OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: not the typical outlook or OE problem with SASL and TLS

From: /dev/rob0 (rob0gmx.co.uk)
Date: Fri Mar 21 2008 - 08:00:31 CDT


On Thu March 20 2008 20:52:57 JB wrote:
> Problem: Thunderbird has no issues with TLS/SASL setup (port 25 only),
> outlook and OE get errors from postfix about needing a fully qualified
> host name in the HELO

> Mar 20 20:17:37 <actual_host_here> postfix/smtpd[16701]: NOQUEUE:
> reject: RCPT from client.hostname.tld[xxx.xxx.xxx.xxx]: 504 5.5.2
> <vector2003>: Helo command rejected: need fully-qualified hostname;
> from=<memy_domain.tld> to=<recipientother_domain.tld> proto=ESMTP
> helo=<vector2003>

> postconf -n yeilds:

> smtpd_client_restrictions = cidr:/etc/postfix/clients.cidr

not this

> smtpd_data_restrictions = reject_unauth_pipelining
> smtpd_helo_required = yes

not these

> smtpd_helo_restrictions = check_sender_access
> mysql:/etc/postfix/pre_sender.cf permit_mynetworks,
> check_client_access hash:/etc/postfix/pop-before-smtp
> reject_invalid_hostname, check_client_access
> mysql:/etc/postfix/client_access.cf reject_non_fqdn_hostname,
-----------------------------------------^^^^^^^^^^^^^^^^^^^^^^^^
gotcha

Just the typical "I don't understand how multiple restrictions stages
work" problem. EVERY smtpd_*_restrictions stage must resolve to OK
(permit) or DUNNO. ANY reject means ... mail is rejected, of course.
--
    Offlist mail to this address is discarded unless
    "/dev/rob0" or "not-spam" is in Subject: header