King0770-Notes-Check-Submission-Port-587

If you are interested or need to check if the MTA submission is listening, or working, here are some general guidelines.

Check to see if the port is listening:

# lsof -i :587

You should see output similar to:

COMMAND   PID USER   FD   TYPE  DEVICE SIZE NODE NAME
master  22773 root   19u  IPv4 8282200       TCP *:submission (LISTEN)

From an external machine, you can test using the cli.

openssl s_client -connect mail.domain.com:587 -starttls smtp

You should be able to test this with openssl, and confirm that AUTH is only offered under starttls:

220 mail.domain.com ESMTP Postfix
helo localhost
250 mail.domain.com
auth login                           <<=== START THE AUTH SESSION
334 VXNlcm5hbWU6
dGVzdEBvcHRpbWFtaWEuY29t             <<=== Use conversion tool to convert username to base64
334 UGFzc3dvcmQ6
dGVzdDEyMw==                         <<=== Use conversion tool to convert password to base64
235 2.7.0 Authentication successful
mail from:test@domain.com
250 2.1.0 Ok
rcpt to:user007@exampledomain.com
250 2.1.5 Ok

Couple of sites you can use to convert your address and password to base64:
http://www.webpan.com/Customers/Email/base64_conversion.htm

http://ostermiller.org/calc/encode.html

By default the submission port should be enabled. The /opt/zimbra/postfix/conf/master.cf.in should contain the following (by default):

submission inet n      -       n       -       -       smtpd
        -o smtpd_etrn_restrictions=reject
        -o smtpd_sasl_auth_enable=%%zimbraMtaSaslAuthEnable%%
        -o smtpd_client_restrictions=permit_sasl_authenticated,reject
        -o smtpd_tls_security_level=%%zimbraMtaTlsSecurityLevel%%
Jump to: navigation, search