Relay access denied when sending mails via PPTP

drevokocur · Wed Aug 31, 2011 9:58 am

Hi there,
first - I`m new on Mikrotik. I`m using MAIL server (postfix) on my internal network. Everything works fine, but I have also some computers conected trough PPTP and there I have a problem with sending mails to external recipients. Everytime i get the mail back with error "Relay access denied".

The IP adress of the local mail server is 192.168.1.200/255.255.255.0and the IP adress of the PPTP connection on the pc is 192.168.1.112/255.255.255.255 and I think there is the problem.

Can I change somehow the subnet mask of the PPTP client? Or what can I do with this situation?

Thanks.

SurferTim · Wed Aug 31, 2011 11:31 am

It sounds like you need to edit your postfix settings to allow that ip to relay email. You should be able to check your postfix logs and see what ip postfix is rejecting.

I use sendmail so I am not sure I can help you with the actual entries.

drevokocur · Wed Aug 31, 2011 12:34 pm

Thanks for the tip, but isn`t it possible to change the subnet mask of the PPTP (VPN) connections?

It sounds like you need to edit your postfix settings to allow that ip to relay email. You should be able to check your postfix logs and see what ip postfix is rejecting.

I use sendmail so I am not sure I can help you with the actual entries.

shielder · Wed Aug 31, 2011 1:56 pm

Check maybe theres a NAT that changes your pptp user ip address to something that the server deny

janisk · Wed Aug 31, 2011 4:12 pm

you cannot set /24 as tunnel address. So, just check your configuration. Exim4 user here, and usually to allow connections i can set just network, and then users that match in that network can send e-mail through the server, something like, 10.0.0.0/8 and everyone within can use the server, even if they are 10.1.1.1/24 or 10.1.2.1/32

drevokocur · Wed Aug 31, 2011 5:22 pm

you cannot set /24 as tunnel address. So, just check your configuration. Exim4 user here, and usually to allow connections i can set just network, and then users that match in that network can send e-mail through the server, something like, 10.0.0.0/8 and everyone within can use the server, even if they are 10.1.1.1/24 or 10.1.2.1/32

You were right, I have added a range in the configuration and now it is working. Thanks very much!