James Feeney via Postfix-users:
> > As the title says, this enables SASL authentication and authorization.
> > It does not give permission to relay. An SMTP client still has to
> > SASL authentication before they have "permit_sasl_authenticated"
> > privileges.
>
> And, the reverse. An SMTP client also *has* to have relay privileges,
> such as "permit_sasl_authenticated" or "permit_mynetworks",
> otherwise, "smtpd_sasl_auth_enable" is useless. That is the point
> here. Maybe I was not being clear about this? Of course, the
That is incorrect. Any SMTP client is allowed to send mail to
Postfix, but RELAYING is restricted with permit_mynetworks,
permit_sasl_authenticated, and the like.
> And that note in the log message is useless when the authentication
> failure is actually caused by not having relay privileges. It's
That is incorrect. Relay privileges depend (through permit_mynetworks)
on SASL authentication. SASL authentication does not depend on relay
privileges.
Wietse
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
