I just noticed that "530 Authorization required" is not a message coming
from James (we don't have "Authorization required" in our code
Look at the RcptCmdHandler. :-) He apparently typed it in, and meant a
capital R.
Noel
To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org

Noel J. Bergman wrote:
>I just noticed that "530 Authorization required" is not a message coming
>from James (we don't have "Authorization required" in our code

Look at the RcptCmdHandler. :-) He apparently typed it in, and meant a
capital R.

Noel

But in 2.3 branch we also add the DSN (EXTENDEDSTATUSCDE) string so it
should be "530 5.7.1 Authorization Required".

Maybe E rewrites the errors, but I hope not: this would be really wrong
(even in M$ style).

Stefano

To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org

Stefano,

The message I get is 530 5.7.1 Authorization Required.
I'm sorry for the confusion.

I have also tried stopping and restarting outlook express. When I get
home I will try and connect using Thunderbird.

Stefano Bagnara wrote:
Noel J. Bergman wrote:
I just noticed that "530 Authorization required" is not a message
coming
from James (we don't have "Authorization required" in our code
>>
>Look at the RcptCmdHandler. :-) He apparently typed it in, and meant a
>capital R.
>>
>Noel
>
But in 2.3 branch we also add the DSN (EXTENDEDSTATUSCDE) string so
it should be "530 5.7.1 Authorization Required".

Maybe E rewrites the errors, but I hope not: this would be really
wrong (even in M$ style).

Stefano
--

To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org
--

To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org

Kevin Burkart wrote:
Stefano,

The message I get is 530 5.7.1 Authorization Required.
I'm sorry for the confusion.

I have also tried stopping and restarting outlook express. When I get
home I will try and connect using Thunderbird.

, that one is sent by James!

Let us know if you get it working using Thunderbird so that we can
understand wether the problem in in oe configuration, in james or in "oe
vs james".

Stefano

Stefano Bagnara wrote:
>Noel J. Bergman wrote:
I just noticed that "530 Authorization required" is not a message
coming
from James (we don't have "Authorization required" in our code

Look at the RcptCmdHandler. :-) He apparently typed it in, and meant a
capital R.

Noel
>>
>But in 2.3 branch we also add the DSN (EXTENDEDSTATUSCDE) string so
>it should be "530 5.7.1 Authorization Required".
>>
>Maybe E rewrites the errors, but I hope not: this would be really
>wrong (even in M$ style).
>>
>Stefano

To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org

I'm getting the same thing from thunderbird. Does anyone have this
working with 2.3? I know it works in 2.2.

Stefano Bagnara wrote:
Kevin Burkart wrote:
>Stefano,
>>
>The message I get is 530 5.7.1 Authorization Required.
>I'm sorry for the confusion.
>>
>I have also tried stopping and restarting outlook express. When I get
>home I will try and connect using Thunderbird.
>
, that one is sent by James!

Let us know if you get it working using Thunderbird so that we can
understand wether the problem in in oe configuration, in james or in
"oe vs james".

Stefano
>
>Stefano Bagnara wrote:
Noel J. Bergman wrote:
I just noticed that "530 Authorization required" is not a message
coming
from James (we don't have "Authorization required" in our code

Look at the RcptCmdHandler. :-) He apparently typed it in, and
meant a
capital R.

Noel

But in 2.3 branch we also add the DSN (EXTENDEDSTATUSCDE) string so
it should be "530 5.7.1 Authorization Required".

Maybe E rewrites the errors, but I hope not: this would be really
wrong (even in M$ style).

Stefano
>
>
>

To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org
--

To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org

Kevin Burkart wrote:
I'm getting the same thing from thunderbird. Does anyone have this
working with 2.3? I know it works in 2.2.

course. I use James 2.3.0rc3 in my main personal server that is not
on my network and I send mails everywhere by using thunderbird and
almost basic config.xml but uncommented <authRequired>true</authRequired>
in the smtpserver/handler configuration.

In thunderbird I flagged the "Use name and password" under "Security and
Authentication" panel of the server and "No" for the "Use
secure connection" radio.

Can you try using true instead of announce and decommenting the
authorizedAddresses line? I had no time to review the code but I'm sure
this configuration works because I use it. Maybe we have a bug in
announce or when authorizedAddresses is commented out.

Let us know,
Stefano

To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org

Works great here with thunderbird. Can you plz show us your config xml ?

bye
Norman

Kevin Burkart schrieb:
I'm getting the same thing from thunderbird. Does anyone have this
working with 2.3? I know it works in 2.2.

Stefano Bagnara wrote:
>Kevin Burkart wrote:
Stefano,

The message I get is 530 5.7.1 Authorization Required.
I'm sorry for the confusion.

I have also tried stopping and restarting outlook express. When I
get home I will try and connect using Thunderbird.
>>
>, that one is sent by James!
>>
>Let us know if you get it working using Thunderbird so that we can
>understand wether the problem in in oe configuration, in james or in
>"oe vs james".
>>
>Stefano
>>
Stefano Bagnara wrote:
Noel J. Bergman wrote:
I just noticed that "530 Authorization required" is not a message
coming
from James (we don't have "Authorization required" in our code

Look at the RcptCmdHandler. :-) He apparently typed it in, and
meant a
capital R.

Noel

But in 2.3 branch we also add the DSN (EXTENDEDSTATUSCDE) string
so it should be "530 5.7.1 Authorization Required".

Maybe E rewrites the errors, but I hope not: this would be really
wrong (even in M$ style).

Stefano
>>
>>
>>
>
>To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
>For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org
>>
>>
>
>

To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org

!EXCUBATR:1,4509b83543624989729501!

To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org

I changed the lines as you asked and still get the error. I then
switched my user repository to file instead of db and still get the error.

Is there a way I can make the logs more verbose so that I can see
exactly what is getting sent to the smtp handler?

Thanks,
Kevin

Stefano Bagnara wrote:
Kevin Burkart wrote:
>I'm getting the same thing from thunderbird. Does anyone have this
>working with 2.3? I know it works in 2.2.
>
>
course. I use James 2.3.0rc3 in my main personal server that is not
on my network and I send mails everywhere by using thunderbird and
almost basic config.xml but uncommented <authRequired>true</authRequired>
in the smtpserver/handler configuration.

In thunderbird I flagged the "Use name and password" under "Security
and Authentication" panel of the server and "No" for the "Use
secure connection" radio.

Can you try using true instead of announce and decommenting the
authorizedAddresses line? I had no time to review the code but I'm
sure this configuration works because I use it. Maybe we have a bug in
announce or when authorizedAddresses is commented out.

Let us know,
Stefano
--

To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org
--

To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org

Kevin Burkart wrote:
I changed the lines as you asked and still get the error. I then
switched my user repository to file instead of db and still get the error.

Is there a way I can make the logs more verbose so that I can see
exactly what is getting sent to the smtp handler?

Thanks,
Kevin

environment.xml and change INF to DEBUG for the interesting
components.

Can you try a "telnet jameshost 25" from your email client host and type
"ehlo domain.com" to see if the "AUTH" capability is announced?

Stefano

To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org

I'm beginning to think it may be a firewall problem. I am able to telnet
to it from the outside world but when I type the ehlo command I get
command XXXX not recognized. When I type that from a computer on the
same network I get the AUTH announcement.

Stefano Bagnara wrote:
Kevin Burkart wrote:
>I changed the lines as you asked and still get the error. I then
>switched my user repository to file instead of db and still get the
>error.
>>
>Is there a way I can make the logs more verbose so that I can see
>exactly what is getting sent to the smtp handler?
>>
>Thanks,
>Kevin
>
environment.xml and change INF to DEBUG for the interesting
components.

Can you try a "telnet jameshost 25" from your email client host and
type "ehlo domain.com" to see if the "AUTH" capability is announced?

Stefano
--

To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org
--

To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org

Kevin Burkart wrote:
I'm beginning to think it may be a firewall problem. I am able to telnet
to it from the outside world but when I type the ehlo command I get
command XXXX not recognized. When I type that from a computer on the
same network I get the AUTH announcement.

Yes, it seems a firewall problem.
If the message is "command not recognized" James does not use it. If the
message is "command unrecognized" then it could be something wrong in James.

Stefano

To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org

Hi,

This would definitely be a firewall problem.
I know for sure that this is an issue with the Cisco PIX firewalls when
inspection of smtp is enabled:
quote from Cisco.com (TAC Case collection, case number K11355672:

When the mailguard feature is enabled, it only allows mail servers to
receive the seven SMTP minimum-required commands. These are described in
Section 4.5.1 of* RFC 2821 <>* (
previously RFC 821 ). All other commands are rejected by the PIX, and
rejected commands are never sent to the mail server

You should ask your fw admin to disable inspection of SMTP if possible.

The general attitude in my line of business is somethhing along these
lines: "If you depend on SMTP-inspection for mail security, you are not
old enough to have a mail server" ;-)

more politely: SMTP-inspection gives you no extra security; if your
mail server is weak, it'll be exploited - if it's strong it'll not anyway.

Just out of curiosity, what platform is the fw in front of your James
server?

:) Mikkel Troest
Network Systems Engineer, <CCNP>

Kevin Burkart wrote:
I'm beginning to think it may be a firewall problem. I am able to
telnet to it from the outside world but when I type the ehlo command I
get command XXXX not recognized. When I type that from a computer on
the same network I get the AUTH announcement.

Stefano Bagnara wrote:
>Kevin Burkart wrote:
I changed the lines as you asked and still get the error. I then
switched my user repository to file instead of db and still get the
error.

Is there a way I can make the logs more verbose so that I can see
exactly what is getting sent to the smtp handler?

Thanks,
Kevin
>>
>environment.xml and change INF to DEBUG for the interesting
>components.
>>
>Can you try a "telnet jameshost 25" from your email client host and
>type "ehlo domain.com" to see if the "AUTH" capability is announced?
>>
>Stefano
>>
>>
>
>To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
>For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org
>>
>>
>
>

To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org
>
>
>
>
>
>

This mail was scanned for viruses at mail.mikkle.dk by ClamAV (tm) and
found to be virus free.

This mail was scanned for viruses at mail.mikkle.dk by ClamAV (tm) and found to be virus free.

To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org

We don't handle the firewall. The phone company does. Thanks for the
info. I now know what to ask or tell them.

Mikkel Troest wrote:
Hi,

This would definitely be a firewall problem.
I know for sure that this is an issue with the Cisco PIX firewalls when
inspection of smtp is enabled:
quote from Cisco.com (TAC Case collection, case number K11355672:

When the mailguard feature is enabled, it only allows mail servers to
receive the seven SMTP minimum-required commands. These are described in
Section 4.5.1 of* RFC 2821 <>* (
previously RFC 821 ). All other commands are rejected by the PIX, and
rejected commands are never sent to the mail server

You should ask your fw admin to disable inspection of SMTP if possible.

The general attitude in my line of business is somethhing along these
lines: "If you depend on SMTP-inspection for mail security, you are not
old enough to have a mail server" ;-)

more politely: SMTP-inspection gives you no extra security; if your
mail server is weak, it'll be exploited - if it's strong it'll not
anyway.

Just out of curiosity, what platform is the fw in front of your James
server?

:) Mikkel Troest
Network Systems Engineer, <CCNP>

Kevin Burkart wrote:
>I'm beginning to think it may be a firewall problem. I am able to
>telnet to it from the outside world but when I type the ehlo command I
>get command XXXX not recognized. When I type that from a computer on
>the same network I get the AUTH announcement.
>>
>Stefano Bagnara wrote:
Kevin Burkart wrote:
I changed the lines as you asked and still get the error. I then
switched my user repository to file instead of db and still get the
error.

Is there a way I can make the logs more verbose so that I can see
exactly what is getting sent to the smtp handler?

Thanks,
Kevin

environment.xml and change INF to DEBUG for the interesting
components.

Can you try a "telnet jameshost 25" from your email client host and
type "ehlo domain.com" to see if the "AUTH" capability is announced?

Stefano

To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org


>>
>>
>
>To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
>For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org
>>
>>
>>
>>
>>
>>
>
>This mail was scanned for viruses at mail.mikkle.dk by ClamAV (tm) and
>found to be virus free.
>>
>
>
>
>
>

This mail was scanned for viruses at mail.mikkle.dk by ClamAV (tm) and
found to be virus free.

To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org
--

To unsubscribe, e-mail: server-user-unsubscribe (AT) james (DOT) apache.org
For additional commands, e-mail: server-user-help (AT) james (DOT) apache.org