Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Viktor Dukhovni
On Thu, Jan 30, 2014 at 09:51:30AM -0500, Dennis Putnam wrote: > relayhost = [smtp.att.yahoo.com]:587 > smtp_tls_policy_maps = hash:/etc/postfix/tls_policy > > In case it is needed here is the content of tls_policy: > > in.mailjet.com may > smtp.att.yahoo.com:587 encrypt It is rather sad that

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Noel Jones
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/30/2014 8:51 AM, Dennis Putnam wrote: > On 1/30/2014 9:34 AM, Noel Jones wrote: >> >>> I changed the level to 2. I am not seeing what you suggest >>> but there is one additional line initializing TLS engine. >>> Here is the output: >> >> >> ...

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Dennis Putnam
On 1/30/2014 9:59 AM, li...@rhsoft.net wrote: > > Am 30.01.2014 15:51, schrieb Dennis Putnam: >> Thanks for your patience but why wouldn't the working server also be failing >> if TLS was indeed screwed up? > because he does not force TLS > >> Here is the postconf -n output: > snipped > >> In case

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread li...@rhsoft.net
Am 30.01.2014 15:59, schrieb li...@rhsoft.net: > Am 30.01.2014 15:51, schrieb Dennis Putnam: >> Thanks for your patience but why wouldn't the working server also be failing >> if TLS was indeed screwed up? > > because he does not force TLS > >> Here is the postconf -n output: > > snipped > >

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Noel Jones
On 1/30/2014 8:59 AM, li...@rhsoft.net wrote: > > > Am 30.01.2014 15:51, schrieb Dennis Putnam: >> Thanks for your patience but why wouldn't the working server also be failing >> if TLS was indeed screwed up? > > because he does not force TLS > >> Here is the postconf -n output: > > snipped >

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread li...@rhsoft.net
Am 30.01.2014 15:51, schrieb Dennis Putnam: > Thanks for your patience but why wouldn't the working server also be failing > if TLS was indeed screwed up? because he does not force TLS > Here is the postconf -n output: snipped > In case it is needed here is the content of tls_policy: > > in

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Dennis Putnam
On 1/30/2014 9:34 AM, Noel Jones wrote: > > > I changed the level to 2. I am not seeing what you suggest but > > there is one additional line initializing TLS engine. Here is > > the output: > > > ... useless debug output deleted > > > > To repeat my previous question, is there no way to force a >

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Wietse Venema
smtp.att.yahoo.com[98.139.221.42]:587: 220 smtp.att.yahoo.com ESMTP ready smtp.att.yahoo.com[98.139.221.42]:587: EHLO home.bellsouth.net smtp.att.yahoo.com[98.139.221.42]:587: 250-smtp.att.yahoo.com smtp.att.yahoo.com[98.139.221.42]:587: 250-PIPELINING smtp.att.yahoo.com[98.139.221.42]:587: 25

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Noel Jones
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/30/2014 8:18 AM, Dennis Putnam wrote: > On 1/30/2014 9:10 AM, li...@rhsoft.net wrote: >> >> Am 30.01.2014 15:00, schrieb Dennis Putnam: >>> I changed the loglevel to 1. I am not sure where or what I >>> am supposed to see but the normal maillog c

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Dennis Putnam
On 1/30/2014 9:10 AM, li...@rhsoft.net wrote: > > Am 30.01.2014 15:00, schrieb Dennis Putnam: >> I changed the loglevel to 1. I am not sure where or what I am supposed >> to see but the normal maillog contained nothing different. > lines like while connect to the destination > > Jan 27 19:16:17 mai

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread li...@rhsoft.net
Am 30.01.2014 15:00, schrieb Dennis Putnam: > On 1/30/2014 8:49 AM, li...@rhsoft.net wrote: >> Am 30.01.2014 14:30, schrieb Dennis Putnam: >>> On 1/29/2014 9:17 PM, Viktor Dukhovni wrote: On Wed, Jan 29, 2014 at 08:20:44PM -0500, Dennis Putnam wrote: >> The only other thing that com

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Dennis Putnam
On 1/30/2014 8:49 AM, li...@rhsoft.net wrote: > Am 30.01.2014 14:30, schrieb Dennis Putnam: >> On 1/29/2014 9:17 PM, Viktor Dukhovni wrote: >>> On Wed, Jan 29, 2014 at 08:20:44PM -0500, Dennis Putnam wrote: >>> > The only other thing that comes to mind is that your "upgrade" may > have inst

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread li...@rhsoft.net
Am 30.01.2014 14:30, schrieb Dennis Putnam: > On 1/29/2014 9:17 PM, Viktor Dukhovni wrote: >> On Wed, Jan 29, 2014 at 08:20:44PM -0500, Dennis Putnam wrote: >> The only other thing that comes to mind is that your "upgrade" may have installed a version of Postfix with no TLS support. Then

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Dennis Putnam
On 1/29/2014 10:32 PM, Viktor Dukhovni wrote: > On Wed, Jan 29, 2014 at 09:42:00PM -0500, Wietse Venema wrote: > >>> If postconf(1) is the same version of Postfix as smtp(8), then you >>> check with "postconf smtp_tls_loglevel". This parameter is not >>> defined when TLS support is not available.

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Dennis Putnam
On 1/29/2014 9:42 PM, Wietse Venema wrote: > Viktor Dukhovni: >> On Wed, Jan 29, 2014 at 08:20:44PM -0500, Dennis Putnam wrote: >> The only other thing that comes to mind is that your "upgrade" may have installed a version of Postfix with no TLS support. Then none of these settings

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Dennis Putnam
On 1/29/2014 9:17 PM, Viktor Dukhovni wrote: > On Wed, Jan 29, 2014 at 08:20:44PM -0500, Dennis Putnam wrote: > >>> The only other thing that comes to mind is that your "upgrade" may >>> have installed a version of Postfix with no TLS support. Then none >>> of these settings matter. >> Hmmm. I had

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread LuKreme
On 29 Jan 2014, at 15:57 , li...@rhsoft.net wrote: > in mordern setups only port 587 (submission) should be used for > send authenticated mails and if someone can do that (we can't > because too many client configurations out of control) someone > could disable authentication on port 25 completly

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread Wietse Venema
Viktor Dukhovni: > On Wed, Jan 29, 2014 at 09:42:00PM -0500, Wietse Venema wrote: > > > > If postconf(1) is the same version of Postfix as smtp(8), then you > > > check with "postconf smtp_tls_loglevel". This parameter is not > > > defined when TLS support is not available. > > > > All TLS (and

Re: smtp_sasl_auth_enable Being Ignored

2014-01-30 Thread li...@rhsoft.net
> On 2014-01-30 00:08, Noel Jones wrote: >> 250-8 BITMIME > > should it not be 8BITMIME? ask yahoo, it's their server

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Benny Pedersen
On 2014-01-30 00:08, Noel Jones wrote: 250-8 BITMIME should it not be 8BITMIME ?

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Viktor Dukhovni
On Wed, Jan 29, 2014 at 09:42:00PM -0500, Wietse Venema wrote: > > If postconf(1) is the same version of Postfix as smtp(8), then you > > check with "postconf smtp_tls_loglevel". This parameter is not > > defined when TLS support is not available. > > All TLS (and SASL) parameters are defined wh

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Wietse Venema
Viktor Dukhovni: > On Wed, Jan 29, 2014 at 08:20:44PM -0500, Dennis Putnam wrote: > > > > The only other thing that comes to mind is that your "upgrade" may > > > have installed a version of Postfix with no TLS support. Then none > > > of these settings matter. > > > > Hmmm. I hadn't thought of t

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Viktor Dukhovni
On Wed, Jan 29, 2014 at 08:20:44PM -0500, Dennis Putnam wrote: > > The only other thing that comes to mind is that your "upgrade" may > > have installed a version of Postfix with no TLS support. Then none > > of these settings matter. > > Hmmm. I hadn't thought of that. How do I check? If postco

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Dennis Putnam
On 1/29/2014 7:41 PM, Viktor Dukhovni wrote: > On Wed, Jan 29, 2014 at 07:14:34PM -0500, Dennis Putnam wrote: > >> Thanks again for the reply but no joy. I have been using port 587 for a >> couple of years until this recent problem. The only difference is I had >> my tls_policy set like this: > Not

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Viktor Dukhovni
On Wed, Jan 29, 2014 at 07:14:34PM -0500, Dennis Putnam wrote: > Thanks again for the reply but no joy. I have been using port 587 for a > couple of years until this recent problem. The only difference is I had > my tls_policy set like this: Not "no joy", rather failure to execute correctly. Wha

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Dennis Putnam
On 1/29/2014 6:22 PM, Viktor Dukhovni wrote: > On Wed, Jan 29, 2014 at 05:58:15PM -0500, Dennis Putnam wrote: > >> TLS is indeed set via >> >> $ postconf -n smtp_tls_policy_maps >> smtp_tls_policy_maps = hash:/etc/postfix/tls_policy >> >> The entry in that file is set to: >> >> smtp.att.yahoo.com

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Viktor Dukhovni
On Wed, Jan 29, 2014 at 05:58:15PM -0500, Dennis Putnam wrote: > TLS is indeed set via > > $ postconf -n smtp_tls_policy_maps > smtp_tls_policy_maps = hash:/etc/postfix/tls_policy > > The entry in that file is set to: > > smtp.att.yahoo.com may Your original message reports problems with

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Noel Jones
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/29/2014 4:44 PM, Dennis Putnam wrote: > On 1/29/2014 4:22 PM, li...@rhsoft.net wrote: >> >> Am 29.01.2014 22:14, schrieb Dennis Putnam: >>> I have made yet another discovery. Perhaps this is the >>> problem. When the EHLO command is send, should

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread li...@rhsoft.net
Am 29.01.2014 23:58, schrieb Dennis Putnam: > Thanks for the reply. Keep in mind this is not a new installation. This > has been working until recently and still works for servers requiring > authentication other then smtp.att.yahoo.com. Clearly something must > have changed for that particular s

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Dennis Putnam
On 1/29/2014 4:55 PM, Viktor Dukhovni wrote: > On Wed, Jan 29, 2014 at 04:14:16PM -0500, Dennis Putnam wrote: > >> I have made yet another discovery. Perhaps this is the problem. When the >> EHLO command is send, should there not be the line: >> >> 250-AUTH LOGIN DIGEST-MD5 CRAM-MD5 PLAIN > To repe

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread li...@rhsoft.net
Am 29.01.2014 23:44, schrieb Dennis Putnam: > On 1/29/2014 4:22 PM, li...@rhsoft.net wrote: >> >> Am 29.01.2014 22:14, schrieb Dennis Putnam: >>> I have made yet another discovery. Perhaps this is the problem. When the >>> EHLO command is send, should there not be the line: >> to the destination s

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Dennis Putnam
On 1/29/2014 4:22 PM, li...@rhsoft.net wrote: > > Am 29.01.2014 22:14, schrieb Dennis Putnam: >> I have made yet another discovery. Perhaps this is the problem. When the >> EHLO command is send, should there not be the line: > to the destination server i assume > >> 250-AUTH LOGIN DIGEST-MD5 CRAM-M

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Viktor Dukhovni
On Wed, Jan 29, 2014 at 04:14:16PM -0500, Dennis Putnam wrote: > I have made yet another discovery. Perhaps this is the problem. When the > EHLO command is send, should there not be the line: > > 250-AUTH LOGIN DIGEST-MD5 CRAM-MD5 PLAIN To repeat what I posted previously: Save everyone some

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Noel Jones
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 1/29/2014 3:14 PM, Dennis Putnam wrote: > On 1/29/2014 9:35 AM, Dennis Putnam wrote: >> On 1/29/2014 8:49 AM, Dennis Putnam wrote: >>> On 1/28/2014 9:44 PM, Viktor Dukhovni wrote: On Tue, Jan 28, 2014 at 09:15:02PM -0500, Dennis Putnam wr

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread li...@rhsoft.net
Am 29.01.2014 22:14, schrieb Dennis Putnam: > I have made yet another discovery. Perhaps this is the problem. When the > EHLO command is send, should there not be the line: to the destination server i assume > 250-AUTH LOGIN DIGEST-MD5 CRAM-MD5 PLAIN > > Is that not what triggers the sasl auth

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Dennis Putnam
On 1/29/2014 9:35 AM, Dennis Putnam wrote: > On 1/29/2014 8:49 AM, Dennis Putnam wrote: >> On 1/28/2014 9:44 PM, Viktor Dukhovni wrote: >>> On Tue, Jan 28, 2014 at 09:15:02PM -0500, Dennis Putnam wrote: >>> The following is in my main.cf. smtp_sasl_auth_enable = yes smtp_sasl_pa

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Viktor Dukhovni
On Wed, Jan 29, 2014 at 08:49:25AM -0500, Dennis Putnam wrote: > > You have not set "smtp_sasl_auth_enable = yes", and perhaps other > > required settings are not in fact set as intended. > > Thanks for the reply. I did not thing to use -n as normally I use -d. That's rather useless in this cont

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Dennis Putnam
On 1/29/2014 8:49 AM, Dennis Putnam wrote: > On 1/28/2014 9:44 PM, Viktor Dukhovni wrote: >> On Tue, Jan 28, 2014 at 09:15:02PM -0500, Dennis Putnam wrote: >> >>> The following is in my main.cf. >>> >>> smtp_sasl_auth_enable = yes >>> smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd >>> smtp

Re: smtp_sasl_auth_enable Being Ignored

2014-01-29 Thread Dennis Putnam
On 1/28/2014 9:44 PM, Viktor Dukhovni wrote: > On Tue, Jan 28, 2014 at 09:15:02PM -0500, Dennis Putnam wrote: > >> The following is in my main.cf. >> >> smtp_sasl_auth_enable = yes >> smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd >> smtp_sasl_security_options = > You might think so, but t

Re: smtp_sasl_auth_enable Being Ignored

2014-01-28 Thread Viktor Dukhovni
On Tue, Jan 28, 2014 at 09:15:02PM -0500, Dennis Putnam wrote: > The following is in my main.cf. > > smtp_sasl_auth_enable = yes > smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd > smtp_sasl_security_options = You might think so, but that does not make it so. > However, when I run postc