On Mon, 22 Oct 2018, Emmanuel Jaep wrote:
You are also right that openrelay.customer.com has a non-working
STARTTLS. They actually have neither authentication nor encryption. This
is actually my current 'challenge': how to set this relay up without
encryption and authentication while keeping o
> On Oct 22, 2018, at 1:05 PM, Emmanuel Jaep wrote:
>
> You are also right that openrelay.customer.com has a non-working STARTTLS.
> They actually have neither authentication nor encryption. This is actually my
> current 'challenge': how to set this relay up without encryption and
> authentica
Hi Viktor,
Thanks for the clarification. You are absolutely right, I must be mixing up SSL
and SASL. I'll make sure that it is clear to me tonight.
You are also right that openrelay.customer.com has a non-working STARTTLS. They
actually have neither authentication nor encryption. This is actual
> On Oct 22, 2018, at 11:01 AM, Emmanuel Jaep wrote:
>
> I just tried the configuration you were proposing:
> Main.cf
> mynetworks = 127.0.0.0/8 [:::127.0.0.0]/104 [::1]/128
> openrelay.customer.com
> smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated
> defer_unauth_d
Hi,
I just tried the configuration you were proposing:
Main.cf
mynetworks = 127.0.0.0/8 [:::127.0.0.0]/104 [::1]/128 openrelay.customer.com
smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated
defer_unauth_destination
But I keep on getting:
postfix/smtp[2540]: SSL_connect
Emmanuel Jaep:
> Hi Wietse,
>
> Thanks for the quick reply.
> Typically, I could update the mynetworks line to main.cf stating:
> mynetworks = 127.0.0.0/8 [:::127.0.0.0]/104 [::1]/128
> openrelay.customer.com:25
This means that you have a lookup table named '25' that is
accessed with the '
Hi Wietse,
Thanks for the quick reply.
Typically, I could update the mynetworks line to main.cf stating:
mynetworks = 127.0.0.0/8 [:::127.0.0.0]/104 [::1]/128
openrelay.customer.com:25
and keep the line within the sender_dependent_relayhost_map.
Did I get you right?
Emmanuel
On 22.10.18
Emmanuel Jaep:
> Postfix still try to use sasl to authenticate to that server. My
> question is the following: Is there a way to use sasl (or not) on
> a per relay basis?
Typically postfix blocks relaying with something like:
smtpd_relay_restrictions =
permit_mynetworks, permit_sasl_