Messaging Server 5.2 Multiplexor SMTP Relay

Hi,

We are using Messaging 5.2 on a setup consisting of one MTA relay, one Mail Store and one Multiplexor.

Everything works almost fine, multiplexor works fine for pop and imap, but it doesnt work for smtp. Basically because we cannot found the way to enable proxy support on the smtp.

"local.service.smtp.proxy = 1" has been enabled, but still there is no way....

On "SmtpProxyAService.cfg" config file there is a comment about proxy smtp:

# This is a space-separated list of SMTP relay host names. These relays

# MUST support the XPEHLO extension. MMP will load-balance among these

# hosts. This must be non-emptyfor the SMTP proxy to function.

But there isnt any info about how to enable the XPEHLO extension, so the smtp multiplexed connection ends with:

error in response to XPEHLO command from wolverine.ourdomain.com: 503 5.5.0 Pr

oxy support is not enabled.

Does anyone know how can we enable that extension?

Also there is a little trouble for defining PROXY_PASSWORD on the mail relay servers, as if we include it into imta.cnf file on tcp_local channel it says isnt a recognized option, if PROXY_PASSWORD is defined into config/tcp_local_option file there is no warning, but we are not sure if the server is reading it.

Any help is very much appreciated,

Thanks in advance.

[1408 byte] By [joseperezrodriguez] at [2007-11-26 9:32:04]
# 1
Unless you are intending to support the outdated security system, "pop before smtp", there is no reason to attempt to use the smtp proxy. I have actually never found any other reason to use it.Use the MTA. It's far better for any relay work.
jay_plesset at 2007-7-7 0:18:03 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 2

We have tried to do "pop before smtp" following the steps that appear in the documentantion, but we have the same errors explained before.

The problem is how to achive de Messaging Server supporting proxy (xpehlo).

We have not found any documentation about XPEHLO support.

Any ideas?

Thanks in advance.

joseperezrodriguez at 2007-7-7 0:18:03 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 3

Hi,

You can get this error if the password specified in the tcp_local_option file (assuming that the connection from the MMP's comes in on tcp_local - you may need to check your mail logs) is incorrect (make sure you imsimta rebuild;imsimta restart after making changes).

Double check that PROXY_PASSWORD=<secret> in tcp_local_option is the same as the SmtpProxyPassword option of SmtpProxyAService.cfg Also ensure that everything is in the same case (uppercase/lowercase.. including the option name such as SmtpProxyPassword).

Cheers,

Shane.

shane_hjorth at 2007-7-7 0:18:03 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 4
Also, I'm going to pound this again.Pop before SMTP is old. It's not secure, and it's not well supported anywhere.Authenticated SMTP is supported by the vast majority of mail clients. It's more secure. It's easier to set up, and it works well. Why not use it?\
jay_plesset at 2007-7-7 0:18:03 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 5

Oops, we located the tcp_local_option in msg_directory/config instead of msg_directory/imta/config. :-(

Now works fine.

By other side, we understand using Messaging 5.2 instead of a newer version is not the best solution, but the arquitecture, products and versions were defined by the customer and we cannot change it, and of course, customer solution is the best of the world... :-)

Thanks all.

joseperezrodriguez at 2007-7-7 0:18:03 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 6

I often find that customers believe that the old system is better than any new system. Unfortunately, that sometimes means that when (not if, but when) they have a problem, they find that they are running unsupported software, and fixing it involves upgrading. Upgrading in response to a "down system" is usually pretty traumatic to the admin that has the task.....

I generally prefer to plan for my upgrades.

jay_plesset at 2007-7-7 0:18:03 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...