On Tue, Mar 01, 2011 at 03:27:23PM +0100, kapetr wrote:
> most SMTP servers of freemails or of ISP in Czech Republic use only
> SASL PLAIN/LOGIN authentication with SSL possibility (over port 465
> - ssmtp).

smtps (465) is a deprecated means of submission. Deprecated because 
of the "wrappermode" SSL, where SSL negotiation happens first, before 
any other communication.

> I works well with e.g. Evolution as SMTP client.
> But I can't get this work in Postfix with "relayhost"

You'd need similar settings as you are using in Evolution.

> I followed:
> http://www.postfix.org/SASL_README.html#client_sasl
> http://www.postfix.org/TLS_README.html
> 
> So I have add to main.cf:
> 
> --------------------------------------
> smtp_sasl_auth_enable = yes
> relayhost = [smtp.iol.cz]:465
> smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
> smtp_sasl_tls_security_options = noanonymous
> smtp_tls_security_level = encrypt
> smtp_tls_mandatory_protocols =
> ---------------------------------------
> ((BTW: in hash table/passwords is not the Problem))
> 
> First I have try it without ":465", but then Postfix try port 25 and
> because the ESMTP response do not include STARTTLS then Posfix ends
> with:
> 
> ---------------------------------
> Mar 1 14:23:40 duron650 postfix/smtp[3641]: E6CF0A2F1C:
> to=<kap...@mizera.cz>, relay=smtp.iol.cz[194.228.2.82]:25,
> delay=1399, delays=1399/0.07/0.05/0, dsn=4.7.4, status=deferred (TLS
> is required, but was not offered by host smtp.iol.cz[194.228.2.82])
> ----------------------------------
> 
> And with the 465 port the response is:
> -----------------------------------------
> Mar 1 14:32:45 duron650 postfix/smtp[3715]: CLIENT wrappermode
> (port smtps/465) is unimplemented
> Mar 1 14:32:45 duron650 postfix/smtp[3715]: instead, send to (port
> submission/587) with STARTTLS
> --------------------------------------
> 
> But on port 587 listens the ISPs server not.
> 
> What can I do ?

You were on the right track, but apparently missed this:
    http://www.postfix.org/TLS_README.html#client_smtps
-- 
    Offlist mail to this address is discarded unless
    "/dev/rob0" or "not-spam" is in Subject: header

Reply via email to