[gentoo-user] Postfix and no worthy mechs found

[gentoo-user] Postfix and no worthy mechs found

[Sean Lester]

[-- Attachment #1: Type: text/plain, Size: 1104 bytes --]

Greetings,
     I am "lucky" enough to have an ISP that blocks outbound port 25
traffic.  Fortunately, inbound is wide open.  However, I am not able to
configure Postfix 2.1.5 to successfully use my ISP mail server as a
relayhost.  I get a reply in my logs that states:
 
warning: SASL authentication failure: No worthy mechs found
Authentication failed: cannot SASL authenticate to server
smtp.sbcglobal.yahoo.com[68.142.229.41]: no mechanism available
 
 
I've edited main.cf and added the following:
 
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/saslpass
smtp_sasl_mechanism_filter = plain, login
smtp_sasl_security_options =
 
I've updated my password file "saslpass" to contain :
[smtp.sbcglobal.yahoo.com] login:password
 
and ran postmap hash:/etc/postfix/saslpass
 
And I've run postfix reload... Oh, I also crossed my fingers that didn't
seem to help either :-)

Is SASL able to log into an smtp server like outlook does to send email?
Or is there another solution I need to pursue?  The good news is that
inbound mail works great!
 
Thank you for your help
 
Sean
 

[-- Attachment #2: Type: text/html, Size: 3725 bytes --]

Re: [gentoo-user] Postfix and no worthy mechs found

[James Hiscock]

> warning: SASL authentication failure: No worthy mechs found
> Authentication failed: cannot SASL authenticate to server
> smtp.sbcglobal.yahoo.com[68.142.229.41]: no mechanism available

This seems to imply that the problem's with SASL, and not postfix.

> I've edited main.cf and added the following:
>
> smtp_sasl_auth_enable = yes
> smtp_sasl_password_maps = hash:/etc/postfix/saslpass
> smtp_sasl_mechanism_filter = plain, login
> smtp_sasl_security_options =
>
> I've updated my password file "saslpass" to contain :
> [smtp.sbcglobal.yahoo.com] login:password
>
> and ran postmap hash:/etc/postfix/saslpass
>
> And I've run postfix reload... Oh, I also crossed my fingers that didn't
> seem to help either :-)

That all looks correct to me...

> Is SASL able to log into an smtp server like outlook does to send email?

Yes, and you're headed in the right direction.

>  Or is there another solution I need to pursue?

Nope - but I'd be looking at SASL at this point... I seem to recall it
being a pain in the arse to set this up, though... but it's been at
least a year since I've looked at it.

> Thank you for your help

<shrug> Dunno if _I_ was much help, but maybe someone else'll chime
in, too - they usually do. ;)

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] Postfix and no worthy mechs found

[Willie Wong]

On Wed, Nov 30, 2005 at 10:44:32PM -0500, Sean Lester wrote:
> Greetings,
>      I am "lucky" enough to have an ISP that blocks outbound port 25
> traffic.  Fortunately, inbound is wide open.  However, I am not able to
> configure Postfix 2.1.5 to successfully use my ISP mail server as a
> relayhost.  I get a reply in my logs that states:
>  
> warning: SASL authentication failure: No worthy mechs found
> Authentication failed: cannot SASL authenticate to server
> smtp.sbcglobal.yahoo.com[68.142.229.41]: no mechanism available
>  
While whatever you posted in terms of config files looked correct, I
have two quick questions:

 1) What did you set as relayhost?
 2) Does your provider support SSL or TLS? 

I ask because:
[01:54 PM]wwong ~ $ nmap 68.142.229.41

Starting nmap 3.83.DC13 ( http://www.insecure.org/nmap/ ) at
2005-12-01 13:54 EST
Interesting ports on smtp1-a.sbc.mail.vip.re2.yahoo.com
(68.142.229.41):
(The 1665 ports scanned but not shown below are in state: filtered)
PORT    STATE SERVICE
80/tcp  open  http
587/tcp open  submission

Nmap finished: 1 IP address (1 host up) scanned in 48.081 seconds

shows that it uses TCP 587 for mail submission as defined in RFC2476,
which is slated to replace TCP 25, and uses ESMTP. You might need to
set relayhost=smtp.sbcglobal.yahoo.com:587 (I am not sure since my
mail providers have always only used TLS on port 25 or SSL on port
465). 

HTH

W

-- 
ARTHUR	What is an Algolian Zylatburger anyway?
FORD	They're a kind of meatburger made from the most 
unpleasant parts
	of a creature well known for its total lack of any 
pleasant
	parts.
ARTHUR	So you mean that the Universe does actually end not 
with a bang
	but with a Wimpy?

- Cut dialogue from Fit the Fifth. 
Sortir en Pantoufles: up 19 days, 11:16
-- 
gentoo-user@gentoo.org mailing list

RE: [gentoo-user] Postfix and no worthy mechs found

[Sean Lester]

Thanks for the input.  
I edited my relayhost as suggested (rebuilt the password file and
reloaded postfix) with the same errors.

No, my provider doesn't support SSL or TLS for email.  It's all plain
text.  

This one is strange....  Could it be my firewall?  
Sean


-----Original Message-----
From: Willie Wong [mailto:wwong@Princeton.EDU] 
Sent: Thursday, December 01, 2005 2:03 PM
To: gentoo-user@lists.gentoo.org
Subject: Re: [gentoo-user] Postfix and no worthy mechs found


On Wed, Nov 30, 2005 at 10:44:32PM -0500, Sean Lester wrote:
> Greetings,
>      I am "lucky" enough to have an ISP that blocks outbound port 25 
> traffic.  Fortunately, inbound is wide open.  However, I am not able 
> to configure Postfix 2.1.5 to successfully use my ISP mail server as a

> relayhost.  I get a reply in my logs that states:
>  
> warning: SASL authentication failure: No worthy mechs found 
> Authentication failed: cannot SASL authenticate to server
> smtp.sbcglobal.yahoo.com[68.142.229.41]: no mechanism available
>  
While whatever you posted in terms of config files looked correct, I
have two quick questions:

 1) What did you set as relayhost?
 2) Does your provider support SSL or TLS? 

I ask because:
[01:54 PM]wwong ~ $ nmap 68.142.229.41

Starting nmap 3.83.DC13 ( http://www.insecure.org/nmap/ ) at 2005-12-01
13:54 EST Interesting ports on smtp1-a.sbc.mail.vip.re2.yahoo.com
(68.142.229.41):
(The 1665 ports scanned but not shown below are in state: filtered)
PORT    STATE SERVICE
80/tcp  open  http
587/tcp open  submission

Nmap finished: 1 IP address (1 host up) scanned in 48.081 seconds

shows that it uses TCP 587 for mail submission as defined in RFC2476,
which is slated to replace TCP 25, and uses ESMTP. You might need to set
relayhost=smtp.sbcglobal.yahoo.com:587 (I am not sure since my mail
providers have always only used TLS on port 25 or SSL on port 465). 

HTH

W

-- 
ARTHUR	What is an Algolian Zylatburger anyway?
FORD	They're a kind of meatburger made from the most 
unpleasant parts
	of a creature well known for its total lack of any 
pleasant
	parts.
ARTHUR	So you mean that the Universe does actually end not 
with a bang
	but with a Wimpy?

- Cut dialogue from Fit the Fifth. 
Sortir en Pantoufles: up 19 days, 11:16
-- 
gentoo-user@gentoo.org mailing list



-- 
gentoo-user@gentoo.org mailing list