it seem modify "-o smtpd_sasl_auth_enable=no" below "smtp ... smtpd" work for 
me.



then you could not auth successfully via port 25, and could auth successfully 
via port 587 using tls.



thanks all. 





---- On 星期三, 09 十一月 2016 08:35:36 -0800Wietse Venema 
<wie...@porcupine.org> wrote ----




vod vos: 

> What I want to do is to forbid AUTH PLAIN on port 25, 



/etc/postfix/main.cf: 

smtp ... smtpd -o smtpd_tls_auth_only=yes 



However, you should not enable AUTH on port 25 at all, when your 

submission clients connect to port 587. 



The port 25 service is for MTA-to-MTA traffic, and that should not 

be using AUTH. 



> and just on port 587. 



And forbid what on port 587? 



    Wietse 






Reply via email to