OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: SASL vs. M$ Outlook and Outlook Express

From: Tom Kovar (postfix_listkovarovi.org)
Date: Mon Jan 01 2007 - 07:20:28 CST


Maybe a good idea to send the info on my config and the relevant parts
of the log file:

From main.cf:
mynetworks = 192.168.0.0/24, 127.0.0.0/8

smtpd_sasl_auth_enable = yes
smtpd_recipient_restrictions = permit_mynetworks
permit_sasl_authenticated reject_unauth_destination
smtpd_sasl_authenticated_header = yes
broken_sasl_auth_clients = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
debug_peer_list = 194.212.102.169

And the relevant parts of the log file (skipping the address parsing and
rewriting info) in attachment.

Thanks again,
        --- Tom

-----Original Message-----
From: owner-postfix-userspostfix.org
[mailto:owner-postfix-userspostfix.org] On Behalf Of Magnus Bäck
Sent: Monday, January 01, 2007 1:42 PM
To: postfix-userspostfix.org
Subject: Re: SASL vs. M$ Outlook and Outlook Express

On Monday, January 01, 2007 at 13:34 CET,
     Tom Kovar <postfix_listkovarovi.org> wrote:

> I have been using successfully Postfix since good one year, and now I
> have extended it with SASL, using dovecot, with MySQL in the
background
> for all authentications. Everything seems to be working fine, when I
> send the SMTP commands manually, authentication is successfull and
> sending e-mail works according to the rules.
> Not so from Micro$oft clients, where I always get "Relay access
denied".
> Inspecting the Postfix-Syslog, after enabling debug, reveals the
source
> of the problem - even if I enabled the "SMTP server requires
> authentification" check box in these clients, they still do not send
the
> SMTP AUTH message. The sequence of SMTP messages is
> EHLO
> MAIL FROM:
> RCPT TO:
> and this inevitably leads to the failure.
>
> Can anybody help me what the problem with M$ might be?

Perhaps you're forgetting this:
http://www.postfix.org/postconf.5.html#broken_sasl_auth_clients

--
Magnus Bäck
magnusdsek.lth.se


  • application/octet-stream attachment: maillog