Re: smtps 465 works, submission 587 does not

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



>>>>>> smtpd_tls_security_level = may
>>>>>> smtpd_tls_auth_only = yes
>>>
>>> Your postfix configuration requires StartTLS on 587 port. Turn off
>>> starttls requirement and SquirrelMail 1.4 will be able to use it. If you
>>> don't want to turn it off, you are free to backport starttls support
>>> from
>>> 1.5.x. All SquirrelMail SMTP StartTLS code is in one place.
>>
>> I don't really have a need for TLS there because Squirrelmail is on
>> the same machine as postfix.  I have "smtpd_tls_security_level = may"
>> now so Squirrelmail can connect without encryption and Thunderbird
>> encrypts.
>
> You also have 'smtpd_tls_auth_only = yes'
>
> http://www.postfix.org/postconf.5.html
> -----
> smtpd_tls_auth_only (default: no)
>
>    When TLS encryption is optional in the Postfix SMTP server, do not
> announce or accept SASL authentication over unencrypted connections.
>
>    This feature is available in Postfix 2.2 and later.
> -----
>
> Your 'smtpd_tls_security_level' is 'encrypt' for all connections with smtp
> authentication. MSA service is usually SMTP AUTH only.

I have permit_mynetworks for the submission port so authentication
isn't required there:

submission inet n       -       n       -       -       smtpd
-o smtpd_sasl_auth_enable=yes
-o smtpd_recipient_restrictions=permit_mynetworks,reject_plaintext_session,permit_sasl_authenticated,reject

Squirrelmail submits without authentication or encryption since it's
in mynetworks (same host).

- Grant

------------------------------------------------------------------------------
Learn Windows Azure Live!  Tuesday, Dec 13, 2011
Microsoft is holding a special Learn Windows Azure training event for 
developers. It will provide a great way to learn Windows Azure and what it 
provides. You can attend the event by watching it streamed LIVE online.  
Learn more at http://p.sf.net/sfu/ms-windowsazure
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users



[Index of Archives]     [Video For Linux]     [Yosemite News]     [Yosemite Photos]     [gtk]     [KDE]     [Cyrus SASL]     [Gimp on Windows]     [Steve's Art]     [Webcams]

  Powered by Linux