* Sad Clouds via Postfix-users <[email protected]>:
> I'm trying to disable MUA submission on port 25. I set these in my
> config:
> 
> main.cf:
> smtpd_sasl_auth_enable = no
> 
> master.cf:
> smtp      inet  n       -       n       -       1       postscreen
> smtpd     pass  -       -       n       -       -       smtpd
> dnsblog   unix  -       -       n       -       0       dnsblog
> tlsproxy  unix  -       -       n       -       0       tlsproxy
> 
> However for some reason MUAs can still authenticate and submit mail when
> connecting on port 25, even though SASL authentication is disabled
> globally for smtpd. Am I missing something here?

What does a telnet to your server on port 25 and an EHLO ... show? Does your
server announce AUTH in the list of ESMTP capabilities?

This is what I seen when I use swaks instead of telnet:

$ swaks -s mail.sys4.de -quit-after=AUTH
=== Trying mail.sys4.de:25...
=== Connected to mail.sys4.de.
<-  220 mail.sys4.de ESMTP Postfix
 -> EHLO mx.state-of-mind.de
<-  250-mail.sys4.de
<-  250-SIZE 40960000
<-  250-ETRN
<-  250-STARTTLS
<-  250-ENHANCEDSTATUSCODES
<-  250-8BITMIME
<-  250-DSN
<-  250 SMTPUTF8
 -> QUIT
<-  221 2.0.0 Bye
=== Connection closed with remote host.

There's no AUTH. Your server also should not show AUTH.


p@rick

-- 
[*] sys4 AG

https://sys4.de, +49 (89) 30 90 46 64
Schleißheimer Straße 26/MG,80333 München

Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer
Aufsichtsratsvorsitzender: Florian Kirstein

_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to