Hi Guys,

I successfully got postfix and sasl working using plain auth and outlook express.

I disabled plain in the smtpd_sasl_security_options parameter by setting the noplaintext option.

Before:
250-AUTH LOGIN DIGEST-MD5 PLAIN CRAM-MD5

After:
250-AUTH=DIGEST-MD5 CRAM-MD5

Is there a way to test this more secure method (MD5) using a mail client like outlook or outlook express? I get errors in my logs when I try and feel like I am missing something. I also don't see any settings in the mail clients to allow md5 authentication.

Thanks in advance

Outlook and Outlook Express only use the LOGIN protocol.

Ok, So i installed thunderbird and see it used cram-md5, but most of my users don't use firebird. Is my best option to install TLS so the plain method can still be used but it will use a secure connection?

Thanks for the fast reply.
NR

Yes, TLS should always be used on insecure networks with plain text authentication methods.

Setup the submission port 587. See master.cf, and configure your TLS/SASL parameters there instead of main.cf, leaving port 25 as plain SMTP.