Thanks Thomas.
I had initially installed OpenSMTPD on a VM to do some testing as MSMTP was
functional on my webserver.
So I've installed it on my webserver and applied your suggested change.
It's now working as expected.
I had initially some authentication issues with my ISP Exchange SMTP host
("530 5.7.1 Client was not authenticated") but when I switched to their
general purpose SMTP host, it worked fine.
So here's my final /etc/smtpd.conf file:
table secrets file:/etc/mail/secrets
listen on 127.0.0.1 port 25
action "relay" relay host smtp+tls://mail.iinet.net.au:465 auth <secrets>
match from any for any action "relay"
Thanks again for the help!
Jean-Marc
On Fri, 11 Nov 2022 at 16:13, Thomas Bohl <opensmtpd-misc-64...@aloof.de>
wrote:
> Hello,
>
> > I hope someone can help me here. I have a small wordpress website from
> > which I am sending emails using a free plugin to my ISP SMTP server over
> > STARTTLS (smtpauth.exchange.iinet.net.au:587.
>
> > Now I am trying OpenSMTP which should do the job but for some reason it
> > returns "550 Invalid recipient" when I try to send emails through it.
> >
> > All I want is the MTA to accept the mail and forward it to the
> > smarthost. Any idea?
> >
> > Here's my /etc/smtpd.conf file:
> > ----------------------------------------
> > table secrets file:/etc/mail/secrets
> > listen on 192.168.1.101 port 25
> > action "relay" relay host smtp+tls://smtpauth.exchange.iinet.net.au:587
> > <http://smtpauth.exchange.iinet.net.au:587> auth <secrets>
> > match for any action "relay"
>
> Try
>
> match from any for any action "relay"
>
> If that doesn't fix it, its because OpenSMTPD has build in protections
> against accidental "open relay" configurations, requiring authentication
> from a incoming non local connection. I'm guessing that 192.168.1.101
> could make it non local, though.
>
> If OpenSMTPD runs on the same machine as the webserver you could just
> "listen on" your loopback device and let wordpress connect to
> 127.0.0.1:25. If it needs to be done over 192.168.1.101 it gets
> complicated. You will need to activate authentication, which requires an
> encrypted connection thus a need for a certificate.
>
>
>
