Alfresco SMTP server is an open relay?

[moby]

I have configured 3.4.d on Ubuntu 10.10 for both in/outbound mail and IMAP. Outbound via SMTPS and IMAP work but not inbound. Ran a few external checks on DNS config etc and discovered that my server is an open relay. How do I fix this? Already been blacklisted after only a few hours of configuration pain!

###############################
## Common Alfresco Properties #
###############################

dir.root=/opt/alfresco-3.4.d/alf_data

web.application.context.url=http://127.0.0.1:8080/alfresco

### database connection properties ###
db.driver=org.gjt.mm.mysql.Driver
db.username=alfresco
db.password=****
db.name=alfresco
db.url=jdbc:mysql://localhost:3306/${db.name}?useUnicode=yes&characterEncoding=UTF-8

### FTP Server Configuration ###
ftp.enabled=true
ftp.port=21
ftp.ipv6.enabled=false

### RMI service ports ###
alfresco.rmi.services.port=50500
avm.rmi.service.port=0
avmsync.rmi.service.port=0
attribute.rmi.service.port=0
authentication.rmi.service.port=0
repo.rmi.service.port=0
action.rmi.service.port=0
deployment.rmi.service.port=0

### External executable locations ###
ooo.exe=/opt/alfresco-3.4.d/openoffice/program/soffice.bin
ooo.enabled=true
img.root=/opt/alfresco-3.4.d/common
img.dyn=${img.root}/lib
img.exe=${img.root}/bin/convert
swf.exe=/opt/alfresco-3.4.d/common/bin/pdf2swf
jodconverter.enabled=true 
jodconverter.officeHome=/opt/alfresco-3.4.d/openoffice 
jodconverter.portNumbers=8101 

### Initial admin password ###
alfresco_user_store.adminpassword=**

### IMAP Configuration ###
imap.server.enabled=true
imap.server.port=143
imap.server.host=192.168.2.10
imap.server.attachments.extraction.enabled=true
### default config made explicit for reference ###
imap.config.server.mountPoints=AlfrescoIMAP
imap.config.server.mountPoints.default.mountPointName=IMAP
imap.config.server.mountPoints.default.modeName=ARCHIVE
imap.config.server.mountPoints.default.store=${spaces.store}
imap.config.server.mountPoints.default.rootPath=/${spaces.company_home.childname}
imap.config.server.mountPoints.value.AlfrescoIMAP.mountPointName=Alfresco IMAP
imap.config.server.mountPoints.value.AlfrescoIMAP.modeName=MIXED

### Outbound mail via Google and SMTPS ###

mail.host=smtp.gmail.com
mail.port=465
mail.protocol=smtps
mail.username=<user>
mail.password=*****
mail.smtps.starttls.enable=true
mail.smtps.auth=true
mail.from.default=admin@alfresco.com

# Enable/Disable the inbound email service.  The service could be used by processes other than
# the Email Server (e.g. direct RMI access) so this flag is independent of the Email Service.
#————-
email.inbound.enabled=true

# Email Server properties 
#————-
email.server.enabled=true
email.server.port=25
email.server.domain=<mydomain.com>
email.inbound.unknownUser=anonymous
email.server.host = 127.0.1.1

# A comma separated list of email REGEX patterns of allowed senders.
# If there are any values in the list then all sender email addresses
# must match.  For example:
#   .*\@alfresco\.com, .*\@alfresco\.org
# Allow everyone:
#————-
email.server.allowed.senders=.*

### GoogleDocs configuration ###

googledocs.googleeditable.enabled=true
googledocs.username=<user>
googledocs.password=****‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍‍

Have read many posts but seem fairly random relating to different versions and so on. Have just created the user anonymous and added to email-contributors group. Not tried inbound as still have open relay challenge.

Any pointers appreciated!

[mrogers]

Alfresco is not an open relay.

The inbound email stuff may make it look like one on casual inspection,  but at the end of the day, alfresco isn't a store and forward email server, and there is no "relaying".

[savic_prvoslav]

Alfresco is defenetly a relay , thas is how google sees it, this version 3.4.d .
Is there a workaround for this?

[mrogers]

Alfresco is not an email relay, open or otherwise.  It does not relay email messages,  what it does is allow you to do is store documents in a content repository via SMTP.   

Furthermore it is not "open" since the messages are verified.

First you need to understand why google is flagging a false positive.    Then you may be able to stop it with a firewall or email server or other configuration.

[savic_prvoslav]

I know you are right we use alfresco that way but this version is making this problem, can you give me some explation on how to fix this.


edit: @ the end a understood the problem it was tls not relay in the end. Just updated to subethasmtp-3.1.7 , and disableTLS=true.