Am 28.03.2011 18:01, schrieb Charles Marcus:
> On 2011-03-25 5:27 PM, Walt Shekrota wrote:
>> smtpd_sasl_type = dovecot
> 
> dovecot's sasl implementation doesn't support CLIENT side SASL auth,
> only server side.
> 
> If you need client side SASL AUTH capability, use Cyrus-SASL...

to specify exactly:

"smtpd_sasl_type": smtpd = receive mails, smtp = send mails
it is enough to install the following packages as example for fedora
and configure for which hosts which username/password has to be used
and postfix will do this, you do not need smptd_sasl for this

cyrus-sasl-plain-2.1.23-11.fc13.x86_64
cyrus-sasl-2.1.23-11.fc13.x86_64
cyrus-sasl-md5-2.1.23-11.fc13.x86_64
cyrus-sasl-ntlm-2.1.23-11.fc13.x86_64
cyrus-sasl-lib-2.1.23-11.fc13.x86_64

Below a configuration of an internal-relay-hosts which DOES NOT accept
SASL-Authentications (only connections from few ip's) and manage over
what hosts some messages has to be relayed and what auth the realyhost
need to send messages authenticated for domains with SPF for
which we provide services too and will not connect directly to the rcpt
________________________

smtp_sasl_auth_enable                = yes
smtp_sasl_password_maps              = hash:/etc/postfix/smtp_relayhost_auth
smtp_sasl_security_options           = noanonymous
smtp_sender_dependent_authentication = yes
sender_dependent_relayhost_maps      = hash:/etc/postfix/sender_relayhost

[root@thx1138:~]$ cat /etc/postfix/smtp_relayhost_auth
# After changes: "postmap /etc/postfix/smtp_relayhost_auth"
mai...@domain.tld username:password

[root@thx1138:~]$ cat /etc/postfix/sender_relayhost
# After changes: "postmap /etc/postfix/sender_relayhost"
mai...@domain.tld [relayhost.domain.tld]


Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to