OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Propagate authenticated client address in the auth parm of mail from to relay Exchange server?

From: Arie Megan (arie.megangmail.com)
Date: Thu Sep 06 2007 - 12:44:11 CDT


Leaving out AUTH=<> would indeed solve the problem, I simulated this using
telnet. So if that can be done I am equally happy. I just assumed this would
be unacceptable from some reason.

The situation I am in is that I have some accounts on a shared Exchange
server, and I want to send mail from a PHP app as if it came from one of
those Exchange accounts. Currently such mail is often marked spam or junk by
receiving mail systems.
This despite SPF.
I tested delivery through the Exchange server, using telnet sending SMTP
commands, and that works fine.
I now want to reproduce the telnet command sequence in Postfix.

The latest on this seems to let my PHP app directly talk to the Exchange
server using authenticated SMTP, thus bypassing Postfix.

Any comments?

Rgds, Arie.

On 9/6/07, Victor Duchovni <Victor.Duchovnimorganstanley.com> wrote:
>
> On Thu, Sep 06, 2007 at 06:31:50PM +0300, Eray Aslan wrote:
>
> > On 06.09.2007 16:59, Victor Duchovni wrote:
> > > On Thu, Sep 06, 2007 at 02:11:23PM +0200, Arie Megan wrote:
> > >
> > >> Hi,
> > >>
> > >> My server accepts SASL authenticated sessions from known users.
> > >> I want to propagate the authenticated client address in the "auth"
> parm of
> > >> the "mail from" command towards an Exchange server.
> > >> Said users have an account on that server.
> > >> All I got so far is "AUTH=<>".
> > >
> > > That's all Postfix supports. Note the AUTH parameter for the ESMTP
> > > "MAIL" command is a mailbox (email address) somehow associated with
> > > the authorization identity of the authenticated user. Postfix does not
> > > typically have that information at its disposal. Nor is clear to which
> > > servers such information should be disclosed.
> > >
> > > Adding support for this is not trivial. What problem does
> AUTH=<mumble>
> > > solve?
> >
> >
> > This one probably:
> > http://thread.gmane.org/gmane.mail.postfix.user/141809
>
> No, there simply leaving out "AUTH=<>" solved the problem.
>
> > OP should give more details if s/he is trying to solve another problem.
>
> Here the OP seems to want a specific "AUTH=<...>" value for reasons
> unexplained.
>
> --
> Viktor.
>
> Disclaimer: off-list followups get on-list replies or get ignored.
> Please do not ignore the "Reply-To" header.
>
> To unsubscribe from the postfix-users list, visit
> http://www.postfix.org/lists.html or click the link below:
> <mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>
>
> If my response solves your problem, the best way to thank me is to not
> send an "it worked, thanks" follow-up. If you must respond, please put
> "It worked, thanks" in the "Subject" so I can delete these quickly.
>