From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org)
	by nuthatch.gentoo.org with esmtp (Exim 4.50)
	id 1ENBOV-00011s-HP
	for garchives@archives.gentoo.org; Wed, 05 Oct 2005 15:41:23 +0000
Received: from robin.gentoo.org (localhost [127.0.0.1])
	by robin.gentoo.org (8.13.5/8.13.5) with SMTP id j95FW41v020515;
	Wed, 5 Oct 2005 15:32:04 GMT
Received: from popmail.jettissystems.com (popmail.jettissystems.com [38.118.146.212])
	by robin.gentoo.org (8.13.5/8.13.5) with ESMTP id j95FRkCa006882
	for <gentoo-user@lists.gentoo.org>; Wed, 5 Oct 2005 15:27:47 GMT
Received: from [192.168.1.104] (unknown [69.17.21.212])
	by popmail.jettissystems.com (Postfix) with ESMTP id A4C2B56D481
	for <gentoo-user@lists.gentoo.org>; Wed,  5 Oct 2005 08:36:09 -0700 (PDT)
Message-ID: <4343F2E8.2010903@badapple.net>
Date: Wed, 05 Oct 2005 10:36:08 -0500
From: kashani <kashani-list@badapple.net>
User-Agent: Mozilla Thunderbird 1.0.6 (Windows/20050716)
X-Accept-Language: en-us, en
Precedence: bulk
List-Post: <mailto:gentoo-user@lists.gentoo.org>
List-Help: <mailto:gentoo-user+help@gentoo.org>
List-Unsubscribe: <mailto:gentoo-user+unsubscribe@gentoo.org>
List-Subscribe: <mailto:gentoo-user+subscribe@gentoo.org>
List-Id: Gentoo Linux mail <gentoo-user.gentoo.org>
X-BeenThere: gentoo-user@gentoo.org
Reply-to: gentoo-user@lists.gentoo.org
MIME-Version: 1.0
To: gentoo-user@lists.gentoo.org
Subject: Re: [gentoo-user] POSTFIX and SASL
References: <6.2.3.4.0.20051005101100.01c4a630@op.oxpub.com>
In-Reply-To: <6.2.3.4.0.20051005101100.01c4a630@op.oxpub.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Archives-Salt: 83a26824-36b0-4a8c-8441-5b0e7be031cb
X-Archives-Hash: 394e3ebb364c73ce1f4153f6279fd0e8

Joe Strusz wrote:

<big snip>

I don't see your smtpd_recipient_restrictions in that list, but it looks 
like you cut and pasted rather than did a postconf -n. Do the logs say 
antyhing interesting as well?

In any case here's what works for me.

/etc/postfix/main.cf
# SASL setting
smtpd_sasl_auth_enable = yes
smtpd_sasl2_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_sasl_local_domain =

# TLS Settings
smtpd_use_tls = yes
#smtpd_tls_auth_only = yes
smtpd_tls_key_file = /etc/postfix/newreq.pem
smtpd_tls_cert_file = /etc/postfix/newcert.pem
smtpd_tls_CAfile = /etc/postfix/cacert.pem
smtpd_tls_loglevel = 3
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom

# setting restrictions and order
smtpd_recipient_restrictions =
         reject_invalid_hostname,
         reject_non_fqdn_hostname,
         reject_non_fqdn_sender,
         reject_non_fqdn_recipient,
         reject_unknown_sender_domain,
         reject_unknown_recipient_domain,
         reject_unauth_pipelining,
         permit_mynetworks,
         permit_sasl_authenticated,
         reject_unauth_destination,
         permit

/etc/sasl2/smtpd.conf
pwcheck_method: saslauthd
mech_list: plain login

/etc/conf.d/saslauthd
SASLAUTHD_OPTS=""
SASLAUTHD_OPTS="${SASLAUTH_MECH} -a pam"

/etc/init.d/saslauthd restart
/etc/init.d/postfix restart

kashani
-- 
gentoo-user@gentoo.org mailing list