OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: SASL vs. M$ Outlook and Outlook Express

From: Rene van Hoek (reneactive8.nl)
Date: Mon Jan 01 2007 - 07:53:26 CST


Maybe I am quite silly (I hope not :-) but I am an expressed enemy of M$
:-)) - I also fear to have done something wrong on the client side - but
what?
I am NOT using SSL (yet), so I have just checked the box for using
authentification at SMTP - and tested both "use the same setting as for
IMAP" and used a separate setting - the behaviour is the same in both
cases: no AUTH message being sent.

Would you know some trick that might be forgotten when configuring the
clients? The only thing that comes into my mind is that the client
somehow (??) notices that its IP address is the same as the server's (it
is the external address of my NAT firewall, and I am using it so that
the Postfix-server does not get the connection from the local LAN, which
uses another configuration)...

Thankx anyhow,
        --- Tom

-----Original Message-----
From: owner-postfix-userspostfix.org
[mailto:owner-postfix-userspostfix.org] On Behalf Of Rene van Hoek
Sent: Monday, January 01, 2007 2:32 PM
To: Postfix users; Postfix users
Subject: Re: SASL vs. M$ Outlook and Outlook Express

Tom Kovar wrote:
> > Maybe a good idea to send the info on my config and the relevant parts
> > of the log file:
> >
> >>From main.cf:
> > mynetworks = 192.168.0.0/24, 127.0.0.0/8
> >
> > smtpd_sasl_auth_enable = yes
> > smtpd_recipient_restrictions = permit_mynetworks
> > permit_sasl_authenticated reject_unauth_destination
> > smtpd_sasl_authenticated_header = yes
> > broken_sasl_auth_clients = yes
> > smtpd_sasl_type = dovecot
> > smtpd_sasl_path = private/auth
> > debug_peer_list = 194.212.102.169
> >
> > And the relevant parts of the log file (skipping the address parsing
and
> > rewriting info) in attachment.
> >
> > Thanks again,
> > --- Tom
> >
I did an telnet to your machine and that seems ok:

Leto:/Volumes renevanhoek$ telnet mail.kovarovi.org 25
Trying 194.212.102.169...
Connected to bimbo.kovarovi.org.
Escape character is '^]'.
220 mail.kovarovi.org ESMTP Postfix
EHLO test.a8.nl
250-mail.kovarovi.org
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-AUTH PLAIN
250-AUTH=PLAIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN

Also according to the maillog, the client don't authenticate. So the
problem is as far as I can see with the configuration of the client.

As an test, did you try for yourself to relay mail through your mta with

Windows and Outlook? In this way you can rule-out (or confirm) client
configuration mistakes.

Otherwise refer your client to Microsoft Support ;-)

Greetings,

rene at active8 nl