Topic: MS Outlook on SME Server 8.0

[nmtrier]

If you are experiencing outgoing messages rejected "550 relaying denied " then you need to set your outgoing mail to use authentication with the server - see:
http://wiki.contribs.org/Email_-_Setting_up_E-mail_clients_for_SME_8.0

[PeteB]

I use SME server in my home since many years, (10 years, v6.5 I think)  normally I struggle a bit to get it all running the way I want, but generally succeed.
I seem to need help with 8.0 as I am unable to send email.

On 7.5 all worked well, and currently without the server all works well. (I connect to a switch, bypassing the server, to send email)

Outlook 2003 is configured with
Email address: me@free.fr
Incoming Server  pop.free.fr
Outgoing Server smtp.free.fr
Incoming Server (SMTP) port 110
Outgoing Server (SMTP) port 25

I have done this as recommende in the previous post: http://wiki.contribs.org/Email_-_Setting_up_E-mail_clients_for_SME_8.0, for user admin@myserver.mydomain  (The domain is local, not registered)
and now get hourly email to say that  “freshclam: Update failed”)  AND I can send email with this account.

I would like to use my usual email accounts to send mail, (as before) so I tried:
Email address: me@free.fr
Incoming Server  pop.free.fr
Outgoing myserver.mydomain
Incoming Server (SMTP) port 110
Outgoing Server (SMTP) port 465

(I also tried Outgoing Server (SMTP) port 25)

But this gave no joy.

I also tried on the server manager email config page
Adresse du serveur de messagerie du FAI (ISP)   My ISP IP (I have a fixed IP)

I don’t understand all of ports and IP tables and I am a bit lost. If possible I would like to remain with client configurations that work with or without SME server.

What do I need to do?

Thanks in advance, and if you think I did not search the forums sufficiently, I'd appriciate if you say so politely.

[janet]

PeteB

...with 8.0 as I am unable to send email.
What do I need to do?

You say:

....AND I can send email with this account.......But this gave no joy.

You either can send or cannot sent, which is it.
I think you mean you are not able to send (via your sme server).

In your email client you need to enable the setting for "Outgoing Mail Server" that says "My server requires authentication", and typically that setting will say "Use same settings as my incoming mail server" or similar.
The setting name may be slightly different in different email clients.
 
For the incoming and outgoing mail server ports, you should also tick the boxes for "This server requires a secure connection (SSL)", or similar setting.

I would like to use my usual email accounts to send mail, (as before)........If possible I would like to remain with client configurations that work with or without SME server.

Secure connections should also work if you are connecting directly to your ISPs mail server/mailboxes, most ISP mail server support that nowadays

You will have to change the setting for user authentication, as this is now required for security reasons on sme8. It was really a much wiser choice to use on sme7 too.

......now get hourly email to say that  “freshclam: Update failed”

At the command prompt type
freshclam
and tell us the message you get and/or describe what happens.
Are you sure your sme server has been told the IP address of your gateway ?
Is sme server your gateway or is there a seperate firewall/router in front of sme ?

[PeteB]

Mary,

Thanks much for your attention to my problem.

I had included the "This server requires a secure connection (SSL)" etc (part of the wiki that nmtrier refers to in the first post of this thread)

I can send email via admin@myserver.mydomain with the settings shown in the wiki. (first post in this thread) When I use the same settings for me@myISP.fr (notably, port 465) it does not work for that account.
me@myISP.fr  works work without the server.

SME is configured as Server/Gateway

Pls ignore the Freshclam problem, (As I disconnect my server to send mail, the errors are a logical consequence, sorry)

Thanks

[mmccarn]

Is your SME server hosting your email, or is your email hosted by your ISP?

if the account you have setup in Outlook doesn't exist on the SME, then telling outlook to relay using that account won't help.  You would need to tell Outlook to authenticate to the outgoing (SMTP) server using an account that does exist on the SME.

This is new in SME 7(.51, I think) and SME 8 - formerly all LAN workstations could relay out through the SME without supplying any credentials.

[janet]

PeteB

I also tried on the server manager email config page
Adresse du serveur de messagerie du FAI (ISP)   My ISP IP (I have a fixed IP)

For the server manager email panel section for "Address of ISP mail server", called the SmartHost setting,
Use the ISP's mail server name eg
mail.myisp.com.fr
For you this looks like it is
smtp.free.fr
It is likely that your sme mail server credentials are bogus because you are not using a real domain name (FQDN), so either your ISP or upstream mail servers are refusing to relay mail coming from your server.

By using your ISP's mail server to send mail, your credentials then become acceptable to other mail servers

[MSmith]

Don't forget about the SMTP proxy ...

http://wiki.contribs.org/SME_Server:Documentation:Administration_Manual:Chapter11#SMTP_Proxy

[PeteB]

As per MSmith message, I set the SMTP proxy to "Desactivé" and things work as I would like.  (On a home system I think I can live -at least for the moment- with the reduced security this implies.)


================
With the SMTP proxy set to "Activé", the email "leaves" Outlouk but bounches with the message below

From: System Administrator
Sent: lundi 11 juin 2012 21:54
To: me
Subject: Undeliverable: test 21h53

Your message did not reach some or all of the intended recipients.

      Subject:   test 21h53
      Sent:   11/06/2012 21:54

The following recipient(s) could not be reached:

      'sent-to@free.fr' on 11/06/2012 21:54
            550 relaying denied sent-to@free.fr

And see my previous messages for the SMTP proxy set to "Bloqué"

Thanks for your help and efforts.

[MSmith]

Also, per Charlie Brady in this bug:

http://bugs.contribs.org/show_bug.cgi?id=6522

...............................................................
QUOTE:
... mandatory authentication can be disabled via:

config setprop qpsmtpd RelayRequiresAuth disabled
signal-event email-update

[devtay]

Also, per Charlie Brady in this bug:

http://bugs.contribs.org/show_bug.cgi?id=6522

...............................................................
QUOTE:
... mandatory authentication can be disabled via:

config setprop qpsmtpd RelayRequiresAuth disabled
signal-event email-update

Does this setting make an 8.0 server act like a 7.4 (No LAN side requirement for SMTP Auth)? I'd rather not deal with Outlook and the cert generated by the server.

[MSmith]

Correct, that's what the effect of the change is. No SMTP authentication required on LAN side.

[CharlieBrady]

I'd rather not deal with Outlook and the cert generated by the server.

Dealing with Outlook is not mandatory. You can just ignore it - or, preferably, remove it from all workstations.

If you don't like the cert generated by the server you can replace it, but you'll need to pay $$.

[devtay]

Dealing with Outlook is not mandatory. You can just ignore it - or, preferably, remove it from all workstations.

If you don't like the cert generated by the server you can replace it, but you'll need to pay $$.

Thanks for the update guys. Might have worded that a bit poorly when I typed it. The stress of a new server rollout was getting to me. Sorry. I wasn't complaining about SME but about M$. I have been seriously considering Thunderbird and Firefox to replace the Windoze options. My users can't handle too much change though. It would only save us about $10k when we have to update M$ Office. 

I read about the certificate in the wiki too. Thinking about paying for one after I get everything working on my new 8.0 box.

[CharlieBrady]

Thinking about paying for one after I get everything working on my new 8.0 box.

As an alternative, you might be able to do something with a login script so that the certificate is recognised as valid first time they try to use it (i.e. pre-import the self-signed certificate).

[devtay]

As an alternative, you might be able to do something with a login script so that the certificate is recognised as valid first time they try to use it (i.e. pre-import the self-signed certificate).

Good advice. I'll play with it some (and likely bug you when I need help). 

[chan]

Maybe you can try this: http://wiki.contribs.org/Email#SMTP_Authentication_TLS_before_Auth_disable_.26_enable

It resolved my problem.