Re: smtps 465 works, submission 587 does not

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



>>>>> Squirrelmail runs on the same machine as postfix and sends mail fine
>>>
>>> Is there any reason you need an encrypted connection when sending mail
>>> on the localhost?  This just creates unnecessary overhead and is
>>> usually avoided if the connection is not over public networks.  It's
>>> trivial to add a secondary listener to Postfix's master.cf that
>>> accepts SquirrelMail/localhost-only email submissions unencrypted on
>>> another port.
>>
>> Could you show me how to do that?
>
> Add something such as this to master.cf, the port in this example
> being 10025, which you'd need to change in the SquirrelMail config
> too.
>
> localhost:10025 inet  n       -       n       -       -      smtpd
>  -o mynetworks=127.0.0.0/8
>  -o content_filter=
>  -o smtpd_client_restrictions=
>  -o smtpd_helo_restrictions=
>  -o smtpd_sender_restrictions=
>  -o smtpd_recipient_restrictions=permit_mynetworks,reject
>  -o smtpd_data_restrictions=
>  -o smtpd_end_of_data_restrictions=
>  -o smtpd_restriction_classes=
>
> There's a heap of other things you can add to this to tweak
> performance as well, but this is OT here.
>
> Using port 25 is OK, as long as you make sure no one else can use it
> as an open relay, but moving your webmail traffic to another port like
> this is better.  Also, be careful/conscious about settings such as "-o
> content_filter=", since that could allow an attacker using a
> compromised account to send spam and/or virus-laden emails from your
> system.

I now have Thunderbird connecting remotely to 587 and Squirrelmail
connecting locally to 587 without encryption or authentication.  Do
you see any problems with my config?  Please consider everything else
default.

master.cf:

submission inet n       -       n       -       -       smtpd
-o smtpd_sasl_auth_enable=yes
-o smtpd_recipient_restrictions=permit_mynetworks,permit_sasl_authenticated,reject

main.cf:

smtpd_recipient_restrictions =
  reject_unauth_destination,
  permit

smtpd_tls_security_level = may
smtpd_tls_auth_only = yes

- Grant

------------------------------------------------------------------------------
Cloud Services Checklist: Pricing and Packaging Optimization
This white paper is intended to serve as a reference, checklist and point of 
discussion for anyone considering optimizing the pricing and packaging model 
of a cloud services business. Read Now!
http://www.accelacomm.com/jaw/sfnl/114/51491232/
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users



[Index of Archives]     [Video For Linux]     [Yosemite News]     [Yosemite Photos]     [gtk]     [KDE]     [Cyrus SASL]     [Gimp on Windows]     [Steve's Art]     [Webcams]

  Powered by Linux