On Tuesday 04 August 2009 23:12:56 Samuel Sappa wrote:
> Sorry if this question already asked,
Lots of times.
> I'm configuring postfix for SMTP AUTH with dovecot and here's my
> main.cf configuration
[snip]
> and if my client try to send email from outside the network in
> maillog, it's display :
>
> Aug 5 10:20:37 ns-1 dovecot: pop3-login: Login: user=<samuel>,
> method=PLAIN, rip=::ffff:192.169.54.147, lip=::ffff:192.168.101.245,
> TLS
> Aug 5 10:20:37 ns-1 dovecot: POP3(samuel): Disconnected: Logged out
> top=0/0, retr=0/0, del=0/0, size=0
These are Dovecot POP3 logs, not Postfix.
> Aug 5 10:21:15 ns-1 postfix/smtpd[15817]: connect from
> unknown[192.169.54.147] Aug 5 10:21:15 ns-1 postfix/smtpd[15817]: setting
> up TLS connection from unknown[192.169.54.147]
> Aug 5 10:21:15 ns-1 postfix/smtpd[15817]: TLS connection established
> from unknown[192.169.54.147]: TLSv1 with cipher RC4-MD5 (128/128 bits)
And that is TLS, not SASL AUTH. At this point in the logs there should
be a line showing that AUTH was successful (or failed.)
> Aug 5 10:21:15 ns-1 postfix/smtpd[15817]: NOQUEUE: reject: RCPT from
> unknown[192.169.54.147]: 554 5.7.1 <imanuel.a.si...@rumah.com>: Relay
> access denied; from=<sam...@kantor.com> to=<imanuel.a.si...@rumah.com>
> proto=ESMTP helo=<IBMLaptop>
> Aug 5 10:21:18 ns-1 postfix/smtpd[15817]: disconnect from
> unknown[192.169.54.147]
>
> if there's some mistake that i made in my main.cf or something else
> that's all from me thank's a lot your kind help
There is no evidence that the client attempted to AUTH. The only
glaring error in your config, check_relay_domains, is not really an
error at all. (It's harmless, but it shows that you have been looking
at old, outdated documentation, perhaps such as a poorly-understood
third-party HOWTO.)
What we've got here is ... failure to authenticate. (Apologies to the
late Strother Martin.) This is a very common problem with Microsoft
clients. Test and ensure it works with a better client, first. Then
Google "postfix-users outlook auth" to find the scores of other people
with the same issue. A gratuitous hint: add "mechanism" to the search,
and you will probably find the second best answer.
The best answer: refuse to support broken mail clients!
--
Offlist mail to this address is discarded unless
"/dev/rob0" or "not-spam" is in Subject: header
