OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: SASL

From: Patrick Ben Koetter (pstate-of-mind.de)
Date: Wed Apr 12 2006 - 10:00:41 CDT


* Thiago H. Pojda <thiago.pojdagmail.com>:
> I am trying to configure my postfix to allow only authenticaded users to
> send mails independet if it's in my internal network or not. I am using
> sasl, and it is ok:
>
> lobo:~# testsaslauthd -u foo -p bar
> 0: OK "Success.
>
> lobo:~# postconf -n
> alias_database = hash:/etc/aliases
> alias_maps = hash:/etc/aliases
> config_directory = /etc/postfix
> inet_interfaces = all
> mailbox_command = procmail -a "$EXTENSION"
> mailbox_size_limit = 0
> mydestination = lobo.domain.com, .domain.com
> mydomain = .domain.com
> myhostname = lobo.domain.com
> mynetworks = 127.0.0.1/32, 192.168.0.0/24
> recipient_delimiter = +
> smtp_sasl_auth_enable = yes
> smtpd_recipient_restrictions = permit_sasl_authenticated,
> check_relay_domains
> smtpd_sasl_auth_enable = yes
>
> When i add permit_mynetworks i can send a mail without authentication but
> when i remove it even with authentication, outlook gives the fallowing
> message "554 Recipient address rejected; relay access denied".
>
> What's going on?

broken_sasl_auth_clients = yes

--
The Book of Postfix
<http://www.postfix-book.com>
saslfinger (debugging SMTP AUTH):
<http://postfix.state-of-mind.de/patrick.koetter/saslfinger/>