OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Adrian Bolzan (Adrian.Bolzanaot.com.au)
Date: Tue Mar 26 2002 - 01:13:48 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On 25 Mar 2002 at 21:59, Will Yardley wrote:

    > Adrian Bolzan wrote:
    >
    > > > we use:
    > > > smtpd_client_restrictions = permit_sasl_authenticated
    > > > smtpd_recipient_restrictions = permit_mynetworks,
    > > > permit_sasl_authenticated, check_relay_domains
    > > > mtpd_sasl_auth_enable = yes smtpd_sasl_security_options =
    > > > noanonymous broken_sasl_auth_clients = yes
    > > >
    > > > and that seems to work fine.
    >
    > > thanks for the reply.
    > > Your settings are the same as those that I first used, however, I
    > > found that if the mail client (pegasus) was not set to use smtp
    > > authentication then postfix allowed relaying but if the
    > > authentication was on but an incorrect username or passowrd was used
    > > then the connection was refused.
    > >
    > > weird...
    >
    > just to make sure... were you testing this from within $mynetworks?
    > obviously if you are permitting '$mynetworks', then the mail will
    > still go through.
    >
    > i'm sure that's probably not the case, but just in case...
    >

    d'oh!

    I just wrote an e-mail saying that i was not sending the mail from within
    $mynetworks but I am...
    I am connecting via a proxy server on our DMZ, with an IP address
    listed in $mynetworks.

    Thus, if I specify authentication and get it wrong then postfix rejects the
    connection but if I do not specify authentication then it does not use any
    and connects...

    thanks for the polite whack to the head,

    adrian

    > --
    > Will Yardley
    > input: william < hq . newdream . net . >
    >
    > -
    > To unsubscribe, send mail to majordomopostfix.org with content
    > (not subject): unsubscribe postfix-users

    -
    To unsubscribe, send mail to majordomopostfix.org with content
    (not subject): unsubscribe postfix-users