1 2 Previous Next 23 Replies Latest reply: Sep 28, 2013 8:49 AM by Laird Williams
angryiphoneuser Level 1 Level 1 (0 points)

I have followed the advice in http://support.apple.com/kb/TS3023 to solve this but the main.cf file keeps reverting back to the original meaning I am having to re-apply this patch this every few hours at the moment.

 

Not sure whether this is happening when I stop and restart mail, reboot or edit some of the other postfix settings as I install roundcube - but it is extremely annoying.  Any ideas?

  • 1. Re: Outlook: Helo command rejected: need fqdn
    angryiphoneuser Level 1 Level 1 (0 points)

    By the way the server is 10.8.2

     

    I have just applied this patch for the umpteenth time and a new error from my Outlook clients:

     

    554 5.7.1 <external mail adddres>: relay access denied

     

    So now nothing works!  Has anybody seen or solved this?

  • 2. Re: Outlook: Helo command rejected: need fqdn
    angryiphoneuser Level 1 Level 1 (0 points)

    I have tried:

     

    - wiping my outlook configuration and reinstalling my outlook accounts

    - taking a brand new machine with Outlook 2010

     

    and it still doesn't work.  I now get the error that any communication with the smtp server is interrupted.  Apple suport will not help - Outlook is a Microsoft Product but the problem is definately with the server

     

    OUTLOOK DOES NOT WORK WITH OSX Server 10.8

  • 3. Re: Outlook: Helo command rejected: need fqdn
    Mark23 Level 3 Level 3 (975 points)

    The problem isn't at your client, it is at the server...

  • 4. Re: Outlook: Helo command rejected: need fqdn
    angryiphoneuser Level 1 Level 1 (0 points)

    I know that, you know that, Apple support suggests I call Microsoft!

     

    I can't believe that getting OSX server to talk to Outlook can be so difficult and problematic.  I have been trying to solve this all day

     

    There is nothing obvious in the SMTP srevr logs either

  • 5. Re: Outlook: Helo command rejected: need fqdn
    Mark23 Level 3 Level 3 (975 points)

    The Apple Mail server has four authentication methodes it can use:

    - Kerberos

    - Digest (CRAM-MD5)

    - APOP (POP only)

    - Cleartext

     

    Microsoft Outlook and Outlook Express can't use CRAM-MD5 authentication. The free Mozilla Thunderbird can. The problem is thus not with Apple, but with Microsoft, although I don't think calling Microsoft will help a bit.

     

    You can lower the Mail Server security by allowing the Cleartext authentication method, use Kerberos (better) or limit yourself to POP mail if you wish to use Microsoft products to connect to the Apple Mail server.

     

    Screen Shot 2012-10-10 at 17.59.24.png

  • 6. Re: Outlook: Helo command rejected: need fqdn
    angryiphoneuser Level 1 Level 1 (0 points)

    I have already doen all of those:

     

    Authentication is by 'Any Method' - all four options ticked in Server app and I am trying to get a POP3 connection.  Whne I test from Outlook it initally shows the POP3 connection to be okay before failing on the SMTP connection and returning:Capture.PNG

     

    SMTP log on the server shows:

    Oct 10 17:16:56 miniserver.sedgewick.org log[13847]: auth: Error: od(nickgray,192.168.1.21): Authentication server failed to complete the requested operation.

    Oct 10 17:16:56 miniserver.sedgewick.org log[13847]: auth: Error: od(nickgray,192.168.1.21): authentication failed for user=nickgray, method=DIGEST-MD5

    Oct 10 17:17:02 miniserver.sedgewick.org log[13847]: pop3-login: Login: user=<nickgray>, method=PLAIN, rip=192.168.1.21, lip=192.168.1.3, mpid=13864, TLS

    Oct 10 17:17:02 miniserver.sedgewick.org log[13847]: pop3(pid 13864 user nickgray): Disconnected: Logged out top=0/0, retr=0/0, del=0/54642, size=5472292395

     

    192.168.1.21 is the static IP address of the machine running the Outlook client

  • 7. Re: Outlook: Helo command rejected: need fqdn
    angryiphoneuser Level 1 Level 1 (0 points)

    Sorry that is from the mail server log

     

    The SMTP log has:

     

    Oct 10 17:17:02 miniserver.sedgewick.org postfix/postscreen[13861]: CONNECT from [192.168.1.21]:55471 to [192.168.1.3]:25

    Oct 10 17:17:02 miniserver.sedgewick.org postfix/postscreen[13861]: PASS OLD [192.168.1.21]:55471

    Oct 10 17:17:02 miniserver.sedgewick.org postfix/smtpd[13890]: connect from unknown[192.168.1.21]

    Oct 10 17:17:02 miniserver.sedgewick.org postfix/smtpd[13890]: error: validate response: error: Authentication server failed to complete the requested operation.

    Oct 10 17:17:02 miniserver.sedgewick.org postfix/smtpd[13890]: error: validate response: authentication failed for user=nickgray (method=DIGEST-MD5)

    Oct 10 17:17:02 miniserver.sedgewick.org postfix/master[13842]: warning: process /usr/libexec/postfix/smtpd pid 13890 killed by signal 6

  • 8. Re: Outlook: Helo command rejected: need fqdn
    Mark23 Level 3 Level 3 (975 points)

    ..

  • 9. Re: Outlook: Helo command rejected: need fqdn
    Mark23 Level 3 Level 3 (975 points)

    You are likely able to change the authentication method for your outgoing mail on the client, please match that to the mechanism of your incoming mail, which seems to work fine...

  • 10. Re: Outlook: Helo command rejected: need fqdn
    angryiphoneuser Level 1 Level 1 (0 points)

    I have now explicitly set the authentiaction method instead of using "Auto" on the Outlook client and I am new back to relay access denied - one step forward = one step back

     

    Client shows

    Capture2.PNG

    SMTP log on the server shows:

     

    Oct 10 17:34:37 miniserver.sedgewick.org postfix/smtpd[14699]: NOQUEUE: reject: RCPT from unknown[192.168.1.21]: 554 5.7.1 <nckgry<at>gmail.com>: Relay access denied; from=<nick<at>nickgray.org> to=<nckgry<at>gmail.com> proto=ESMTP helo=<QuadCore>

    Oct 10 17:34:38 miniserver.sedgewick.org postfix/postscreen[14698]: PASS NEW [212.117.188.113]:38754

     

    Mark - thank you for your help with this.  As my earlier posts suggested my patience had run out with this new Mini server.  Having invested 3 days so far to get it working with all my iOS and mail.app clients this is pretty frustrating

    Your messa

  • 11. Re: Outlook: Helo command rejected: need fqdn
    angryiphoneuser Level 1 Level 1 (0 points)

    By the way all the iOS and Mail.app clients work fine - just Outlook on Mac:Office and two PC clients have this problem

  • 12. Re: Outlook: Helo command rejected: need fqdn
    Mark23 Level 3 Level 3 (975 points)

    How are your DNS settings in the server app?

  • 13. Re: Outlook: Helo command rejected: need fqdn
    Mark23 Level 3 Level 3 (975 points)

    This should be a hint

  • 14. Re: Outlook: Helo command rejected: need fqdn
    angryiphoneuser Level 1 Level 1 (0 points)

    I checked that earlier - they were imported from 10.6.8 - SLS

     

    primary zone:  miniserver.sedgewick.org - machine,nameserver and mail exchanger

     

    If there was an error here I would expect the iOS and mail.app clients on the LAN not to work - but they do

     

    I am currently looking at permitted networks:

     

    On the (very reliable but now broken) SLS server I had added 'Accept SMTP relays only from these hots and networks" and added the LAN address range 192.168 etc

     

    This option is gone on MLS but I see in serveradmin settings mail that there is a command mail:postfix:mynetworks:_array_index:0 = 127.0.0.0/8  - Do you know of a way to add mail:postfix:mynetworks:_array_index:1 = 192.168etc?

     

    The Server app rountinely adds variables to the array but I cannot see how to do it from the command line - I can edit existing lines using serveradmin settings mail:etc but not add.  I am loathe totry and find the config file and edit as MLS seems to destroy and recreate these at every opportunity

     

    My best guess so far....

1 2 Previous Next