OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: setup postfix whitout mynetworks, just with permit_sasl_authenticated

From: mouss (mlist.onlyfree.fr)
Date: Mon Dec 03 2007 - 04:41:42 CST


Dan Blejan wrote:
> Sorry for the mess.
>
> Dec 3 11:41:26 www pop3d: Connection, ip=[::ffff: xxx.yyy.zzz.www]
> Dec 3 11:41:26 www authdaemond: received auth request, service=pop3, authtype=login
> Dec 3 11:41:26 www authdaemond: authmysql: trying this module
> Dec 3 11:41:26 www authdaemond: SQL query: SELECT username, password, "", '1001', '1001', '/usr/local/virtual', maildir, quota, name, "" FROM mailbox WHERE username = "localuserlocaldomain"
> Dec 3 11:41:26 www authdaemond: password matches successfully
> Dec 3 11:41:26 www authdaemond: authmysql: sysusername=<null>, sysuserid=1001, sysgroupid=1001, homedir=/usr/local/virtual, address=localuserlocaldomain, fullname=Dan Blejan, maildir=localuserlocaldomain/, quota=0, options=<null>
> Dec 3 11:41:26 www authdaemond: authmysql: clearpasswd=<null>, passwd=<passwdhash>
> Dec 3 11:41:26 www authdaemond: Authenticated: sysusername=<null>, sysuserid=1001, sysgroupid=1001, homedir=/usr/local/virtual, address=localuserlocaldomain, fullname=Dan Blejan, maildir=localuserlocaldomain/, quota=0, options=<null>
> Dec 3 11:41:26 www authdaemond: Authenticated: clearpasswd=<password>, passwd=<passwdhash>
> Dec 3 11:41:26 www pop3d: LOGIN, user=localuserlocaldomain, ip=[::ffff: xxx.yyy.zzz.www], port=[1215]
> Dec 3 11:41:26 www pop3d: LOGOUT, user=localuserlocaldomain, ip=[::ffff: xxx.yyy.zzz.www], port=[1215], top=0, retr=0, rcvd=6, sent=30, time=0
> Dec 3 11:41:26 www postfix/smtpd[908]: warning: dict_nis_init: NIS domain name not set - NIS lookups disabled
> Dec 3 11:41:28 www postfix/smtpd[908]: warning: xxx.yyy.zzz.www: hostname client200-sebastian.sdn.ro verification failed: Name or service not known
> Dec 3 11:41:28 www postfix/smtpd[908]: connect from unknown[xxx.yyy.zzz.www]
> Dec 3 11:41:28 www postfix/smtpd[908]: NOQUEUE: reject: RCPT from unknown[xxx.yyy.zzz.www]: 554 5.7.1 < someuseryahoo.com >: Relay access denied; from=<localuserlocaldomain> to=< someuseryahoo.com > proto=ESMTP helo=<ko>
>

the user authenticated to the POP server, but not to postfix.

some MUAs need:
broken_sasl_auth_clients = yes

for more help, please show output of 'postconf -n', and a copy of a
telnet session:

# telnet localhost 25
...
EHLO localhost
...
QUIT

show the response after the EHLO command.