Re: MFA with Postfix to relay to/via Office365

2021-10-04 Thread Bill Cole
On 2021-10-04 at 11:34:33 UTC-0400 (Mon, 4 Oct 2021 16:34:33 +0100) lejeczek is rumored to have said: > Both IMAP & SMTP Exchange server requires OAuth2 and it might be that where > I'm failing, as I still have to investigate. It is not workable for a server to require OAuth2 (or any similar

Re: MFA with Postfix to relay to/via Office365

2021-10-04 Thread lejeczek
I wondered that first but having Postfix set up for Exchange server (I follow docs I find on the net) which setup seems like a "regular" relay, I cannot relay. I get: ... Trusted TLS connection established to smtp.office365.com[52.98.145.98]:587: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384

Re: Fwd: Issue with Postfix and GSSAPI Authentication

2021-10-04 Thread Viktor Dukhovni
On Mon, Oct 04, 2021 at 04:34:39PM +0200, Sam R wrote: > Now it's working fine! > > I finally succeeded. I worked around by increasing only the value of the > line_length_limit option to 12288 ( same value as the default for > smtpd_sasl_response_limit ) That's the right thing to do when the

Re: Fwd: Issue with Postfix and GSSAPI Authentication

2021-10-04 Thread Sam R
Now it's working fine! I finally succeeded. I worked around by increasing only the value of the line_length_limit option to 12288 ( same value as the default for smtpd_sasl_response_limit ) And create a specific keytab file containing the SPN ( /etc/postfix/smtp.keytab ) But I haven't thought

Re: MFA with Postfix to relay to/via Office365

2021-10-04 Thread Viktor Dukhovni
On Mon, Oct 04, 2021 at 02:17:33PM +0100, lejeczek wrote: > Is relaying to an Exchange Online servers which - in my case is > imposed as I'm a member of an org - employ MFA, possible with Postfix? Unlikely. Postfix supports SASL, I don't know what would constitute "MFA" with SASL. > On

Re: Reject based on sender MX dns lookup?

2021-10-04 Thread Viktor Dukhovni
On Mon, Oct 04, 2021 at 09:25:51AM -0400, Wietse Venema wrote: > /etc/postfix/main.cf: > smtpd_dns_reply_filter = pcre:/etc/postfix/numeric-mx.pcre > > /etc/postfix/numeric-mx.pcre: > # /domain. ttl IN MX pref address/ action, all case-insensitive. >

Re: Reject based on sender MX dns lookup?

2021-10-04 Thread Viktor Dukhovni
On Mon, Oct 04, 2021 at 02:35:28PM +0200, Kristian wrote: >$ dig +short mx traffordplazauk.com >10 64.27.25.41. > > I guess my first question is, what is considered the proper behaviour > for mail from such domains? There is no specification that tells you what to do with mail from

MFA with Postfix to relay to/via Office365

2021-10-04 Thread lejeczek
Hi guys. Is relaying to an Exchange Online servers which - in my case is imposed as I'm a member of an org - employ MFA, possible with Postfix? If yes, how to get such Posfix fixed for that? On Exchange's side - I'm looking at sign-in methods available to me and among those is "Authenticator

Re: Fwd: Issue with Postfix and GSSAPI Authentication

2021-10-04 Thread Sam R
Good morning Viktor, Thank you for all this information, I will do the necessary for the keytabs right away. Concerning the clients, it is Thunderbird under Windows 10, the AD server being Samba4. I will try to see why the Kerberos ticket is so long. I don't think the problem is with Thunderbird