On 04/22/10 03:55, Noel Jones wrote:
> On 4/21/2010 8:39 PM, Oliver Schinagl wrote:
>>>
>> Heh, I suppose it wasn't as straightforward as that; I'll look more into
>> it after some sleep, I enabled it with the following:
>> submission inet n       -       n       -       -       smtpd
>> #  -o smtpd_tls_security_level=encrypt
>>    -o smtpd_sasl_auth_enable=yes
>>    -o smtpd_client_restrictions=permit_sasl_authenticated,reject
>> #  -o milter_macro_daemon_name=ORIGINATING
>> (even tried uncommenting both, which shouldn't matter inmo?)
>>
>> But got denied errors, telnet didn't tell me much, thunderbird told me
>> slightly more:
>> An error occurred sending mail: The mail server sent an incorrect
>> greeting:  5.7.1<yyy-yy-ftth.myisp.nl[yyy.yyy.yy.yyy]>: Client host
>> rejected: Access denied.
>> It won't even ask me for my sasl password, nothing. A mistery for the
>> next day.
>
> Please show your current "postconf -n" and the error message from the
> postfix logs.  Showing error messages from the client or from telnet
> are not particularly useful.
>
>   -- Noel Jones
My current postconf -n is exactly as above in the mail; i hadn't changed
anything, i only pasted the relevant part from master.conf that i changed.

Apr 21 21:39:19 example postfix/smtpd[21360]: connect from
yyy-yyy-ftth.myisp.nl[yyy.yyy.yyy.yyy]
Apr 21 21:39:19 example postfix/smtpd[21360]: NOQUEUE: reject: CONNECT
from yyy-yyy-ftth.myisp.nl[yyy.yyy.yyy.yyy]
: 554 5.7.1 <yyy-yyy-ftth.myisp.nl[yyy.yyy.yyy.yyy]>: Client host
rejected: Access denied; proto=SMTP
Apr 21 21:39:24 example postfix/smtpd[21360]: disconnect from
yyy-yyy-ftth.myisp.nl[yyy.yyy.yyy.yyy]


is the corresponding postfix error; Basically what thunderbird reported :)



Looking at the message you sent David Cottle, I think he's doing what
Matt suggested I should do? Use submission to bypass RBL stuff; I'd
gladly add those 2 options as well, but why would they not be in the
default config? You'd think that the default submission bit was exactly
that, allow users to bypass everything and submit messages directly. I'm
to tired to think atm so I'll check it all out again tomorrow :)
Sleep well :)

Reply via email to