Hi Jason,

I'm not sure if I got you right, but if you want to use your mail server
outside your LAN, the most common setup would be in such a way that all
PCs inside your LAN can send emails without SMTP AUTH but outside your
LAN, SMTP AUTH would be required. Try something like this in your
tcp.smtp file:

a.b.c:allow,RELAYCLIENT=""
:allow,SMTPAUTH=""

Hope this helps.

HyperAxe
Email: [EMAIL PROTECTED]
Web: http://www.hyperaxe.com 

-----Original Message-----
From: Jason Folkens [mailto:[EMAIL PROTECTED] 
Sent: Thursday, July 21, 2005 5:57 AM
To: [email protected]
Subject: smtp auth

Hi.   I'm kind of new to qmail, so my question probably sounds pretty 
elementary.

I have a qmail-ldap server setup.  Right now it only relays off of my
local 
subnet (which I refer to below as a.b.c.) as per the instructions in the

/etc/tcp.smtp file

I want to implement SMTP AUTH so that I can roam outside my LAN.    I 
changed my supervise/qmail-smtpd/run file from this:

QMAILDUID=`id -u qmaild`
NOFILESGID=`id -g qmaild`
MAXSMTPD=`head -1 /var/qmail/control/concurrencyincoming`
LOCAL=`head -1 /var/qmail/control/me`

#some irrevelant if statements removed from email

exec /usr/local/bin/softlimit -m 2000000 \
    /usr/local/bin/tcpserver -v -R -l "$LOCAL" -x /etc/tcp.smtp.cdb -c 
"$MAXSMTPD" \
        -u "$QMAILDUID" -g "$NOFILESGID" 0 25 /var/qmail/bin/qmail-smtpd

2>&1

to this, because of the text written on life with qmail-ldap, section
13.2:

#everything unchanged except for this last line of code:

exec /usr/local/bin/softlimit -m 2000000 \
    /usr/local/bin/tcpserver -v -R -l "$LOCAL" -x /etc/tcp.smtp.cdb -c 
"$MAXSMTPD" \
        -u "$QMAILDUID" -g "$NOFILESGID" 0 25 /var/qmail/bin/qmail-smtpd

/var/qmail/bin/auth_smtp /usr/bin/true 2>&1

then I modified the /etc/tcp.smtp from this:

a.b.c.:allow,RELAYCLIENT=""
:deny

to this:

a.b.c.:deny

I've also tried variations of this, like

a.b.c.:allow,RELAYCLIENT="",SMTPAUTH=""
:deny

but whatever I do to attempt to solve this problem either leads me wide
open 
for relaying, or doesn't even let me send the auth credentials to begin 
with.    Can someone please tell me the proper way of going around this 
problem?

Thanks,

-- Jason





Reply via email to