Skip to main content

Not permitted to relay through this server without authentication

Comments

21 comments

  • cPanelMichael
    Hello, Can you verify the domain name you are sending from exists in the /etc/localdomains file on this system? EX:
    grep domain.tld /etc/localdomains
    Thank you.
    0
  • sandtim
    Found it. in Exim Configuration Manager, Basic Editor, Mail, "EXPERIMENTAL: Rewrite From: header to match actual sender" was set to "remote". I changed it to the default of "disable" and emails are going through. I had set that option a few months ago to try to find possible problems with our list servers. But I had also changed it back. Don't know why it changed again during the upgrade last night.
    0
  • cPanelMichael
    I had set that option a few months ago to try to find possible problems with our list servers. But I had also changed it back. Don't know why it changed again during the upgrade last night.

    Hello, "Disable" is the default option for this feature. Is it possible the option was changed manually through WHM or the command line? You can use a command like this if you want to see when the Exim configuration values were last accessed from Web Host Manager:
    grep displayeximconfforedit /usr/local/cpanel/logs/access_log
    Thank you.
    0
  • Tim Caviness
    I am also having this problem. Even though the default setting was set to "Disable," I set it to "Enable" ... saved ... changed to "Disabled" and saved again. Everything worked. Until today ... when I had to do the same exact thing to get SMTP to work for the entire server. The settings are getting overwritten somehow and this needs to be fixed.
    0
  • cPanelMichael
    The settings are getting overwritten somehow and this needs to be fixed.

    Hello, Could you open a support ticket using the link in my signature so we can take a closer look at your system to see how the setting is overwritten? Thank you.
    0
  • ddaddy
    I had the same problem. All my emails failed with 550 auth errors. I toggled this setting and it started working again.
    0
  • jmginer
    We're having the same issue but with incoming e-mails, sending from Gmail to e-mail account hosted in our server, enabling/disabling the EXPERIMENTAL exim option, dont fix nothing.
    550 Please turn on SMTP Authentication in your mail client. mail-it0-x230.google.com [2607:f8b0:4001:c0b::230]:41224 is not permitted to relay through this server without authentication. Final-Recipient: rfc822; prueba@test.ginernet.net Action: failed Status: 5.0.0 Remote-MTA: dns; test.ginernet.net. (2a03:c7c0:1:1::1, the server for the domain test.ginernet.net.) Diagnostic-Code: smtp; 550-Please turn on SMTP Authentication in your mail client. 550-mail-it0-x230.google.com [2607:f8b0:4001:c0b::230]:41224 is not permitted 550 to relay through this server without authentication. Last-Attempt-Date: Thu, 07 Dec 2017 09:08:14 -0800 (PST)
    0
  • cPanelMichael
    Hello @jmginer, Check to see if the following thread helps: SOLVED - 550 Error sending email from GMail to G Suite Business mail Thank you.
    0
  • DennisMidjord
    We had the exact same error. Client tried to send from his @gmail.com account (using the gmail interface) and kept receiving the following error when sending to his domain where the mail was hosted by us:
    Message not delivered Your message couldn't be delivered to info@domain.tld because the remote server is misconfigured. See technical details below for more information. The response was: 550 Please turn on SMTP Authentication in your mail client. mail-qt0-f174.google.com [209.85.216.174]:34191 is not permitted to relay through this server without authentication.
    I made sure the MX record was pointing correctly, made sure the SPF record was correct, but nothing worked. I found this post and set "EXPERIMENTAL: Rewrite From: header to match actual sender" from default -> remote, saved and then from remote -> default, which solved the issue.
    0
  • cPanelMichael
    Hello @DennisMidjord, Can you let us know what appeared in /var/log/exim_mainlog when Gmail returned the message with the "is not permitted to relay through this server without authentication" message? Thank you.
    0
  • DennisMidjord
    Hi, Sure. 2018-05-25 11:17:10 H=mail-qt0-f174.google.com [209.85.216.174]:34191 X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=no F= rejected RCPT : Rejected relay attempt: '209.85.216.174' From: 'user@gmail.com[/EMAIL]' To: 'info@domain.tld[/EMAIL]' 2018-05-25 11:17:10 H=mail-qt0-f174.google.com [209.85.216.174]:34191 Warning: "Detected session with all messages failed" 2018-05-25 11:17:10 H=mail-qt0-f174.google.com [209.85.216.174]:34191 Warning: "Increment slow_fail_block Ratelimit - mail-qt0-f174.google.com [209.85.216.174]:34191 because of all messages failed" 2018-05-25 11:17:10 SMTP connection from mail-qt0-f174.google.com [209.85.216.174]:34191 closed by QUIT
    Please note that the above was from when I tried to send an email to the user's mailbox.
    0
  • cPanelMichael
    I made sure the MX record was pointing correctly, made sure the SPF record was correct, but nothing worked. I found this post and set "EXPERIMENTAL: Rewrite From: header to match actual sender" from default -> remote, saved and then from remote -> default, which solved the issue.

    It's possible that updating this particular setting didn't actually solve the issue, but rather doing so forced a run of the /scripts/buildeximconf which is what solved the issue. If this happens again, please open a support ticket so we can take a closer look and post the ticket number here so we can update this thread with the outcome. Additionally, before opening a support ticket or making any changes to the Exim configuration to workaround the issue, make a backup of the existing Exim configuration file using WHM >> Service Configuration >> Exim Configuration >> Backup so the old configuration file is available to review. Thank you.
    0
  • LanderV
    I had the same issue after updating cPanel to 74.0.9. It was fixed by changing this setting to remote and back to disabled. I didn't make a backup of the Exim configuration, but I have full disk backups. Should I make a support ticket? Where can I find the previous Exim config?
    0
  • cPanelMichael
    I didn't make a backup of the Exim configuration, but I have full disk backups. Should I make a support ticket? Where can I find the previous Exim config?

    Hello @LanderV, A backup of the Exim configuration file may no longer exist if you didn't manually create one, but you're welcome to submit a support ticket so we can take a closer look and see if there's anything obvious in your Exim configuration that may have resulted in the problem. Thank you.
    0
  • rinkleton
    I'm having the same issue... have been for a long time. I created a thread myself Email Not Sending After cPanel Updates and cpanel ticket 10855687. The techs working on my ticket said they couldn't find the reason this was happening. Was there any resolution found for these issues?
    0
  • LanderV
    Had the same problem again after update. Needed to reset this setting again.
    0
  • cPanelMichael
    Hello Everyone, I've seen a couple of support tickets where a custom entry for "chunking_advertise_hosts" exists in the local Exim configuration. Can you check to see if the /etc/exim.conf.local file exists on the affected systems? If so, please post the contents of this file using a command like this:
    cat /etc/exim.conf.local
    When pasting the output, use CODE tags and replace any identifying information related to your server or a smart host if it's included. Thank you.
    0
  • LanderV
    Hi, I had the same problem again after a restart. This is my exim.conf.local after toggling the setting back to disabled:
    %RETRYBLOCK% +secondarymx * F,4h,5m; G,16h,1h,1.5; F,4d,8h * * F,2h,15m; G,16h,1h,1.5; F,4d,8h @AUTH@ @BEGINACL@ @CONFIG@ chunking_advertise_hosts = "" openssl_options = +no_sslv2 +no_sslv3 tls_require_ciphers = ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:!DSS @DIRECTOREND@ @DIRECTORMIDDLE@ @DIRECTORSTART@ @ENDACL@ @POSTMAILCOUNT@ @PREDOTFORWARD@ @PREFILTER@ @PRELOCALUSER@ @PRENOALIASDISCARD@ @PREROUTERS@ @PREVALIASNOSTAR@ @PREVALIASSTAR@ @PREVIRTUALUSER@ @RETRYEND@ @RETRYSTART@ @REWRITE@ @ROUTEREND@ @ROUTERMIDDLE@ @ROUTERSTART@ @TRANSPORTEND@ @TRANSPORTMIDDLE@ @TRANSPORTSTART@
    0
  • cPanelMichael
    Hi, I had the same problem again after a restart. This is my exim.conf.local after toggling the setting back to disabled

    Hi @LanderV, Can you open a support ticket so we can take a closer look at the affected system and verify if there's anything in your /etc/exim.conf.local file that's resulting in this issue every time cPanel is updated to a new version? Please post the ticket number here once it's opened and I'll add some notes from this forums thread to it. Thank you.
    0
  • c0i0t3
    It is now 2021 and the problem has happened again. It was resolved as follows: 1- Login WHM ; 2- Exim Configuration Manager ; 3- search for "EXPERIMENTAL: Rewrite From: header to match actual sender" ; 4- activates and saves, then comes back, deactivates and saves again ; Thank you!
    0
  • flyingscot
    I am also having this problem. Even though the default setting was set to "Disable," I set it to "Enable" ... saved ... changed to "Disabled" and saved again. Everything worked. Until today

    Thank you for this suggestion. It worked today on my server. Our mail and our client mail is now working again. Kind of bizarre if you ask me. No idea why it stopped working. I restart the server, mail server, services, no luck. Found this suggestion on a google search. Whew...
    0

Please sign in to leave a comment.