Test e-mail failed; SMTP configuration error on Smart-UPS 5000 with NMC2

[robbiethek]

We have a Smart-UPS 5000 and can't get the email notifications to go out. We have a Linux mail server running Postifx that is in the same subnet so I tried setting the SMTP Server IP and tried both ports 25 and 587. When testing I always get:

Last Test Result
(email redacted) Test e-mail failed; SMTP configuration error.
Last Server Response
No data.

I've read the troubleshooting article, as well as this related thread and this one. What else can I check? I made sure firewalld allows the Smart-UPS IP address as well as ports 25 and 587. I tried posting a full tcpdump but it got labeled as the word that rhymes with ham.

192.168.1.11. is the mail server and 192.168.1.231 is the Smart UPS 5000. Some examples from tcpdump:

14:05:56.543855 IP 192.168.1.11.54530 > 192.168.1.231.http: Flags [S], seq 1935784362, win 29200, options [mss 1460,sackOK,TS val 4103350040 ecr 0,nop,wscale 7], length 0

14:05:56.546389 IP 192.168.1.231.http > 192.168.1.11.54530: Flags [S.], seq 1709129928, ack 1935784363, win 4380, options [mss 1460,nop,wscale 0,nop,nop,sackOK], length 0

14:05:56.546404 IP 192.168.1.11.54530 > 192.168.1.231.http: Flags [.], ack 1, win 229, length 0

14:05:56.546454 IP 192.168.1.11.54530 > 192.168.1.231.http: Flags [P.], seq 1:594, ack 1, win 229, length 593: HTTP: POST /NMC/kBoNgel0R0JdgRZndCLrMg/Forms/emtest1 HTTP/1.1

14:05:57.097070 IP 192.168.1.11 > 192.168.1.231: ICMP host 192.168.1.11 unreachable - admin prohibited, length 60

14:05:57.147846 IP 192.168.1.11.54530 > 192.168.1.231.http: Flags [P.], seq 594:1086, ack 413, win 237, length 492: HTTP: GET /NMC/kBoNgel0R0JdgRZndCLrMg/emtest.htm HTTP/1.1
14:05:57.190049 IP 192.168.1.231.http > 192.168.1.11.54530: Flags [P.], seq 413:867, ack 1086, win 3295, length 454: HTTP: HTTP/1.1 200 OK

14:05:58.076116 IP 192.168.1.231.puppet > 192.168.1.11.submission: Flags [S], seq 2919252718, win 4380, options [mss 1460,nop,wscale 0,nop,nop,sackOK], length 0
14:05:58.076230 IP 192.168.1.11 > 192.168.1.231: ICMP host 192.168.1.11 unreachable - admin prohibited, length 60

14:06:00.076497 IP 192.168.1.231.puppet > 192.168.1.11.submission: Flags [S], seq 2919252718, win 4380, options [mss 1460,nop,wscale 0,nop,nop,sackOK], length 0
14:06:00.076545 IP 192.168.1.11 > 192.168.1.231: ICMP host 192.168.1.11 unreachable - admin prohibited, length 60

14:06:04.076324 IP 192.168.1.231.puppet > 192.168.1.11.submission: Flags [S], seq 2919252718, win 4380, options [mss 1460,nop,wscale 0,nop,nop,sackOK], length 0

[robbiethek]

Last Test Result
(email redacted) Test e-mail failed; SMTP configuration error.
Last Server Response
No data.

I've read the troubleshooting article, as well as this related thread and this one. What else can I check? I made sure firewalld allows the Smart-UPS IP address as well as ports 25 and 587. I tried posting a full tcpdump but it got labeled as the word that rhymes with ham.

192.168.1.11. is the mail server and 192.168.1.231 is the Smart UPS 5000. Some examples from tcpdump:

14:05:56.543855 IP 192.168.1.11.54530 > 192.168.1.231.http: Flags [S], seq 1935784362, win 29200, options [mss 1460,sackOK,TS val 4103350040 ecr 0,nop,wscale 7], length 0

14:05:56.546389 IP 192.168.1.231.http > 192.168.1.11.54530: Flags [S.], seq 1709129928, ack 1935784363, win 4380, options [mss 1460,nop,wscale 0,nop,nop,sackOK], length 0

14:05:56.546404 IP 192.168.1.11.54530 > 192.168.1.231.http: Flags [.], ack 1, win 229, length 0

14:05:56.546454 IP 192.168.1.11.54530 > 192.168.1.231.http: Flags [P.], seq 1:594, ack 1, win 229, length 593: HTTP: POST /NMC/kBoNgel0R0JdgRZndCLrMg/Forms/emtest1 HTTP/1.1

14:05:57.097070 IP 192.168.1.11 > 192.168.1.231: ICMP host 192.168.1.11 unreachable - admin prohibited, length 60

14:05:57.147846 IP 192.168.1.11.54530 > 192.168.1.231.http: Flags [P.], seq 594:1086, ack 413, win 237, length 492: HTTP: GET /NMC/kBoNgel0R0JdgRZndCLrMg/emtest.htm HTTP/1.1
14:05:57.190049 IP 192.168.1.231.http > 192.168.1.11.54530: Flags [P.], seq 413:867, ack 1086, win 3295, length 454: HTTP: HTTP/1.1 200 OK

14:05:58.076116 IP 192.168.1.231.puppet > 192.168.1.11.submission: Flags [S], seq 2919252718, win 4380, options [mss 1460,nop,wscale 0,nop,nop,sackOK], length 0
14:05:58.076230 IP 192.168.1.11 > 192.168.1.231: ICMP host 192.168.1.11 unreachable - admin prohibited, length 60

14:06:00.076497 IP 192.168.1.231.puppet > 192.168.1.11.submission: Flags [S], seq 2919252718, win 4380, options [mss 1460,nop,wscale 0,nop,nop,sackOK], length 0
14:06:00.076545 IP 192.168.1.11 > 192.168.1.231: ICMP host 192.168.1.11 unreachable - admin prohibited, length 60

14:06:04.076324 IP 192.168.1.231.puppet > 192.168.1.11.submission: Flags [S], seq 2919252718, win 4380, options [mss 1460,nop,wscale 0,nop,nop,sackOK], length 0

[Teken]

What firmware is the NMC 2 running?!? If you’re still on 5.XX / 6.XX firmware you need to upgrade to v7.1.8.

Show me the SMTP Server settings and a screen capture of the About tab for the NMC.

Questions Ask . . . 👍

[robbiethek]

Firmware Revision is 657.19.M

Application Module v7.1.8

[Teken]

Sorry can’t see the images you uploaded so please verify it can be seen once loaded to the APC Forum.

You can simply write out the settings minus any user details for privacy reasons.

In the interim I would suggest you sign up for a throw away email account with Google. Insure you have setup the *Less Secure* Application password for this new email alias.

Once setup use Google as the SMTP Server and report back the results.

Questions Ask . . . 👍

[robbiethek]

the screenshots are there now. This APC does not have external access and the subnet is NAT'ed. But as mentioned we have access to a Postfix server on the same subnet. How else can I troubleshoot?

[Teken]

Sorry can’t see the images at all try another image format and verify it’s viewable on the APC Forum.

What other network appliance is on site using this internal method to send mail? Have you used the same SMTP settings and credentials?!?

What are the results using the same on the APC UPS?

Questions Ask . . . 

[mikeinnyc]

I've done the legwork for SMTP to work properly.

You can either have any of the following 1,2, or 3

---

---

1) An Email alert:

2) An SMS Text:

3) Or Urgent Matters a Phone call:

Or All three at the same time.

I'll show you email on here.

1) Go to Google and click on your account.

2) Go to Security on the left

3) Go to 2-Step Verification

4) At the Bottom of the page App passwords

To create a new app specific password, type a name for it below.

5) Call It APC or Netbotz or whatever.

6) Copy the password with the spaces don't format it.

----------------------------------------------------------------------------------------------------

E-mail Server Settings

Active Primary DNS Server

192.168.1.1 or the IP address of your Local FIREWALL

Active Secondary DNS Server

1.1.1.1

7) Go to APC and login in the GUI

😎 Configuration / Notification / Email / Server

9) SMTP Server is : smtp.gmail.com

Port is 465 - Yes this is correct

Authentication is checked

Enable

9) Outgoing Mail Configuration

9) From Address: mike@gmail.com

User Name: Google email mike@gmail.com (Not my real email)

Note: From address and User name are the same working google email address.

Password: Paste the password you generated in google here.

If you messed this up go back to google and delete the APC then recreated it and get a new password.

Copy that password and paste in here and confirm.

Use SSL/TLS: Implicitly

Require CA Root Certificate = blank or unchecked.

 

[robbiethek]

None of these are working Google no longer has that password option in security.

[robbiethek]

<<<Sorry can’t see the images you uploaded so please verify it can be seen once loaded to the APC Forum.<<<

Try Safari it seems Google Chrome is blocking images in line, here is what Developer Tools shows:

Request URL:
https://community.se.com/skins/images/BF6D159B146D118BE9AA6800BDEB42FC/responsive_peak/images/image_unmoderated.gif
Request Method:
GET
Status Code:
200 OK (from memory cache)
Remote Address:
18.164.96.18:443
Referrer Policy:
strict-origin-when-cross-origin
cache-control:
s-maxage=10
content-length:
986
content-type:
image/gif;charset=UTF-8
date:
Mon, 10 Mar 2025 13:02:20 GMT
expires:
Tue, 10 Mar 2026 13:02:20 GMT
last-modified:
Mon, 10 Mar 2025 13:01:30 GMT
server:
Apache
vary:
Origin
via:
1.1 fa503ecd9278a874859948f3b586c782.cloudfront.net (CloudFront)
x-amz-cf-id:
ubY_r4J7pvutdOqA3CKiZSAkkc5Z-zo3j0biNE-g4s90nW7obsHxLg==
x-amz-cf-pop:
JFK50-P5
x-cache:
Miss from cloudfront
x-content-type-options:
nosniff
referer:
https://community.se.com/t5/APC-UPS-Data-Center-Enterprise/Test-e-mail-failed-SMTP-configuration-error-on-Smart-UPS-5000/m-p/502173
sec-ch-ua:
"Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"
sec-ch-ua-mobile:
?0
sec-ch-ua-platform:
"macOS"
user-agent:
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36

[seuser3]

FWIW - I cannot see your images either on Firefox. They show as triangular warning symbols (attaching screenshot) and they all link to (edited to avoid it rendering as an image) https <colon> <slash> <slash> community <dot> se <dot> com/skins/images/A9A96D14CA687CD7FCFDF3B8156C5458/responsive_peak/images/image_unmoderated.gif

In looking at your tcpdump results that involve the SMTP server @ 192.168.1.11 you are not able to contact tcp port 587 which implies a firewall on the host and/or some other network restriction (less likely since you note they are on the same subnet) is not configured to allow the connection from the source IP 192.168.1.231. You would need to open that port and confirm the UPS is allowed to connect to it before you will be able to send mail through that route. Once you see a successful connection via tcpdump if it still doesn't work check your SMTP server's syslog to see what postfix is saying and go from there.

14:05:57.097070 IP 192.168.1.11 > 192.168.1.231: ICMP host 192.168.1.11 unreachable - admin prohibited, length 60

14:05:58.076116 IP 192.168.1.231.puppet > 192.168.1.11.submission: Flags [S], seq 2919252718, win 4380, options [mss 1460,nop,wscale 0,nop,nop,sackOK], length 0
14:05:58.076230 IP 192.168.1.11 > 192.168.1.231: ICMP host 192.168.1.11 unreachable - admin prohibited, length 60

14:06:00.076497 IP 192.168.1.231.puppet > 192.168.1.11.submission: Flags [S], seq 2919252718, win 4380, options [mss 1460,nop,wscale 0,nop,nop,sackOK], length 0
14:06:00.076545 IP 192.168.1.11 > 192.168.1.231: ICMP host 192.168.1.11 unreachable - admin prohibited, length 60

14:06:04.076324 IP 192.168.1.231.puppet > 192.168.1.11.submission: Flags [S], seq 2919252718, win 4380, options [mss 1460,nop,wscale 0,nop,nop,sackOK], length 0