On 14 Apr 2021, at 15:55, (lists) Denis BUCHER <dbuche...@hsolutions.ch> wrote:
> smtps      inet  n       -       -       -       -       smtpd
>     -o syslog_name=postfix/smtps
>     -o smtpd_sasl_auth_enable=yes
>     -o smtpd_client_restrictions=permit_sasl_authenticated,reject

Seems short.

smtps      inet  n       -       n       -       -       smtpd
    -o smtpd_sasl_auth_enable=yes
    -o smtpd_tls_wrappermode=yes
    -o smtpd_sasl_type=dovecot
    -o smtpd_sasl_security_options=noanonymous
    -o smtpd_sasl_path=private/auth
    -o smtpd_client_restrictions=permit_sasl_authenticated,reject
    -o 
smtpd_relay_restrictions=permit_sasl_authenticated,reject_unauth_destination,reject
    -o 
smtpd_recipient_restrictions=permit_sasl_authenticated,reject_unauth_destination,reject
    -o smtpd_helo_restrictions=
    -o smtpd_data_restrictions=

tls_wrappermode=yes is required for smtps to actually work as expected, as well 
as, I believe, sasl_type?

-- 
This isn't Middle Earth, Quentin. There aren't enough noble quests to go around.

Reply via email to