Re: postscreen and sasl

2011-02-11 Thread Noel Jones
On 2/11/2011 12:17 PM, Benny Pedersen wrote: On Fri, 11 Feb 2011 13:10:35 -0500, Victor Duchovni wrote: On Fri, Feb 11, 2011 at 07:07:15PM +0100, Benny Pedersen wrote: not the best option for me, but my users can live with it, but remote servers will need tls on port 25 still TLS != SASL.

Re: postscreen and sasl

2011-02-11 Thread Wietse Venema
Benny Pedersen: > On Fri, 11 Feb 2011 13:10:35 -0500, Victor Duchovni > wrote: > > On Fri, Feb 11, 2011 at 07:07:15PM +0100, Benny Pedersen wrote: > > > >> not the best option for me, but my users can live with it, but remote > >> servers will need tls on port 25 still > > > > TLS != SASL. Posts

Re: postscreen and sasl

2011-02-11 Thread Benny Pedersen
On Fri, 11 Feb 2011 13:10:35 -0500, Victor Duchovni wrote: > On Fri, Feb 11, 2011 at 07:07:15PM +0100, Benny Pedersen wrote: > >> not the best option for me, but my users can live with it, but remote >> servers will need tls on port 25 still > > TLS != SASL. Postscreen supports TLS/SSL, but not

Re: postscreen and sasl

2011-02-11 Thread Noel Jones
On 2/11/2011 12:07 PM, Benny Pedersen wrote: On Fri, 11 Feb 2011 12:00:30 -0600, Noel Jones wrote: On 2/11/2011 11:57 AM, Benny Pedersen wrote: postscreen_access_list = permit_sasl_authenticated, permit_mynetworks, cidr:/etc/postfix/cidr/postscreen_access.cidr will it work ? No. Authenticatio

Re: postscreen and sasl

2011-02-11 Thread Victor Duchovni
On Fri, Feb 11, 2011 at 07:07:15PM +0100, Benny Pedersen wrote: > not the best option for me, but my users can live with it, but remote > servers will need tls on port 25 still TLS != SASL. Postscreen supports TLS/SSL, but not SASL, which belongs largely on port 587. -- Viktor.

Re: postscreen and sasl

2011-02-11 Thread Benny Pedersen
On Fri, 11 Feb 2011 12:00:30 -0600, Noel Jones wrote: > On 2/11/2011 11:57 AM, Benny Pedersen wrote: >> postscreen_access_list = permit_sasl_authenticated, permit_mynetworks, >> cidr:/etc/postfix/cidr/postscreen_access.cidr >> will it work ? > No. Authentication happens in smtpd after postscreen

Re: postscreen and sasl

2011-02-11 Thread Noel Jones
On 2/11/2011 11:57 AM, Benny Pedersen wrote: postscreen_access_list = permit_sasl_authenticated, permit_mynetworks, cidr:/etc/postfix/cidr/postscreen_access.cidr will it work ? No. Authentication happens in smtpd after postscreen is done. to avoid sasl users being tested in dnsbl Bes

postscreen and sasl

2011-02-11 Thread Benny Pedersen
postscreen_access_list = permit_sasl_authenticated, permit_mynetworks, cidr:/etc/postfix/cidr/postscreen_access.cidr will it work ? to avoid sasl users being tested in dnsbl