it seem modify "-o smtpd_sasl_auth_enable=no" below "smtp ... smtpd" work for me.
then you could not auth successfully via port 25, and could auth successfully via port 587 using tls. thanks all. ---- On 星期三, 09 十一月 2016 08:35:36 -0800Wietse Venema <wie...@porcupine.org> wrote ---- vod vos: > What I want to do is to forbid AUTH PLAIN on port 25, /etc/postfix/main.cf: smtp ... smtpd -o smtpd_tls_auth_only=yes However, you should not enable AUTH on port 25 at all, when your submission clients connect to port 587. The port 25 service is for MTA-to-MTA traffic, and that should not be using AUTH. > and just on port 587. And forbid what on port 587? Wietse