Wietse Venema wrote, on 23-01-10 14:41:
> Jelle de Jong:
>> Can somebody show me an example how to setup up a simple outgoing only
>> email configuration that uses SMTP AUTH over SSL?
> 
> Postfix SASL: http://www.postfix.org/SASL_README.html
> Postfix TLS:  http://www.postfix.org/TLS_README.html
> 
> These are organized in client and server sections, with examples.
> There is no need to repeat this information on the mailing list.

Thank you Wietse for your fast response, seems the answer was so
obvious and I should have found it with some internet searching.

However it took me a good number of hours to get it actually working.
There for I am writing down some pointers here so other people may
find them in the mailinglist archives.

I used Debian stable to install postfix with:
apt-get install postfix ca-certificates
# no configuration or satellite

I received the following errors in my configuration:
# (SASL authentication failed; cannot authenticate to server
secure.powercraft.nl[84.245.3.195]: no mechanism available)

Seemed the configuration was fine but I was missing the actual
libaries. So I installed: apt-get install libsasl2-modules

Next pointer, for plain auth over ssl use the folllowing:
postconf -e 'smtp_sasl_auth_enable = yes'
postconf -e 'smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd'
postconf -e 'smtp_sasl_tls_security_options = noanonymous'
postconf -e 'smtp_tls_security_level = encrypt'
postconf -e 'smtp_tls_mandatory_protocols = !SSLv2, !TLSv1'

On the server side use:
smtpd_sender_restrictions = permit_sasl_authenticated, ...

I still had one question of my own: I seem to be only able to use port
25 with postfix, my icedove mta uses secure.powercraft.nl:465 with
ssl, but I cant get that to work with postfix. It will just generate
an time-out after the connection. Port 25 is subjected to blocks and
filters on a increasing number of networks, so I like to keep using
other ports. If somebody found an solution for this, I would be happy
to use it.

Hope that helps some people :)

Kind regards,

Jelle

Reply via email to