postfix outbound forwading?

init · 08-25-2004, 09:22 AM

Hey all,

I just bought a mailhop outbound form dyndns.org because some ISP's would not accecpt my e-mails. (I am in a residential zone) So I am wondering how to set up postfix to push mail out to dyndns.org.

I also need to supply there smpt server with a username and passwd And would like to enable SSL. Can I set up postfix to do this for me, if so how?

Thanks

dwgranth · 08-25-2004, 04:50 PM

yes you can use smtp authentication in postfix... you need to install cyrus-sasl and configure your smtpd.conf file in /usr/lib/sasl to use whatever auth methods you want... plus you need to add these lines in the /etc/postfix/main.cf file to be able to auth properly (and run /etc/init.d/postfix reload after you make these changes)

#allows for general auth
smtpd_sasl_auth_enable = yes
#no anon access
smtpd_sasl_security_options = noanonymous
#where you auth requests are allowed to go to
smtpd_sasl_local_domain = $myhostname
#lets bad email clients like outlook express to work w/ smtp auth
broken_sasl_auth_clients = yes
#and your security restrictions
smtpd_recipient_restrictions =
permit_sasl_authenticated,
permit_mynetworks,
check_relay_domains

as for your smtp not working for dyndns... i dont know.. you probably are running this through a firewall.. so ensure that your ports are open on the firewall / or are properly forwarded.

and dont be too discouraged... smtp auth is a pain in the butt sometimes

init · 08-25-2004, 05:38 PM

yea, I have sasl and ssl support set up locally.

snip of main.cf

Code:

smtpd_sasl_auth_enable = yes
smtpd_sasl_password_maps = hash:/etc/postfix/saslpass
smtpd_sasl2_auth_enable = yes
smtpd_sasl_security_options =
broken_sasl_auth_clients = yes
smtpd_sasl_local_domain =

smtpd_use_tls = yes
#smtpd_tls_auth_only = yes
smtpd_tls_key_file = /etc/postfix/newreq.pem
smtpd_tls_cert_file = /etc/postfix/newcert.pem
smtpd_tls_CAfile = /etc/postfix/cacert.pem
smtpd_tls_loglevel = 3
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom

smtpd_sasl_password_maps = hash:/etc/postfix/saslpass looks like so,

Code:

# $Header: /var/cvsroot/gentoo-x86/mail-mta/postfix/files/smtp.pass,v 1.2 2004/07/18 03:26:56 dragonheart Exp $
#
outbound.mailhop.org    myusername:mypassword

So I am not sure what the deal is. The u-name and passwd will not get passed for outgoing mail.

Another question,
I have two supported types of smtp auth set up plain and login how do I "force" those to be used because I can still connect to my smtp server with no auth what so ever.

init · 08-25-2004, 05:54 PM

smtpd is of course for the server side As some one from the gentoo forms pointed out to my foolish self. I would also need the lines with smtp for the client side of things

so any ways It "almost work now my mail.log error:::

Code:

Aug 25 14:52:21 Myhost postfix/smtp[7478]: BDD1B59733: to=<myemail@isp.com>, relay=outbound.mailhop.org[63.208.196.171], delay=1, status=deferred (Authentication failed: cannot SASL authenticate to server outbound.mailhop.org[63.208.196.171]: no mechanism available)

They offer all types of auth, what the heck am I doing wrong.

init · 08-26-2004, 02:57 PM

anyone ?? please