> From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > us...@postfix.org] On Behalf Of Victor Duchovni > On Thu, Apr 07, 2011 at 07:37:50PM +0200, Simon Brereton wrote: > > > > From: owner-postfix-us...@postfix.org [mailto:owner-postfix- > > > us...@postfix.org] On Behalf Of Patrick Ben Koetter > > > * Simon Brereton > > > > Hi > > > > > > > > Running 2.3.8 Debian package (I'll be upgrading shortly), I was > > > already supporting TLS and SASL auth. One of my users recently > > > moved to RCN and they block port 25 so I'm trying to open 587. > > > > > > > > I added this to my master.cf > > > > > > > > > > > > submission inet n - - - - smtpd > > > > > > Is the saslauthd socket in the Postfix chroot? If not edit > > > /etc/default/saslauthd. > > > > I'm not sure. I'm pretty sure I don't have postfix running > chrooted - I think I thought that was too complex. > > > > It is chrooted. A non-chrooted smtpd looks like: > > smtp inet n - n - - smtpd
Probably because this was installed using apt-get.. Thanks. So, I sat looking at this mail for a while wondering if you were telling me more, or if I should wait for a reply to my other email, and then I thought, well, it can't hurt to try.. So I changed master.cf And lo and behold.. Apr 7 17:12:16 donald postfix/smtpd[24257]: connect from 3.myvzw.com[174.255.113.31] Apr 7 17:12:17 donald postfix/smtpd[24257]: setting up TLS connection from 3.myvzw.com[174.255.113.31] Apr 7 17:12:17 donald postfix/smtpd[24257]: TLS connection established from 3.myvzw.com[174.255.113.31]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits) Apr 7 17:12:18 donald postfix/smtpd[24257]: disconnect from 3.myvzw.com[174.255.113.31] No error on the client's parameter's checks. This looks hopeful... Apr 7 17:13:05 donald postfix/smtpd[24257]: connect from 3.myvzw.com[174.255.113.31] Apr 7 17:13:06 donald postfix/smtpd[24257]: setting up TLS connection from 3.myvzw.com[174.255.113.31] Apr 7 17:13:08 donald postfix/smtpd[24257]: TLS connection established from 3.myvzw.com[174.255.113.31]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits) Apr 7 17:13:11 donald postfix/smtpd[24257]: 4970CA94109: client=3.myvzw.com[174.255.113.31], sasl_method=PLAIN, sasl_username=myu...@mydomain.net Apr 7 17:13:14 donald postfix/cleanup[24263]: 4970CA94109: message-id=<ea586633-b28b-4ccc-873b-66c5b417a...@email.android.com> Apr 7 17:13:14 donald postfix/qmgr[24255]: 4970CA94109: from=<myu...@mydomain.net>, size=923, nrcpt=1 (queue active) Success! Thanks guys. Once again the support on this list is amazing (so long as you listen to it and not try blindly to go against it). Can anyone educate me as to why it needs to be outside the jail when it works normally? The two lines from my master.cf look like: 9 smtp inet n - - - - smtpd -v 10 submission inet n - n - - smtpd 11 -o smtpd_enforce_tls=yes 12 -o smtpd_tls_auth_only=yes 13 -o smtpd_sasl_auth_enable=yes 14 -o smtpd_sasl_security_options=noanonymous 15 -o smtpd_client_restrictions=permit_sasl_authenticated,reject Thanks.
