakai smtp local (IP lan server zimbra) nah, apakah jika user mengirim pesan kesesama user kantor yg configurasi di mail client nya memakai smtp ip local akan terjadi transfer data / bandwith email melalui local apa akan nge-relay dulu ke smpt ISP saya, (asumsi dari panduan ini ) sehingga itu akan memakai bandwidth internet (bukan LAN)
Terimakasih sebelumnya
Hendra,-
Hi mas,
Relay yang digunakan pada panduan ini lebih ke sisi komunikasi server dengan luar/internet. Jika user menggunakan SMTP Zimbra langsung, maka email tidak akan melewati relay untuk pengiriman email sesama domain. Namun jika email yang dikirim adalah ke internet, maka akan dilempar melalui SMTP relay. Untuk konfigurasi disisi klien sendiri tetap menggunakan SMTP Zimbra
how to configurre zimbraMtaRelayHost for default valuer ?
Hi,
You can enter into Zimbra Admin | Configure | Servers | Edit Servers | MTA | Please remove value on Relay MTA for External Delivery
What would it be like to relay authenticating only when the recipient is a specific domain? I understand that this current setting is for any destination right? I have a demand where for example only emails to the hotmail would be made the external relay authenticated.
Hi,
You can combine with this guidance : https://imanudin.net/2014/12/25/relay-tips-based-on-userdomain-receiver-on-zimbra-8-5-8-6/
Hi,
i am new for zimbra just Installed zimbra working fine and I need to setup how take backup If any chance crash the Linux can you send the article or ?
Thanks
gts
Hi,
You can follow this guidance : https://imanudin.net/2015/01/24/zimbra-tips-how-to-backup-mailbox-daily-weekly-and-monthly/
Hi iman,
Thanks for your replay.
And backup file how to reinstall the zimbra server again process ( in case the system will crash or something else)
Can you send the article.
And how to protect for spam emails can you send the articles.
gts
Hi,
If you have the backup /opt/zimbra folder, you can perform a fresh install and replace with Zimbra backup (/opt/zimbra)
Hi,
I added two domains in admin panel, I can do same process for back-up process
gts
Hi Iman,
Thanks for your response and how block If I get any spam messages from other domain or fake messages, Please help on this.
gts
Hi,
You can try to improve your server with some methods below :
https://imanudin.net/2014/09/08/how-to-install-policyd-on-zimbra-8-5/
https://imanudin.net/2014/09/09/zimbra-tips-how-to-configure-rate-limit-sending-message-on-policyd/
https://imanudin.net/2014/09/11/improving-anti-spam-reject-unlisted-domain-on-zimbra-8-5/
https://imanudin.net/2014/09/12/zimbra-tips-how-to-protect-policyd-webui/
https://imanudin.net/2014/09/29/how-to-restrict-users-sending-to-certain-usersdomains-with-policyd/
https://imanudin.net/2014/09/30/script-automatic-configure-cbpolicyd-on-zimbra-8-5/
https://imanudin.net/2014/09/07/how-to-improvement-sender-must-loginenforcing-a-match-between-from-address-and-sasl-username-on-zimbra-8-5/
Hi Iman,
Please how to setup domain level sender blocking in cbpolidyd
gts
Hi,
You can follow this one : https://imanudin.net/2014/09/11/improving-anti-spam-reject-unlisted-domain-on-zimbra-8-5/
Hi Iman
Thanks for your Response
And how setup the ssl certificate installation and ho setup reverse DNS (some time when I send email to other domain ) showing in admin panel there is no reverse DNS for your IP error coming )
We can setup reverse DNS in go-daddy or call ISP and setup the reverse DNS Please Advise on this!
GTS
Hi Gts,
– You can follow this guidance : https://wiki.zimbra.com/wiki/Installing_a_Comodo_SSL_Certificate_on_Zimbra_Collaboration. If you need professional services, i am also provide SSL and able to install in your server 😉
– You should contact your ISP provider to define PTR/Reverse DNS into your public IP
Hi Iman,
could not understand fir this
2. Place the bundle on your Zimbra mailbox server. You should receive, or download, the next files:
AddTrustExternalCARoot.crt
COMODORSAAddTrustCA.crt
COMODORSADomainValidationSecureServerCA.crt
my_domain_com.crt files
Note the root and intermediate files may have different names depends of the SSL Certificate, like PositiveSSL, etc.
HI Iman,
terimakasih atas penjelasannya, namun saya menemukan masalah, dari zimbra server tidak bisa kirim ke luar (contoh : @gmail.com) berikut hasil log nya
Jul 24 07:54:33 mail postfix/qmgr[28211]: E754315C54D: from=, size=1941, nrcpt=1 (queue active)
Jul 24 07:54:33 mail postfix/qmgr[28211]: DD4BC15C55B: from=, size=1969, nrcpt=1 (queue active)
Jul 24 07:54:33 mail postfix/smtp[1753]: warning: relayhost configuration problem
Jul 24 07:54:33 mail postfix/smtp[1757]: warning: relayhost configuration problem
Jul 24 07:54:33 mail postfix/smtp[1753]: E754315C54D: to=, relay=none, delay=1224, delays=1224/0.06/0/0, dsn=4.3.5, status=deferred (Host or domain name not found. Name service error for name=smtp-relay.digivla.com type=A: Host not found)
Jul 24 07:54:33 mail postfix/smtp[1757]: DD4BC15C55B: to=, relay=none, delay=556, delays=556/0.04/0/0, dsn=4.3.5, status=deferred (Host or domain name not found. Name service error for name=smtp-relay.digivla.com type=A: Host not found)
terimakasih,
Hi mas,
Problemnya adalah ini
Pastikan nama tersebut sudah memiliki A records pada DNS
dear pro,
If I do not want to use “Outgoing SMTP Authentication”, how do I return to the original?
Hello,
Please run the following command
Hi Iman,
May 25 09:08:46 mail saslauthd[25441]: auth_zimbra: salvatore auth failed: authentication failed for [salvatore]
Just want to stop this and this user “salvatore” not in my zimbra server
Thank
Hello,
You can block the IP address that tries to login (using iptables)
status=deferred (SASL authentication failed; server smtpserver[ip-server] said: 535 5.7.8 Error: authentication failed: authentication failure)
kalau error gini knpa ya gan ??
Hi mas,
Untuk authentikasinya salah. Bisa salah disisi user bisa juga salah disisi password. Coba testing login biasa dulu dari webmail atau email klien ke account relay nya
Such a great article about outgoing smtp authentication. Everyone should follow this blog.
Hi iman,
Zimbra Mail can send to Gmail, Outlook but while sending to Yahoo and Aol mail server. it was stuck on mail queue and can’t received by Yahoo and aol users.
thank You
Hello Arjun,
I think Yahoo and AOL have a strict rules. You can try to warm up your new IP to Yahoo server
zmprov ms `zmhostname` zimbraMtaSmtpSaslPasswordMaps lmdb:/opt/zimbra/conf/relay_password
ERROR: service.FAILURE (system failure: unable to refresh entry)
You have new mail in /var/spool/mail/zimbra
please help
Hello,
Please make sure the mailbox service is running. Or you can use -l options
mas iman,
setalah mengikuti tutorialnya , zimbra jadi tidak bisa kirim ke luar ada pesan error name=mailrelay.mydomain.com type=A: host not found.
sy dah buat A record di DNS domain hosting dengan nama mailrelay.mydomain.com diarahkan ke IP Public … tetapi sebelumnya sudah ada A record di DNS dengan nama mydomain.com yg diarahkan ke IP Public yg sama untuk aplikasi nextcloud di server yg berbeda, apakah itu jada kendala penyebab host not found?
karna sy hanya punya satu IP Public
terima kasih
Hi mas,
Jika ada DNS lokal juga di server Zimbranya, tambahkan di DNS lokalnya mas
@iman,
I followed your solution but unfortunately same result.
still having error “550 SMTP AUTH is
required for message submission on port 587 (in reply to RCPT TO command)”
Same thing I followed the instruction from zimbra “https://wiki.zimbra.com/wiki/Outgoing_SMTP_Authentication” but still similar result.
I configure and tested my external smtp to my Email Client and works properly.
Plain Authentication using port 587. Disabled SSL/TLS.
Hope you can give some idea.
Jay
Hi,
Please use SSL/TLS in your email client
Iman,
Hi there, I’ve tested my external outbound server with my email client with “Plain Auth with port 25, SSL/TLS with port 587 and 465” all works properly.
But when I am trying to put my External Outbound Server to “Zimbra” and followed your steps and Zimbra Steps nothing is working and give me similar error ” “550 SMTP AUTH is
required for message submission on port XXX (in reply to RCPT TO command)”.
Any other ideas to resolve this issue on Zimbra?
Jay
Hi Jay,
Please try to change saslauthenable to no
Hello Iman,
As our ISP have block Port 25. So we are unable to send email on Port 25, all emails are stuck in queue. ISP inform to us please use Port 587 to sending email.
How can I change Port 25 to 587 in zimbra mail server. I do not want use any others relay server configuration.
Means my own server as relay server. How can I do that.
Thanks in advance
Hi,
You should use port 25 to communicate between email servers with email server. If your ISP block port 25, you should use SMTP Relay
Assalamualaikum Pak Iman,
Saya ada problem,sebelumnya posisi saya sudah ikuti aran, namun masih error, kemudian saya tutup lagi dengan cara
zmprov ms `zmhostname` zimbraMtaRelayHost “”
Kemudian, saya hapus relay di adminzimbra 7071, lalu saya mau aktifkan ulang, namun muncul error
SASL authentication failed; server mailrelay.xxxxxx.co.id[8.xxx.xxx.xxx] said: 535 5.7.8 Error: authentication failed: authentication failure)
Mohon arahannya pak
Waalaikumussalam,
Pesan errornya authentication failed. Hal tersebut ada kaitannya dengan username dan password yang digunakan untuk Relaynya mas. Silakan dicek dan disesuaikan