Email Authentication help with 6.40

RouterOS General
1

Greetings!

I have two CRS210-8G-2S+ routers, purchased about a year apart. The older CRS210-8G-2S+ is running version 6.35.4, and the newer CRS210-8G-2S+ is running version 6.40. Both routers reside on the internet with robust firewalls, and I’m attempting to setup email logging notifications for critical alerts to my in-house exchange email server.

On the older CRS210-8G-2S+ running 6.35.4, I have successfully configured critical email notifications. Using the exact same settings on the CRS210-8G-2S+ running 6.40, I get this error in my log:

Aug/03/2017 16:38:48 e-mail,debug recv: 220 ***************************************************************************************
Aug/03/2017 16:38:48 e-mail,debug send EHLO [X.X.118.58]
Aug/03/2017 16:38:48 e-mail,debug recv: 250-domain.com Hello [X.X.118.58]
Aug/03/2017 16:38:48 e-mail,debug recv: 250-SIZE
Aug/03/2017 16:38:48 e-mail,debug recv: 250-PIPELINING
Aug/03/2017 16:38:48 e-mail,debug recv: 250-DSN
Aug/03/2017 16:38:48 e-mail,debug recv: 250-ENHANCEDSTATUSCODES
Aug/03/2017 16:38:48 e-mail,debug recv: 250-XXXXXXXA
Aug/03/2017 16:38:48 e-mail,debug recv: 250-AUTH NTLM
Aug/03/2017 16:38:48 e-mail,debug recv: 250-8BITMIME
Aug/03/2017 16:38:48 e-mail,debug recv: 250-BINARYMIME
Aug/03/2017 16:38:48 e-mail,debug recv: 250 XXXXXXXB
Aug/03/2017 16:38:48 system,e-mail,error Error sending e-mail <system,error,critical login failure for user admin from Y.Y.78.2 via winbox>: AUTH method not supported
Aug/03/2017 16:38:48 e-mail,debug send RSET
Aug/03/2017 16:38:53 e-mail,debug recv: 250 2.0.0 Resetting
Aug/03/2017 16:38:53 e-mail,debug send QUIT
Aug/03/2017 16:38:53 e-mail,debug recv: 221 2.0.0 Service closing transmission channel

I confirmed that the user name and password for the new device is valid by testing the new user/pass on the old device. When the username and password of the 6.40 router are used to authenticate on the 6.35.4 router, email is delivered as expected by the 6.35.4 router.

The export of the /tool/email on the new router is:

# aug/03/2017 16:43:21 by RouterOS 6.40
# software id = EUTX-95E0
#
# model = CRS210-8G-2S+
# serial number = <redacted>
/tool e-mail
set address=exchange2.domain.com from=YR-GST-RTR@domain.com password=”<redacted>” start-tls=yes user=YR-GST-RTR

The export of /tool/email on the old router is basically identical.

Was there a change in the email authentication code between 6.35.4 and 6.40? How can I troubleshoot the authentication issue? Are there additional settings in 6.40 that need to be set for email authentication to work?

Thank you in advance for any help or advice to resolve this issue.

2

Greetings,

Has anyone else experienced trouble with email authentication in the recent versions of routeros? I appreciate any ideas or thoughts anyone has that might point me to a solution.

Thank you

3

The only authentication type your server presents to client is NTLM, which is relatively uncommon one. According to manual it can’t work:

My guess is that you have some exception set in Exchange for IP address of other (working) router, to allow plain auth from there.

4

Thank you, Sob.

Your reply led me to the fix. I don’t know why the older router authentication works, since I can’t find any exception for it, but I was able to add a new exception to my mail server for TLS on the new router’s IP, and email notifications are working now.