Hello,
I am still trying to get this email sending with autodiscover working.
I've temporarily put Thunderbird aside as it looks like it has a long
standing compatibility issue with sending commands to early, and have
switched to outlook 2010. With it I am getting the following which I
do not know what unknown is.
Apr 21 04:22:38 hostname postfix/submission/smtpd[44179]: connect from
Connecting-Host-and-IP
Apr 21 04:22:39 hostname postfix/submission/smtpd[44179]: lost
connection after UNKNOWN from Connection-hostname-ip
I've tried adjusting broken_sasl_auth_clients no by default, set it to
yes, didn't change anything.
My current smtpd_restrictions:
main.cf:
# Conditions in which Postfix works as a relay. (for mail user clients)
smtpd_relay_restrictions =
reject_non_fqdn_recipient
reject_unknown_recipient_domain
permit_mynetworks
reject_unauth_destination
smtpd_recipient_restrictions =
permit_mynetworks
permit_sasl_authenticated
reject_unauth_destination
check_helo_access hash:/usr/local/etc/postfix/helo_access,
,check_helo_access pcre:/usr/local/etc/postfix/helo_checks
,check_sender_mx_access cidr:/usr/local/etc/postfix/bogus_mx
check_sender_access hash:/usr/local/etc/postfix/safe_addresses
check_sender_access hash:/usr/local/etc/postfix/auto-whtlst
check_client_access cidr:/usr/local/etc/postfix/spamfarms
check_client_access cidr:/usr/local/etc/postfix/sinokorea.cidr
check_recipient_access mysql:/usr/local/etc/postfix/db/recipient-access.cf
permit_dnswl_client list.dnswl.org=127.0.[2..14].[1..3]
check_reverse_client_hostname_access
pcre:/usr/local/etc/postfix/fqrdns.pcre
reject_unknown_reverse_client_hostname
reject_non_fqdn_sender
#reject_non_fqdn_helo_hostname
#reject_invalid_helo_hostname
#reject_unknown_helo_hostname
reject_unlisted_recipient
reject_rhsbl_client dbl.spamhaus.org
reject_rhsbl_sender dbl.spamhaus.org
reject_rhsbl_helo dbl.spamhaus.org
check_policy_service unix:private/spf-policy
# Postfix Quota status service
#check_policy_service inet:127.0.0.1:12345
check_policy_service unix:private/dovecot-quota
# Restrictions for all sending foreign servers ("SMTP clients")
smtpd_client_restrictions =
permit_mynetworks
#check_client_access hash:/usr/local/etc/postfix/without_ptr
#reject_unknown_client_hostname
smtpd_helo_required = yes
smtpd_helo_restrictions =
#permit_mynetworks
#reject_invalid_helo_hostname
#reject_non_fqdn_helo_hostname
#reject_unknown_helo_hostname
# Block clients, which start sending too early
#smtpd_data_restrictions = reject_unauth_pipelining
# Restrictions for MUAs
#mua_relay_restrictions =
reject_non_fqdn_recipient,reject_unknown_recipient_domain,permit_mynetworks,permit_sasl_authenticated,reject
#mua_sender_restrictions =
permit_mynetworks,reject_non_fqdn_sender,reject_sender_login_mismatch,permit_sasl_authenticated,reject
#mua_client_restrictions = permit_mynetworks,permit_sasl_authenticated,reject
and in master.cf:
submission inet n - n - - smtpd
-o syslog_name=postfix/submission
# for opportunistic smtpd
#-o smtpd_tls_security_level=may
# Encrypt by default
-o smtpd_tls_dh1024_param_file=/etc/ssl/dhparam.pem
-o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes
-o smtpd_sasl_type=dovecot
-o smtpd_sasl_path=private/auth
-o smtpd_sasl_security_options=noanonymous
-o
smtpd_recipient_restrictions=reject_non_fqdn_recipient,reject_unknown_recipient_domain,permit_sasl_authenticated,reject
#-o
smtpd_sender_login_maps=mysql:/usr/local/etc/postfix/db/sender-login-maps.cf
-o tls_preempt_cipherlist=yes
#-o cleanup_service_name=submission-header-cleanup
Are these restrictions right in main.cf and master.cf?
Thanks.
Dave.
On 4/20/18, Wietse Venema <[email protected]> wrote:
> David Mehler:
>> Hi,
>>
>> It's Thunderbird 52.7. Is there a workaround to make this work?
>
> Yes, do nothing. In particular, do not use the Postfix
> reject_unauth_pipelining feature, because that would trigger
> a REJECT response.
>
> Wietse
>
>> On 4/20/18, Viktor Dukhovni <[email protected]> wrote:
>> >
>> >
>> >> On Apr 20, 2018, at 4:52 PM, David Mehler <[email protected]>
>> >> wrote:
>> >>
>> >> I'm atempting to configure email autoconfig and autodiscover services
>> >> for Mozilla and Microsoft clients. I'm using Postfix 3.3. At first I
>> >> thought I was dealing with either an Apache or Dovecot issue, now I'm
>> >> thinking it's an error with my Postfix configuration.
>> >>
>> >> Whenever I atempt a connection I'm getting this in my postfix error
>> >> log
>> >> file:
>> >>
>> >> Apr 20 14:37:00 hostname postfix/submission/smtpd[92360]: improper
>> >> command pipelining after EHLO from Connecting-Machine-Hostname-And-IP:
>> >> QUIT\r\n
>> >
>> > This client does not implement SMTP correctly. There's nothing wrong
>> > with the Postfix configuration. The client MUST wait for the EHLO
>> > response *before* sending QUIT.
>> >
>> > --
>> > Viktor.
>> >
>> >
>>
>
