You need to turn on TLS to encrypt you connection and ask again.

Cheers,
Ken

On Mon, Jan 12, 2009 at 05:21:13PM -0500, postmas...@klam.ca wrote:
> This may be a duplicate request, if so sorry but its been a bad day so 
> far!!!!!
> I don't seem to be able to get SMTP Auth to work. I have read the Postfix how 
> toes, and several other peoples how toes and nothing I do seems to work.
> 
> If I telnet into may mail server I get the following output:
> 220 mail.mumble.ca ESMTP
> EHLO example.com
> 250-mail.klam.ca
> 250-PIPELINING
> 250-SIZE 32768000
> 250-ETRN
> 250-STARTTLS
> 250-ENHANCEDSTATUSCODES
> 250-8BITMIME
> 250 DSN
> 
> I believe that I should see 250-AUTH/250-AUTH=, but as you can see nothing! 
> My first thought was that as I am coming in from my own network I was 
> considered to be a "friendly" so  I removed the local network from the 
> mynetworks parameter. made no difference. 
> I turned off Dovecot authentication and when with a straight POstfix/Sasl, 
> again no difference.
> As far as i can tell everything in main.cf (see postconf -n below) looks to 
> be OK, just it does not work.
> There does not appear to be anything in the maillog, but I am seeing his in 
> the messsage log "... auxpropfunc error invalid parameter supplied" 
> What am I doing wrong? What am I too dumb to see?
>  
> Help would be appreciated
> TIA
> John A
> KLaM
> 
> ------------------------------------------------------------------------
> 
> alias_database = $alias_maps
> alias_maps = hash:/etc/aliases
> allow_untrusted_routing = no
> biff = no
> body_checks = regexp:/etc/postfix/maps/body_checks
> bounce_size_limit = 65536
> broken_sasl_auth_clients = yes
> command_directory = /usr/sbin
> config_directory = /etc/postfix
> content_filter = amavisfeed:[127.0.0.1]:10024
> daemon_directory = /usr/libexec/postfix
> data_directory = /var/lib/postfix
> debug_peer_level = 2
> default_privs = nobody
> default_process_limit = 20
> delay_warning_time = 12
> disable_vrfy_command = yes
> header_checks = regexp:/etc/postfix/maps/header_checks
> header_size_limit = 32768
> home_mailbox = Maildir/
> html_directory = no
> in_flow_delay = 1s
> inet_protocols = all
> local_destination_concurrency_limit = 5
> mail_owner = postfix
> mailbox_command = /usr/libexec/dovecot/deliver
> mailq_path = /usr/bin/mailq.postfix
> manpage_directory = /usr/share/man
> message_size_limit = 32768000
> mydestination = localhost, localhost.localdomain, localdomain
> mydomain = mumble.ca
> myhostname = mail.$mydomain
> mynetworks = 127.0.0.0/8     #, 192.168.10.0/26
> myorigin = $mydomain
> newaliases_path = /usr/bin/newaliases.postfix
> proxy_interfaces = 206.53.50.206
> queue_directory = /var/spool/postfix
> readme_directory = /usr/share/doc/postfix-2.5.5/README_FILES
> recipient_delimiter = +
> relay_domains = 
> relayhost = 
> relocated_maps = hash:/etc/postfix/maps/relocated
> sample_directory = /usr/share/doc/postfix-2.5.5/samples
> sendmail_path = /usr/sbin/sendmail.postfix
> setgid_group = postdrop
> smtp_tls_note_starttls_offer = yes
> smtp_use_tls = yes
> smtpd_banner = $myhostname ESMTP
> smtpd_delay_reject = no
> smtpd_error_sleep_time = 5s
> smtpd_hard_error_limit = 20
> smtpd_helo_required = yes
> smtpd_recipient_limit = 128
> smtpd_recipient_restrictions = reject_non_fqdn_sender,
>       reject_non_fqdn_recipient,
>       permit_mynetworks, 
>         permit_sasl_authenticated,
>       reject_unauth_destination,
>       reject_unlisted_recipient,
>       reject_unlisted_sender,
>       check_client_access hash:/etc/postfix/maps/client_access,
>       reject_unknown_client_hostname,
>       reject_rbl_client zen.spamhaus.org,
>       reject_rbl_client bl.spamcop.net,
>       reject_invalid_helo_hostname,
>       reject_non_fqdn_helo_hostname,
>       check_helo_access pcre:/etc/postfix/maps/helo_checks,
>       check_helo_access pcre:/etc/postfix/maps/helo_access,
>       reject_unknown_helo_hostname,
>       check_recipient_access hash:/etc/postfix/maps/recipient_access
>       reject_unknown_sender_domain,
>       check_policy_service unix:postgrey/socket,
>       permit
> smtpd_sasl_auth_enable = yes
> smtpd_sasl_local_domain = $myhostname
> smtpd_sasl_path = private/auth
> smtpd_sasl_security_options = noanonymous
> smtpd_sasl_type = dovecot
> smtpd_soft_error_limit = 10
> smtpd_tls_CAfile = /etc/pki/CA/sub.class2.server.ca.crt
> smtpd_tls_auth_only = yes
> smtpd_tls_cert_file = /etc/pki/tls/certs/klam.crt
> smtpd_tls_key_file = /etc/pki/tls/private/klam.key
> smtpd_tls_loglevel = 1
> smtpd_tls_received_header = yes
> smtpd_tls_session_cache_timeout = 3600s
> smtpd_use_tls = yes
> soft_bounce = no
> strict_rfc821_envelopes = yes
> tls_random_source = dev:/dev/urandom
> unknown_address_reject_code = 554
> unknown_client_reject_code = 554
> unknown_hostname_reject_code = 554
> unknown_local_recipient_reject_code = 550
> unknown_relay_recipient_reject_code = 550
> unknown_virtual_alias_reject_code = 550
> unknown_virtual_mailbox_reject_code = 550
> unverified_sender_reject_code = 550
> virtual_alias_maps = hash:/etc/postfix/maps/valiases
> virtual_gid_maps = static:5000
> virtual_mailbox_base = /var/mail/vhosts
> virtual_mailbox_domains = /etc/postfix/maps/vdomains
> virtual_mailbox_maps = hash:/etc/postfix/maps/vmailbox
> virtual_minimum_uid = 100
> virtual_transport = dovecot
> virtual_uid_maps = static:5000
> 
> 

Reply via email to