Am 22.02.24 um 18:29 schrieb Matus UHLAR - fantomas via Postfix-users:
Am 22.02.24 um 15:58 schrieb Wietse Venema via Postfix-users:
michaelof--- via Postfix-users:
2024-02-22T13:56:15.715392+01:00 vserver postfix/submission/smtpd[150038]: connect 
from <FAILED: sender-dns-name[IPv4]>
2024-02-22T13:56:15.715607+01:00 vserver postfix/submission/smtpd[150038]: improper 
command pipelining after CONNECT from <FAILED: sender-dns-name[IPv4]>: 
\026\003\001\001 
\001\000\001\034\003\003o\365\274\337\000\246\346\341\276\270\237\233\021p\314S\312\371\3149\231\202d\201?\241\332\357\214\330\313\301
 
\255\357\251\234m\024\225\250Yx\344oa\207\342p\354\0261B\347\223m\224Q\td\276n:#\n\000>\023\002\023\003\023\001\300,\3000\000\237\314\251\314\250\314\252\300+\300/
2024-02-22T13:56:15.715853+01:00 vserver postfix/submission/smtpd[150038]: disconnect 
from <FAILED: sender-dns-name[IPv4]> commands=0/0

Configure the client to onnect to port 465 instead of 578.

With Postfix, uncomment the smtps(submissions) service in the Postfix
master.cf file. It should have the same "-o" options lines as the
submission service, plus a line that says "-o smtpd_tls_wrappermode=yes".
Then execute the command "postfix reload".

You may need to open port 465 with a firewall rule.


On 22.02.24 18:10, michaelof--- via Postfix-users wrote:
Opened smtps service in firewalld.

Changed email user config for testing in Thunderbird from port 578 to 465, and from 
"STARTTLS" to "SSL/TLS". Sending from Thunderbird works at once.

You can leave both services running.

587/submission will use (explicit) STARTTLS, port 465/smtps (implicit) SSL/TLS
- different MUAs often call those protocols differently.

Sending from NVR still fails, new msgs in log:

2024-02-22T17:49:57.074140+01:00 vserver postfix/smtps/smtpd[165894]: connect from 
<FAILED: sender-dns-name[IPv4]>
2024-02-22T17:49:57.177663+01:00 vserver postfix/smtps/smtpd[165894]: warning: 
<FAILED: sender-dns-name[IPv4]> : SASL LOGIN authentication failed: Invalid 
authentication mechanism

your sasl server does not support LOGIN authentication mechanism.

with dovecot, you need to set up in dovecot config e.g.:

auth_mechanisms = plain login

and with cyrus sasl, your smtpd config needs e.g.:

mech_list: PLAIN LOGIN



THANK YOU VERY MUCH, Matus and Wietse,

in fact it was the missing "LOGIN" option in dovecot's auth settings, was "auth_mechanisms = 
plain" and now with "auth_mechanisms = plain login" everything works fine.


Kind regards,
Michael
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to