[pfx] Re: Documentation - SASL_README

2024-10-23 Thread Wietse Venema via Postfix-users
James Feeney via Postfix-users: > Still, perhaps you would consider adding a kind of "troubleshooting" > section to the SASL_README, using log file examples, which would > then be indexed by Google and other search engines? I have compiled > examples here of: 1) a SASL misconfiguration, 2) an MUA

[pfx] Re: Documentation - SASL_README

2024-10-23 Thread James Feeney via Postfix-users
On Tue, 2024-10-22 at 22:23 -0400, Wietse Venema via Postfix-users wrote: > > That is incorrect. Any SMTP client is allowed to send mail to > Postfix, but RELAYING is restricted with permit_mynetworks, > permit_sasl_authenticated, and the like. > > > And that note in the log message is useless wh

[pfx] Re: Documentation - SASL_README (Proposed logging enhancement)

2024-10-23 Thread Wietse Venema via Postfix-users
Viktor Dukhovni via Postfix-users: > It is perhaps reasonable as a feature request to ask for the > "sasl_username" also be logged when rejecting SMTP commands from > authenticated users. For example, with the below patch, you'd get: > > Oct 23 14:49:05 amnesiac postfix/submission/smtpd[10719

[pfx] Re: Documentation - SASL_README (Proposed logging enhancement)

2024-10-22 Thread Viktor Dukhovni via Postfix-users
On Tue, Oct 22, 2024 at 06:53:03PM -0600, James Feeney via Postfix-users wrote: > > It does not give permission to relay. An SMTP client still has to > > SASL authentication before they have "permit_sasl_authenticated" > > privileges. > > And, the reverse. An SMTP client also *has* to have rela

[pfx] Re: Documentation - SASL_README

2024-10-22 Thread Wietse Venema via Postfix-users
James Feeney via Postfix-users: > > As the title says, this enables SASL authentication and authorization. > > It does not give permission to relay. An SMTP client still has to > > SASL authentication before they have "permit_sasl_authenticated" > > privileges. > > And, the reverse. An SMTP clie

[pfx] Re: Documentation - SASL_README

2024-10-22 Thread James Feeney via Postfix-users
On Tue, 2024-10-22 at 15:30 -0400, Wietse Venema via Postfix-users wrote: > James Feeney via Postfix-users: > > If I am now understanding correctly: > > > > > > The "smtpd_sasl_auth_enable=yes" configuration parameter for > > accessing "smtpd submissions", in master.cf, is *entirely distinct*

[pfx] Re: Documentation - SASL_README

2024-10-22 Thread Wietse Venema via Postfix-users
James Feeney via Postfix-users: > If I am now understanding correctly: > > > The "smtpd_sasl_auth_enable=yes" configuration parameter for > accessing "smtpd submissions", in master.cf, is *entirely distinct* > from the "smtpd_relay_restrictions = permit_sasl_authenticated" > configuration par