Re: SASL Authentication Failure & Postfix

From: Gerard (no email)
Date: Sun Sep 24 2006 - 14:34:15 EDT

  • Next message: Andreas Winkelmann: "Re: SASL Authentication Failure & Postfix"

    Andreas Winkelmann <>

    > Show your Postfix-Configuration. "postconf -n" and master.cf (without
    > Comments).

    ***** postconf -n *****

    broken_sasl_auth_clients = yes
    command_directory = /usr/local/sbin
    config_directory = /usr/local/etc/postfix
    content_filter = scan:[127.0.0.1]:10025
    daemon_directory = /usr/local/libexec/postfix
    debug_peer_level = 2
    disable_dns_lookups = yes
    html_directory = no
    mailbox_command = /usr/local/libexec/dovecot/deliver
    mailq_path = /usr/local/bin/mailq
    manpage_directory = /usr/local/man
    mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, mail.$mydomain, www.$mydomain, ftp.$mydomain
    mynetworks_style = class
    myorigin = $mydomain
    newaliases_path = /usr/local/bin/newaliases
    readme_directory = no
    relayhost = smtp.gmail.com
    sample_directory = /usr/local/etc/postfix
    sender_dependent_relayhost_maps = hash:/usr/local/etc/postfix/sd_rely
    sendmail_path = /usr/local/sbin/sendmail
    setgid_group = maildrop
    smtp_enforce_tls = yes
    smtp_generic_maps = hash:/usr/local/etc/postfix/generic
    smtp_sasl_auth_enable = yes
    smtp_sasl_password_maps = hash:/usr/local/etc/postfix/sasl_passwd
    smtp_sasl_path = smtp
    smtp_sasl_security_options = noanonymous, noplaintext
    smtp_sasl_tls_security_options = noanonymous
    smtp_sender_dependent_authentication = yes
    smtp_tls_CAfile = /usr/local/etc/postfix/certs/cacert.pem
    smtp_tls_cert_file = /usr/local/etc/postfix/certs/postfix-cert.pem
    smtp_tls_key_file = /usr/local/etc/postfix/certs/postfix-key.pem
    smtp_tls_loglevel = 0
    smtp_tls_per_site = hash:/usr/local/etc/postfix/tls_per_site
    smtp_tls_session_cache_database = btree:/var/run/smtp_tls_session_cache
    smtp_use_tls = yes
    smtpd_banner = $myhostname ESMTP $mail_name ($mail_version)
    smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
    smtpd_sasl_auth_enable = yes
    smtpd_sasl_authenticated_header = yes
    smtpd_sasl_exceptions_networks = 127.0.0.0/8
    smtpd_sasl_local_domain = $myhostname
    smtpd_tls_CAfile = /usr/local/etc/postfix/certs/cacert.pem
    smtpd_tls_cert_file = /usr/local/etc/postfix/certs/postfix-cert.pem
    smtpd_tls_key_file = /usr/local/etc/postfix/certs/postfix-key.pem
    smtpd_tls_session_cache_database = btree:/var/smtpd_tls_session_cache
    smtpd_use_tls = yes
    transport_maps = hash:/usr/local/etc/postfix/transport
    unknown_local_recipient_reject_code = 550

    ***** master.cf *****

    #
    # Postfix master process configuration file. For details on the format
    # of the file, see the master(5) manual page (command: "man 5 master").
    #
    # ==========================================================================
    # service type private unpriv chroot wakeup maxproc command + args
    # (yes) (yes) (yes) (never) (100)
    # ==========================================================================
    smtp inet n - n - - smtpd
    587 inet n - n - - smtpd
    #
    #submission inet n - n - - smtpd
    # -o smtpd_enforce_tls=yes
    # -o smtpd_sasl_auth_enable=yes
    # -o smtpd_client_restrictions=permit_sasl_authenticated,reject
    #smtps inet n - n - - smtpd
    # -o smtpd_tls_wrappermode=yes
    # -o smtpd_sasl_auth_enable=yes
    # -o smtpd_client_restrictions=permit_sasl_authenticated,reject
    #628 inet n - n - - qmqpd
    pickup fifo n - n 60 1 pickup
    cleanup unix n - n - 0 cleanup
    qmgr fifo n - n 300 1 qmgr
    #qmgr fifo n - n 300 1 oqmgr
    tlsmgr unix - - n 1000? 1 tlsmgr
    rewrite unix - - n - - trivial-rewrite
    bounce unix - - n - 0 bounce
    defer unix - - n - 0 bounce
    trace unix - - n - 0 bounce
    verify unix - - n - 1 verify
    flush unix n - n 1000? 0 flush
    proxymap unix - - n - - proxymap
    smtp unix - - n - - smtp
    # When relaying mail as backup MX, disable fallback_relay to avoid MX loops
    relay unix - - n - - smtp
            -o fallback_relay=
    # -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
            -o smtp_generic_maps=
    showq unix n - n - - showq
    error unix - - n - - error
    discard unix - - n - - discard
    local unix - n n - - local
    virtual unix - n n - - virtual
    lmtp unix - - n - - lmtp
    anvil unix - - n - 1 anvil
    scache unix - - n - 1 scache
    #
    ## ==================================================================
    # Added by me for ClamSMTP
    # AV scan filter (used by content_filter)
    scan unix - - n - 16 smtp
            -o smtp_send_xforward_command=yes
            -o smtp_enforce_tls=no
    # -o content_filter=scan:[127.0.0.1]:10025
            
    # For injecting mail back into postfix from the filter
    127.0.0.1:10026 inet n - n - 16 smtpd
            -o content_filter=
            -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
            -o smtpd_helo_restrictions=
            -o smtpd_client_restrictions=
            -o smtpd_sender_restrictions=
            -o smtpd_recipient_restrictions=permit_mynetworks,reject
            -o mynetworks_style=class
            -o smtpd_authorized_xforward_hosts=127.0.0.0/8
    #
    # ====================================================================
    # Interfaces to non-Postfix software. Be sure to examine the manual
    # pages of the non-Postfix software to find out what options it wants.
    #
    # Many of the following services use the Postfix pipe(8) delivery
    # agent. See the pipe(8) man page for information about ${recipient}
    # and other message envelope options.
    # ====================================================================
    #
    # maildrop. See the Postfix MAILDROP_README file for details.
    # Also specify in main.cf: maildrop_destination_recipient_limit=1
    #
    maildrop unix - n n - - pipe
      flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
    #
    # The Cyrus deliver program has changed incompatibly, multiple times.
    #
    old-cyrus unix - n n - - pipe
      flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
    # Cyrus 2.1.5 (Amos Gouaux)
    # Also specify in main.cf: cyrus_destination_recipient_limit=1
    cyrus unix - n n - - pipe
      user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
    #
    # See the Postfix UUCP_README file for configuration details.
    #
    uucp unix - n n - - pipe
      flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
    #
    # Other external delivery methods.
    #
    ifmail unix - n n - - pipe
      flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
    bsmtp unix - n n - - pipe
      flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient
    #


  • Next message: Andreas Winkelmann: "Re: SASL Authentication Failure & Postfix"





    Hosted Email Solutions

    Invaluement Anti-Spam DNSBLs



    Powered By FreeBSD   Powered By FreeBSD