On 14 Apr 2021, at 15:55, (lists) Denis BUCHER <[email protected]> wrote:
> smtps inet n - - - - smtpd
> -o syslog_name=postfix/smtps
> -o smtpd_sasl_auth_enable=yes
> -o smtpd_client_restrictions=permit_sasl_authenticated,reject
Seems short.
smtps inet n - n - - smtpd
-o smtpd_sasl_auth_enable=yes
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_type=dovecot
-o smtpd_sasl_security_options=noanonymous
-o smtpd_sasl_path=private/auth
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
-o
smtpd_relay_restrictions=permit_sasl_authenticated,reject_unauth_destination,reject
-o
smtpd_recipient_restrictions=permit_sasl_authenticated,reject_unauth_destination,reject
-o smtpd_helo_restrictions=
-o smtpd_data_restrictions=
tls_wrappermode=yes is required for smtps to actually work as expected, as well
as, I believe, sasl_type?
--
This isn't Middle Earth, Quentin. There aren't enough noble quests to go around.