Zimbra Relay Access Denied May 2026

| Setting | Command to Check | Desired State | | :--- | :--- | :--- | | | zmprov getServer zimbraMtaTlsAuthOnly | TRUE | | Submission Port | zmprov getServer zimbraMtaAuthEnabled | TRUE on port 587 | | Trusted Networks | zmprov getServer zimbraMtaMyNetworks | Only internal subnets | Final Thoughts "Relay access denied" is frustrating because it stops legitimate email. But remember: without this guardrail, your Zimbra server would be an open relay—and it would be blacklisted within hours.

Found this helpful? Subscribe to our newsletter for more Zimbra and open-source mail server tips. zimbra relay access denied

zmprov modifyAccount [email protected] +zimbraAllowFromAddress [email protected] zmprov fc account [email protected] This is a classic "broken copier" or "buggy CRM" problem. Printers, scanners, and legacy applications often hard-code an IP address and try to send mail without logging in. | Setting | Command to Check | Desired

Change the sending device to use port 587 (Submission) instead of port 25, and enable SMTP Authentication . Most modern email clients (Outlook, Thunderbird, Apple Mail) support this natively. Subscribe to our newsletter for more Zimbra and

zmprov modifyServer `zmhostname` zimbraMtaMyNetworks '127.0.0.0/8 10.0.0.0/24 YOUR_DEVICE_IP/32' zmcontrol restart mta Only do this for internal, static IPs. Never add public IP ranges here. How to Diagnose the Problem in 30 Seconds Still stuck? Check the mail logs. SSH into your Zimbra server and run:

If you manage a Zimbra Collaboration Suite (ZCS) environment, you’ve likely seen the dreaded "554 5.7.1 <[email protected]>: Relay access denied" error in your mail logs.

zmprov getServer `zmhostname` | grep zimbraMtaAuthEnabled It should return TRUE . If you’ve configured a “Send As” alias (e.g., sending as @gmail.com from your Zimbra webmail), Zimbra will reject it unless you’ve explicitly allowed it.