Hi,
I just tried the configuration you were proposing:
Main.cf
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 openrelay.customer.com
smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated
defer_unauth_destination
But I keep on getting:
postfix/smtp[2540]: SSL_connect error to openrelay.customer.com
[xx.xx.xx.xx]:25: -1
postfix/smtp[2540]: warning: TLS library problem: error:140770FC:SSL
routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c
I believe that the parameters
smtpd_use_tls=yes
smtp_sasl_auth_enable = yes
are forcing to use sasl...
Emmanuel
On 22.10.18, 16:11, "Wietse Venema" <owner-postfix-us...@postfix.org on behalf
of wie...@porcupine.org> wrote:
Emmanuel Jaep:
> Postfix still try to use sasl to authenticate to that server. My
> question is the following: Is there a way to use sasl (or not) on
> a per relay basis?
Typically postfix blocks relaying with something like:
smtpd_relay_restrictions =
permit_mynetworks, permit_sasl_authenticated ...
The easiest 'fix' is to append the remote server's IP address (or
a network/mask pattern) to your mynetworks setting.
Wietse
