Hello,
i try to use postfix with some others tools (amavis, spamassassin,
dovecot...), but i can't send mail message to server(1.80) from an other
computer (1.50). i use the smtp (25) port (but i want use 25 or 587
ports), for the tests i want to use only 25.
i used this tutorial : https://mondedie.fr/viewtopic.php?id=5750
but when i want to send a message trought the server, i have errors "Le
serveur SMTP ne supporte pas l'authentification
" (SMTP server doesn't support authentication) :
Sep 30 08:59:51 mail postfix/smtpd[8605]: connect from unknown[192.168.1.50]
Sep 30 08:59:51 mail postfix/smtpd[8605]: Anonymous TLS connection
established from unknown[192.168.1.50]: TLSv1 with cipher
DHE-RSA-AES256-SHA (256/256 bits)
Sep 30 08:59:53 mail postfix/smtpd[8605]: lost connection after EHLO
from unknown[192.168.1.50]
Sep 30 08:59:53 mail postfix/smtpd[8605]: disconnect from
unknown[192.168.1.50]
Sep 30 09:00:06 mail postfix/pickup[8346]: warning: B8077376081C:
message has been queued for 1 days
Sep 30 09:00:06 mail postfix/pickup[8346]: B8077376081C: uid=0 from=<root>
Sep 30 09:00:06 mail postfix/cleanup[8397]: warning: mysql query failed:
Unknown column 'address' in 'where clause'
Sep 30 09:00:06 mail postfix/cleanup[8397]: warning:
mysql:/etc/postfix/mysql-virtual-alias-maps.cf lookup error for
"t...@domain.com"
Sep 30 09:00:06 mail postfix/cleanup[8397]: warning: B8077376081C:
virtual_alias_maps map lookup problem for t...@domain.com -- message not
accepted, try again later
i ve others errors which seems linked to amavis :
Sep 30 09:00:06 mail postfix/pickup[8346]: warning: D626E376081C:
message has been queued for 2 days
Sep 30 09:00:06 mail postfix/pickup[8346]: D626E376081C: uid=113
from=<amavis>
Sep 30 09:00:06 mail postfix/cleanup[8397]: warning:
mysql:/etc/postfix/mysql-virtual-alias-maps.cf lookup error for
"ama...@domain.com"
Sep 30 09:00:06 mail postfix/cleanup[8397]: warning: D626E376081C:
virtual_alias_maps map lookup problem for ama...@domain.com -- message
not accepted, try again later
Sep 30 09:01:06 mail postfix/pickup[8346]: warning: 743A9376081C:
message has been queued for 1 days
Sep 30 09:01:06 mail postfix/pickup[8346]: 743A9376081C: uid=0 from=<root>
Sep 30 09:01:06 mail postfix/cleanup[8397]: warning:
mysql:/etc/postfix/mysql-virtual-alias-maps.cf lookup error for
"t...@domain.com"
Sep 30 09:01:06 mail postfix/cleanup[8397]: warning: 743A9376081C:
virtual_alias_maps map lookup problem for t...@domain.com -- message not
accepted, try again later
Sep 30 09:01:06 mail postfix/pickup[8346]: warning: 92592376081C:
message has been queued for 2 days
Sep 30 09:01:06 mail postfix/pickup[8346]: 92592376081C: uid=113
from=<amavis>
Sep 30 09:01:06 mail postfix/cleanup[8397]: warning:
mysql:/etc/postfix/mysql-virtual-alias-maps.cf lookup error for
"ama...@domain.com"
Sep 30 09:01:06 mail postfix/cleanup[8397]: warning: 92592376081C:
virtual_alias_maps map lookup problem for ama...@domain.com -- message
not accepted, try again later
Sep 30 09:02:06 mail postfix/pickup[8346]: warning: D5CA0376081C:
message has been queued for 1 days
Sep 30 09:02:06 mail postfix/pickup[8346]: D5CA0376081C: uid=0 from=<root>
Sep 30 09:02:06 mail postfix/cleanup[8397]: warning: mysql query failed:
Unknown column 'address' in 'where clause'
Sep 30 09:02:06 mail postfix/cleanup[8397]: warning:
mysql:/etc/postfix/mysql-virtual-alias-maps.cf lookup error for
"t...@domain.com"
Sep 30 09:02:06 mail postfix/cleanup[8397]: warning: D5CA0376081C:
virtual_alias_maps map lookup problem for t...@domain.com -- message not
accepted, try again later
# mysql-sender-login-maps.cf :
hosts = 127.0.0.1
user = postfix
password = ********
dbname = postfix
query = SELECT username FROM mailbox WHERE username='%s' AND active = 1
# mysql-virtual-alias-maps.cf
hosts = 127.0.0.1
user = postfix
password = ********
dbname = postfix
query = SELECT destination FROM alias WHERE address='%s' AND active = 1
# mysql-virtual-mailbox-domains.cf
hosts = 127.0.0.1
user = postfix
password = ********
dbname = postfix
query = SELECT domain FROM domain WHERE domain='%s' and backupmx = 0 and
active = 1
# mysql-virtual-mailbox-maps.cf
hosts = 127.0.0.1
user = postfix
password = ********
dbname = postfix
query = SELECT maildir FROM mailbox WHERE username='%s' AND active = 1
# in master.cf :
smtp inet n - - - - smtpd
submission inet n - - - - smtpd
-o syslog_name=postfix/submission
-o smtpd_tls_dh1024_param_file=${config_directory}/dh2048.pem
-o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
smtps inet n - n - - smtpd -o
smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
587 inet n - n - - smtpd -o
smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes
# in main.cf :
smtpd_use_tls=yes
smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated
defer_unauth_destination
smtpd_recipient_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_non_fqdn_recipient,
reject_unauth_destination,
reject_unknown_recipient_domain,
reject_rbl_client zen.spamhaus.org
smtpd_helo_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_invalid_helo_hostname,
reject_non_fqdn_helo_hostname
# reject_unknown_helo_hostname
smtpd_client_restrictions =
permit_mynetworks,
permit_inet_interfaces,
permit_sasl_authenticated,
# reject_plaintext_session,
# reject_unauth_pipelining
smtpd_sender_restrictions =
reject_non_fqdn_sender,
reject_unknown_sender_domain,
reject_sender_login_mismatch
# Smtp ( OUTGOING / Client )
smtp_tls_loglevel = 1
smtp_tls_security_level = may
smtp_tls_CAfile = /etc/ssl/certs/ca.cert.pem
smtp_tls_protocols = !SSLv2, !SSLv3
smtp_tls_mandatory_protocols = !SSLv2, !SSLv3
smtp_tls_mandatory_ciphers = high
smtp_tls_exclude_ciphers = aNULL, eNULL, EXPORT, DES, 3DES, RC2,
RC4, MD5, PSK, SRP, DSS, AECDH, ADH
smtp_tls_note_starttls_offer = yes
smtpd_tls_loglevel = 1
smtpd_tls_auth_only = yes
smtpd_tls_security_level = may
smtpd_tls_received_header = yes
smtpd_tls_protocols = !SSLv2, !SSLv3
smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
smtpd_tls_mandatory_ciphers = medium
smtpd_tls_CAfile = $smtp_tls_CAfile
smtpd_tls_cert_file = /etc/ssl/certs/mailserver.crt
smtpd_tls_key_file = /etc/ssl/private/mailserver.key
smtpd_tls_dh1024_param_file = $config_directory/dh2048.pem
smtpd_tls_dh512_param_file = $config_directory/dh512.pem
tls_preempt_cipherlist = yes
tls_random_source = dev:/dev/urandom
smtpd_sender_login_maps = mysql:/etc/postfix/mysql-sender-login-maps.cf
----------
there's a lot of variables with tls, i don't know which one to modify to
allow a clear connection (25) to the smtp server.
if someone can help...
thanks.
PatG
