We have seen more and more ISPs blocking Port 25. This means that sending emails natively from FreePBX or any Asterisk based IPBX for things such as voicemail notification can time out or be rejected.
To get round this you can send your email notifications via Gmail.
Firstly you need a Gmail account, once you have this jot down the user and password, you will need this later.
You now need to connect to your server via ssh as you have a couple of files to edit.
Firstly you need to enter the account details in sasl_passwd
vi /etc/postfix/sasl_passwd
and add
smtp.gmail.com:587 yourmailaddress@gmail.com:password
Save it, then edit main.cf
vi /etc/postfix/main.cf
Then add at the end:
masquerade_domains = yourdomain.com
# The servers hostname below
myhostname = Asterisk.yourdomain.com
mydomain = Asterisk.yourdomain.com
# The email account its being sent from below
myorigin = voicemail@yourdomain.com
relayhost = smtp.gmail.com:587
mynetworks = 127.0.0.0/8
inet_interfaces = loopback-only
smtp_use_tls = yes
smtp_always_send_ehlo = yes
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
smtp_sasl_security_options = noanonymous
smtp_sasl_tls_security_options = noanonymous
smtp_tls_security_level = encrypt
smtp_generic_maps = hash:/etc/postfix/generic
smtp_tls_security_level = secure
smtp_tls_mandatory_protocols = TLSv1
smtp_tls_mandatory_ciphers = high
smtp_tls_secure_cert_match = nexthop
smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
Then enter the following commands at teh command line
postmap hash:/etc/postfix/sasl_passwd
/etc/init.d/postfix restart
Finally you need to make a change to your gmail account to “Allow users to manage their access to less secure apps” which is in the security section of the Gmail ‘Domain’ account setting if its a GSuite account then make sure “Less secure app access” is set to yes in the accounts ‘security section’ if you don’t do this you will see:
535-5.7.8 Username and Password not
accepted. Learn more at?535 5.7.8 https://support.google.com/mail/?p=BadCredentials
or
530-5.7.0 Authentication Required. Learn more at 530 5.7.0 h
ttps://support.google.com/mail/?p=WantAuthError
Most likely the 535 error if ‘Less secure app access’ is not enabled.
You should now be able to send email via the gmail account.
It’s worth making a couple of changes to the gmail account, firstly set and out of office sayings it’s only a sending mailbox and another to delete messages in the inbox.