New router - smtp issues

I have recently installed a network at my home which includes the MikroTik Hex 5 port router with a 24 port D-Link unmanaged switch.

The install really went seamless. Everything is up and working fantastic… except…

On one laptop in the house (MacBook Pro), we have 2 Cox email addresses that will NOT connect to their outgoing smtp mail server.

Error: Could not connect to this SMTP server. Check your network connection that you entered the correct information in the Account Preferences. Also verify that the server supports SSL. If it does not, deselect the “Use SSL” Checkbox in the advanced tab of Account preferences

Things I’ve tried -

  1. plugged directly into the MikroTik router to eliminate the other pieces of the network and still did not work
  2. tried from my hotspot on my phone and it sent with no issues
  3. tried various ports for the smtp server - 465 (default), 557
  4. tried turning on/off SSL
  5. Tried both wired and wireless on the network and still the same error.

I’ve looking through just about every setting on the router and just don’t see anything that stands out to me. This is my first Mikrotik and I’m sure I’m missing something obvious.

Please help and Thank you.

When you want other people to debug your configuration you need to include it with your posting.
So run a /export to a file and include the file with a message. (removing any passwords appearing in there)

Thank you. Here is the config for the export:

[admin@MikroTik] > /export

oct/16/2016 19:05:18 by RouterOS 6.37.1

software id = D1DF-48GM

/interface bridge
add name=bridge1
/interface ethernet
set [ find default-name=ether2 ] name=ether2-master
set [ find default-name=ether3 ] master-port=ether2-master
set [ find default-name=ether4 ] master-port=ether2-master
set [ find default-name=ether5 ] master-port=ether2-master
/ip neighbor discovery
set ether1 discover=no
/ip hotspot profile
set [ find default=yes ] html-directory=flash/hotspot
/ip pool
add name=dhcp ranges=192.168.88.10-192.168.88.254
/ip dhcp-server
add address-pool=dhcp disabled=no interface=bridge1 name=defconf
/interface bridge port
add bridge=bridge1 interface=ether2-master
/ip address
add address=192.168.88.1/24 comment=defconf interface=ether2-master
network=192.168.88.0
/ip dhcp-client
add comment=defconf dhcp-options=hostname,clientid disabled=no
interface=ether1
/ip dhcp-server lease
add address=192.168.88.253 client-id=1:44:d9:e7:f9:c6:31 mac-address=
44:D9:E7:F9:C6:31 server=defconf
add address=192.168.88.252 client-id=1:44:d9:e7:f9:c6:2d mac-address=
44:D9:E7:F9:C6:2D server=defconf
/ip dhcp-server network
add address=192.168.88.0/24 comment=defconf gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add action=fasttrack-connection chain=forward comment=
"defconf: fasttrack" connection-state=established,related
add action=accept chain=forward comment=
"defconf: accept established,related" connection-state=
established,related
add action=drop chain=forward comment="defconf: drop invalid"
connection-state=invalid
add action=drop chain=forward comment=
"defconf: drop all from WAN not DSTNATed" connection-nat-state=
!dstnat connection-state=new in-interface=ether1
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established
add action=accept chain=input connection-state=related
add action=drop chain=input in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade"
out-interface=ether1
/ip service
set www-ssl disabled=no
/system clock
set time-zone-name=America/Chicago
/system routerboard settings
set cpu-frequency=720MHz protected-routerboot=disabled
/tool mac-server
set [ find default=yes ] disabled=yes
add interface=ether2-master
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2-master
/tool sniffer
set filter-direction=tx filter-ip-address=192.168.88.241/32

I don’t see anything in your config that could block outgoing smtp. In fact, it looks like almost untouched default config, and it does not block anything outgoing.

Try to use port 587, that’s the right one you should be using.

Yes, that’s exactly what it is. I plugged it in and didn’t touch anything (that I know of). I’ve tried port 587 with absolutely no luck. That’s why I’m so perplexed.

You need to eliminate all other things to troubleshoot this.

Switch off your wireless on the laptop, plug it directly into the MikroTik with a network cable. Take the switch and everything else plugged into the MikroTik and disconnect it, except for the WAN connection and your laptop.

Does the problem still happen? If it does, then proceed to disconnect the MikroTik and plug your laptop directly into the Internet so that it gets an IP direct from your provider. Does the problem still happen then?

Your router does not appear to be the cause of this problem…
Did you move to another ISP at the same time? Did you get a different public IP address?
It may be a configuration error at the ISP, that sometimes happens when they start using a new network address block.