Re: AUTH'ed SMTP query

2009-04-18 Thread Barney Desmond
2009/4/18 Richard Hobson :
> OK, I think I get it. I'm not seeing 250-AUTH, because I'm not connecting
> via TLS (when doing a telnet to port 25)?

Yep. It's easy enough to test this though:

furin...@shirayuki:~$ openssl s_client -connect
mx.richardhobson.com:25 -starttls smtp

250 DSN
EHLO shirayuki
250-mx.richardhobson.com
250-PIPELINING
250-SIZE 1024
250-VRFY
250-ETRN
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN

If you try to send a mail manually, you might run into trouble when
you perform "RCPT TO: m...@example.com" - this is openssl being silly
and renegotiating the connection because the line started with "R" -
use a lowercase "r" and it'll work fine.


Re: AUTH'ed SMTP query

2009-04-18 Thread Ralf Hildebrandt
* Richard Hobson :
> 
> > http://www.postfix.org/TLS_README.html#server_tls_auth
> > http://www.postfix.org/postconf.5.html#smtpd_tls_auth_only
> 
> OK, I think I get it. I'm not seeing 250-AUTH, because I'm not connecting
> via TLS (when doing a telnet to port 25)?

Yes.

-- 
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung   Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
This is supposed to be a happy occasion. Let's not bicker and argue
about who killed who."-- From Monty Python's Holy Grail


Re: AUTH'ed SMTP query

2009-04-18 Thread Richard Hobson

> http://www.postfix.org/TLS_README.html#server_tls_auth
> http://www.postfix.org/postconf.5.html#smtpd_tls_auth_only

OK, I think I get it. I'm not seeing 250-AUTH, because I'm not connecting
via TLS (when doing a telnet to port 25)?



Thanks,
Richard




Re: AUTH'ed SMTP query

2009-04-18 Thread Richard Hobson
Hi,

> postconf -n
> output?

Here's the output:

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
home_mailbox = Maildir/
inet_interfaces = all
mailbox_command_maps = hash:/etc/postfix/mailbox_command
mailbox_size_limit = 0
mydestination = $mydomain, localhost
myhostname = mx.richardhobson.com
mynetworks = 127.0.0.0/8 [:::127.0.0.0]/104 [::1]/128
myorigin = $mydomain
readme_directory = no
recipient_delimiter = +
relayhost =
smtp_tls_note_starttls_offer = yes
smtp_use_tls = yes
smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
smtpd_recipient_restrictions = reject_unauth_pipelining,
reject_non_fqdn_recipient, permit_mynetworks, permit_sasl_authenticated,
reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_local_domain =
smtpd_sasl_path = smtpd
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks,
reject_non_fqdn_sender, reject_unknown_sender_domain,
reject_unauth_pipelining, permit
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/ssl/certs/mailcert2.pem
smtpd_tls_key_file = $smtpd_tls_cert_file
smtpd_tls_received_header = yes
smtpd_use_tls = yes
virtual_alias_domains =
virtual_alias_maps = hash:/etc/postfix/virtual

Regards,
Richard


Re: AUTH'ed SMTP query

2009-04-18 Thread mouss
Richard Hobson a écrit :
> Hi,
> 
> I've followed some instructions on the web to get SMPT AUTH working in
> Postfix, using saslauthd.
> 
> My client authenticates fine via TLS using LINUX user account credentials,
> and emails are relayed fine. However, when I test the connection, I don't
> get any 250-AUTH lines:
> 
> 220 mx.richardhobson.com ESMTP Postfix (Ubuntu)
> ehlo localhost
> 250-mx.richardhobson.com
> 250-PIPELINING
> 250-SIZE 1024
> 250-VRFY
> 250-ETRN
> 250-STARTTLS
> 250-ENHANCEDSTATUSCODES
> 250-8BITMIME
> 250 DSN
> 
> Is this an issue? 

No. it's the same here.

> Only I connect using AUTH'ed SMTP, so practically it
> doesn't matter if it works, but I'm interested to understand what's gone
> wrong somewhere.
> 


http://www.postfix.org/TLS_README.html#server_tls_auth
http://www.postfix.org/postconf.5.html#smtpd_tls_auth_only



Re: AUTH'ed SMTP query

2009-04-18 Thread Ralf Hildebrandt
* Richard Hobson :
> Hi,
> 
> I've followed some instructions on the web to get SMPT AUTH working in
> Postfix, using saslauthd.
> 
> My client authenticates fine via TLS using LINUX user account credentials,
> and emails are relayed fine. However, when I test the connection, I don't
> get any 250-AUTH lines:

postconf -n
output?

-- 
Ralf Hildebrandt
Postfix - Einrichtung, Betrieb und Wartung   Tel. +49 (0)30-450 570-155
http://www.computerbeschimpfung.de
Profanity is the one language all programmers know best.