OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: smtp_fallback_relay

From: Victor Duchovni (Victor.Duchovnimorganstanley.com)
Date: Tue Apr 01 2008 - 08:55:50 CDT


On Tue, Apr 01, 2008 at 02:22:15PM +0200, Zbigniew Szalbot wrote:

>
> 1/ main.cf:
> # client smtp authentication
> smtp_sasl_auth_enable = yes
> # smtp_sasl_security_options = noanonymous
> smtp_sasl_password_maps = hash:/usr/local/etc/postfix/sasl_passwd
> smtp_sasl_type = cyrus
> relayhost = [my.isp.com]

Don't cut/paste from main.cf, show "postconf -n" output.

> 2/ transport map:
> yahoo.com :[my.isp.com]

Don't cut/paste from the transport table, show "postmap -q" output.

> 3/ sasl_passwd:
> [my.isp.com] user:passwd

Don't cut/paste from the sasl password table, show "postmap -q" output.

> Apr 1 14:14:30 szalbot postfix/smtp[28449]: 92D852844D:
> to=<someoneyahoo.com>, relay=slowo.pl[85.14.85.15]:25, delay=0.47,
> delays=0.15/0.09/0.1/0.12, dsn=5.7.1, status=bounced (host
> slowo.pl[85.14.85.15] said: 554 5.7.1 <someoneyahoo.com>: Relay
> access denied (in reply to RCPT TO command))

This host is not allowing relay access, that does not prove that you
did not authenticate. You may need to set "debug_peer_list" and examine
the detailed protocol trace to see what actually happens.

The ISP relay appears to be running Postfix, and to offer SASL auth.

    250-max.cyfronet.com
    250-PIPELINING
    250-SIZE 51200000
    250-ETRN
    250-AUTH PLAIN LOGIN
    250-AUTH=PLAIN LOGIN
    250-ENHANCEDSTATUSCODES
    250-8BITMIME
    250 DSN

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.