Re: Multiple sasl configuration

2018-10-22 Thread B. Reino
On Mon, 22 Oct 2018, Emmanuel Jaep wrote: You are also right that openrelay.customer.com has a non-working STARTTLS. They actually have neither authentication nor encryption. This is actually my current 'challenge': how to set this relay up without encryption and authentication while keeping o

Re: Multiple sasl configuration

2018-10-22 Thread Viktor Dukhovni
> On Oct 22, 2018, at 1:05 PM, Emmanuel Jaep wrote: > > You are also right that openrelay.customer.com has a non-working STARTTLS. > They actually have neither authentication nor encryption. This is actually my > current 'challenge': how to set this relay up without encryption and > authentica

Re: Multiple sasl configuration

2018-10-22 Thread Emmanuel Jaep
Hi Viktor, Thanks for the clarification. You are absolutely right, I must be mixing up SSL and SASL. I'll make sure that it is clear to me tonight. You are also right that openrelay.customer.com has a non-working STARTTLS. They actually have neither authentication nor encryption. This is actual

Re: Multiple sasl configuration

2018-10-22 Thread Viktor Dukhovni
> On Oct 22, 2018, at 11:01 AM, Emmanuel Jaep wrote: > > I just tried the configuration you were proposing: > Main.cf > mynetworks = 127.0.0.0/8 [:::127.0.0.0]/104 [::1]/128 > openrelay.customer.com > smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated > defer_unauth_d

Re: Multiple sasl configuration

2018-10-22 Thread Emmanuel Jaep
Hi, I just tried the configuration you were proposing: Main.cf mynetworks = 127.0.0.0/8 [:::127.0.0.0]/104 [::1]/128 openrelay.customer.com smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination But I keep on getting: postfix/smtp[2540]: SSL_connect

Re: Multiple sasl configuration

2018-10-22 Thread Wietse Venema
Emmanuel Jaep: > Hi Wietse, > > Thanks for the quick reply. > Typically, I could update the mynetworks line to main.cf stating: > mynetworks = 127.0.0.0/8 [:::127.0.0.0]/104 [::1]/128 > openrelay.customer.com:25 This means that you have a lookup table named '25' that is accessed with the '

Re: Multiple sasl configuration

2018-10-22 Thread Emmanuel Jaep
Hi Wietse, Thanks for the quick reply. Typically, I could update the mynetworks line to main.cf stating: mynetworks = 127.0.0.0/8 [:::127.0.0.0]/104 [::1]/128 openrelay.customer.com:25 and keep the line within the sender_dependent_relayhost_map. Did I get you right? Emmanuel On 22.10.18

Re: Multiple sasl configuration

2018-10-22 Thread Wietse Venema
Emmanuel Jaep: > Postfix still try to use sasl to authenticate to that server. My > question is the following: Is there a way to use sasl (or not) on > a per relay basis? Typically postfix blocks relaying with something like: smtpd_relay_restrictions = permit_mynetworks, permit_sasl_