Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Diagnostic-Code: smtp; 550 5.7.1 Authentication Required (Authentication error when sending/ receiving mail)
  •  
MarcelS

Messages: 6
Karma: 0
Send a private message to this user
Hi,

Only recently I have update to the more recent version of Kerio. Before that I still used 8.0.0.
Obviously there were some changes made because all messages I sent from applications on servers were now blocked. Before I could send them without authenticating. So initially I thought missing authentication was the problem.
What was I doing? To confirm everything was up and running properly I set up an hourly script to send out an e-mail to a gmail account. E-mail from that account is directly sent back to an account on my Kerio server. The sender is always sender<_at_>mydomain.net and using my own domain was no problem.
Now what happens is that when I send an e-mail and it is forwarded by gmail, Kerio sees this as a local e-mail address and refuses gmail to send me the message.
I was able to remedy that by using the gmail address as my sender. This is not very prety and there will come a day when gmail will no longer allow that. Since it doesn't match SPF rules.

But, there is still another issue.
I am used to send (BCC) all my outgoing e-mail to another gmail address so that I get a copy back in my e-mail to archive (I have filters set up so it will go to the proper folder) and that is also my confirmation that it was really sent out.
When I send an e-mail with myname<_at_>mydomain.net these mails are ALSO not accepted by Kerio.
The only way to remedy that is by putting ALL the servers from gmail in my trusted IP addresses. Which is off course impossible but also undesirable.
Is there ANY way that this can be circumvented without making my server an open relay?
I feel like I have lost functionality I have used for the last 10 years.

Kind regards,
Marcel

[Updated on: Fri, 30 June 2017 14:23]

  •  
MarcelS

Messages: 6
Karma: 0
Send a private message to this user
Still this is the message I am getting. Is there no solution to it?
It worked in older versions, so why this strict control now?

Message not delivered
There was a problem delivering your message to someaddress<_at_>mydomain.org. See the technical details below, or try resending in a few minutes.
The response from the remote server was:

550 5.7.1 Authentication Required

Final-Recipient: rfc822; someaddress<_at_>mydomain.org
Action: failed
Status: 5.7.1
Remote-MTA: dns; mail.mydomain.org. (123.321.123.321, the server for the
domain mydomain.org.)
Diagnostic-Code: smtp; 550 5.7.1 Authentication Required
Last-Attempt-Date: Wed, 12 Jul 2017 16:28:35 -0700 (PDT)
  •  
freakinvibe

Messages: 1507
Karma: 58
Send a private message to this user
Sending out emails by a script is still possible, but you would have to white list the ip address of the server that runs the script to send the email.

Another solution would be that your script authenticates to Kerio Connect and then sends the mail.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
MarcelS

Messages: 6
Karma: 0
Send a private message to this user
Sending mail from within my network is not the problem (no need to authenticate). The problem is that I use Gmail to route the mail back to me as a confirmation that sending and receiving mail is still working.
So when I send mail from one of my domains to gmail and Gmail sends it back Kerio regards this as an incoming mail from a local account and blocks it. This wasn't happening before I upgraded from version 8.0.

I understand that I would have to whitelist servers I want to allow to send mail, but it would be impossible (and unwanted) to add all of Google's server IP's.
The thing is that Kerio somehow isn't able to make the distinction between mail that is forwarded (rerouted from my domain) and legitimate unwanted e-mail. To me that means their solution is just to tight. There should be a way to allow these kinds of mails.
  •  
freakinvibe

Messages: 1507
Karma: 58
Send a private message to this user
What rule have you created in Gmail for the bounce back? Ideally, Gmail should send the mail with your Gmail address as the sender and not with your Kerio domain as the sender. You should probably not bounce the message, but auto-reply to it or auto-forward it.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
Previous Topic: Synchronisation conflict...
Next Topic: Choosing the "from" field from aliases and groups
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sat Jul 29 13:41:12 CEST 2017

Total time taken to generate the page: 0.00437 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.