>>>>>> smtpd_tls_security_level = may >>>>>> smtpd_tls_auth_only = yes >>> >>> Your postfix configuration requires StartTLS on 587 port. Turn off >>> starttls requirement and SquirrelMail 1.4 will be able to use it. If you >>> don't want to turn it off, you are free to backport starttls support >>> from >>> 1.5.x. All SquirrelMail SMTP StartTLS code is in one place. >> >> I don't really have a need for TLS there because Squirrelmail is on >> the same machine as postfix. I have "smtpd_tls_security_level = may" >> now so Squirrelmail can connect without encryption and Thunderbird >> encrypts. > > You also have 'smtpd_tls_auth_only = yes' > > http://www.postfix.org/postconf.5.html > ----- > smtpd_tls_auth_only (default: no) > > When TLS encryption is optional in the Postfix SMTP server, do not > announce or accept SASL authentication over unencrypted connections. > > This feature is available in Postfix 2.2 and later. > ----- > > Your 'smtpd_tls_security_level' is 'encrypt' for all connections with smtp > authentication. MSA service is usually SMTP AUTH only.
I have permit_mynetworks for the submission port so authentication isn't required there: submission inet n - n - - smtpd -o smtpd_sasl_auth_enable=yes -o smtpd_recipient_restrictions=permit_mynetworks,reject_plaintext_session,permit_sasl_authenticated,reject Squirrelmail submits without authentication or encryption since it's in mynetworks (same host). - Grant ------------------------------------------------------------------------------ Learn Windows Azure Live! Tuesday, Dec 13, 2011 Microsoft is holding a special Learn Windows Azure training event for developers. It will provide a great way to learn Windows Azure and what it provides. You can attend the event by watching it streamed LIVE online. Learn more at http://p.sf.net/sfu/ms-windowsazure ----- squirrelmail-users mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: squirrelmail-users@lists.sourceforge.net List archives: http://news.gmane.org/gmane.mail.squirrelmail.user List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
