From: Bissio (bissio2000yahoo.it)
Date: Thu Aug 23 2007 - 09:48:08 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I ever used this configuration on main.cf:

smtpd_sasl_auth_enable = yes
smtpd_sasl2_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain =
broken_sasl_auth_clients = yes
.......
smtpd_recipient_restrictions = permit_sasl_authenticated,
check_recipient_access mysql:/etc/postfix/mysql-recipient.cf,
check_sender_access mysql:/etc/postfix/mysql-sender.cf,
reject_invalid_hostname, reject_non_fqdn_recipient,
reject_unauth_destination, reject_unknown_recipient_domain,
reject_unverified_recipient, reject_unverified_sender

And any message without authentication did not start but in last week i saw
that any message starts with or without authentication. If i put a wrong
password on my mail client the message does not start, so the sasl2 works...
Only if i put wrong password.

Thanks

-----Messaggio originale-----
Da: owner-postfix-userspostfix.org [mailto:owner-postfix-userspostfix.org]
Per conto di mouss
Inviato: giovedì 23 agosto 2007 16.26
Cc: postfix-userspostfix.org
Oggetto: Re: sasl2 help

Bissio wrote:
>[snip]
> and this is a telnet result:
>
> 220 my.mailserver.com ESMTP Postfix
> ehlo me
> 250-my.mailserver.com
> 250-PIPELINING
> 250-SIZE 20240000
> 250-ETRN
> 250-AUTH PLAIN LOGIN
> 250-AUTH=PLAIN LOGIN
> 250-ENHANCEDSTATUSCODES
> 250-8BITMIME
> 250 DSN
> mail from: test
> 250 2.1.0 Ok
> rcpt to: test1test.com
> 250 2.1.5 Ok
> data
> 354 End data with <CR><LF>.<CR><LF>
> quit
>
> Any messages without authentication is sent... what's wrong?

nothing is wrong. That's standard behaviour. authentication is not required.

to enforce authentication for relay, see reject_sender_login_mismatch and
friends.

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]