Patrick Ben Koetter wrote:
* Sahil Tandon <postfix-users@postfix.org>:
Drew Tomlinson <[EMAIL PROTECTED]> wrote:
My ISP has implemented SASL AUTH on its smtp server. Thus I now have to
setup my postfix client to provide login information. I've read the docs
and added the relevant lines to my main.cf file.
The SASL AUTH part seems to be working but I keep getting errors about
"Recipient address rejected: Relay access denied". However I can send mail
to my ISP's smtpauth server via Mozilla Thunderbird client on a Windows XP
box to the exact same addresses.
[...]
smtpd_sasl_auth_enable = yes
You have this (which enables SASL on your *server*), but I did not see
"smtp_sasl_auth_enable = yes" in your postconf -n output. smtp ==
client; smtpd == server.
That's correct!
-- active SMTP AUTH and TLS parameters for smtp --
relayhost = smtpauth.surewest.net
smtp_sasl_mechanism_filter = plain
smtp_sasl_password_maps = hash:/usr/local/etc/postfix/sasl_passwd
smtp_sasl_type = cyrus
smtp_tls_note_starttls_offer = yes
smtp_tls_security_level = may
The OP should set:
smtp_sasl_auth_enable = yes
Patrick and Sahil,
Thank you both so much for your help. This was the problem - well, part
of it anyway. After setting the above, I could see that authentication
was failing. I could also see that Postfix was choosing CRAM-MD5. I
knew from prior testing that method failed interactively as well. Thus
I set "smtp_sasl_mechanism_filter = !CRAM-MD5". Then I started getting
errors about "...no available mech...". Next I found
smtp_sasl_security_options included "noplaintext" and "noanonymous" by
default. Thus I set it to "noanonymous" to allow plaintext. I still
got the "...no available mech..." message. Well I knew from prior
testing that PLAIN did work, thus I set "smtp_sasl_mechanism_filter =
PLAIN". SUCCESS!!!
But for my own curiosity, why did not Postfix find PLAIN on its own?
Why did I have to set it specifically? I would have thought that
setting !CRAM-MD5 would have been enough.
Thanks,
Drew
--
Be a Great Magician!
Visit The Alchemist's Warehouse
http://www.alchemistswarehouse.com
