-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 1/29/2014 4:44 PM, Dennis Putnam wrote: > On 1/29/2014 4:22 PM, li...@rhsoft.net wrote: >> >> Am 29.01.2014 22:14, schrieb Dennis Putnam: >>> I have made yet another discovery. Perhaps this is the >>> problem. When the EHLO command is send, should there not be >>> the line: >> to the destination server i assume >> >>> 250-AUTH LOGIN DIGEST-MD5 CRAM-MD5 PLAIN >>> >>> Is that not what triggers the sasl authentication? That >>> line is missing. Is that perhaps the crux problem? If so is >>> there a way for forced postfix to authenticate anyway? >>> Thanks. >> please post the complete output i bet there is "250-STARTTLS" >> too and you do have >> http://www.postfix.org/TLS_README.html#server_tls_auth >> enabled which means there is no AUTH announcement before >> STARTLS was finished >> > Thanks for the reply. You are correct but what does it mean and > what do I do? > > 220 smtp.att.yahoo.com ESMTP ready EHLO home.bellsouth.net > 250-smtp.att.yahoo.com 250-PIPELINING 250-SIZE 41697280 250-8 > BITMIME 250 STARTTLS > >
Yahoo/ATT/Bellsouth requires TLS before they offer AUTH. Test with openssl rather than telnet. # openssl s_client -connect smtp.att.yahoo.com:25 -starttls smtp (... ssl handshake output redacted ...) ehlo host.example.com 250-smtp.att.yahoo.com 250-PIPELINING 250-SIZE 41697280 250-8 BITMIME 250 AUTH PLAIN LOGIN XYMCOOKIE quit 221 2.0.0 Bye Verify postfix is using TLS by setting in main.cf: smtp_tls_loglevel = 1 which will log a "TLS connection established" line. -- Noel Jones -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (MingW32) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJS6YnYAAoJEJGRUHb5Oh6g1z0IALlZxTUFj0uYvTqbWIpQfrnI 00pDsgYmqF/IP430LEQnqJVxIIftyu770yt1H3J2qBWDe7hiXRBAKB/kMzWU1zD4 d8EFCE3MnWt/8Ia1AG444JxuB21E7LBisX0SGO9+kIekW8HaYS3P7S7RlZX9vMjJ 7/RdNdPJ6x8WxUbjNzfK0NXG71UFwWFrPTS96GEcXPV6rMCqeY/BintzEIcaceH+ qh+6fLUm8D6M+KcewSMwWzPkSQINxRol48PVysAwdGraqCgb3D7WwCNNKFagXv7T RZGQgBJa/z85wCVazAbPtEZbw6JQpjw7zUk45m4XM5MkPolJKUnAidQZurWANuQ= =++sd -----END PGP SIGNATURE-----
