LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > 4MLinux
User Name
Password
4MLinux This forum is for the discussion of 4MLinux.

Notices


Reply
  Search this Thread
Old 10-20-2017, 03:55 PM   #1
zk1234
4MLinux Maintainer
 
Registered: Oct 2010
Location: Poland
Distribution: 4MLinux, Slackware
Posts: 700

Rep: Reputation: 133Reputation: 133
Postfix ports configuration in the 4MLinux Server 23.0 (for advanced users)


Hi,

TheSSS 23.0 (using the 4MLinux Server 23.0) will be released during this weekend. It will come with Postfix ports preconfigured by me, meaning that everything should work out of the box.

1) Starting the server:
Code:
smtpd start
2) Let's see what is running:
Code:
root@4MLinux:~$ pscan localhost
Scanning localhost ports 1 to 1024
 Port	Proto	State	Service
   25	tcp	open	smtp
  465	tcp	open	smtps
  587	tcp	open	submission
1021 closed, 3 open, 0 timed out (or blocked) ports
3) Port 25:
Code:
root@4MLinux:~$ telnet localhost 25
220 4MLinux.localdomain ESMTP Postfix
EHLO ILOVELINUX.COM
250-4MLinux.localdomain
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
4) Port 587:
Code:
root@4MLinux:~$ telnet localhost 587
220 4MLinux.localdomain ESMTP Postfix
EHLO ILOVELINUX.COM
250-4MLinux.localdomain
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
5) Port 465:
Code:
openssl s_client -connect localhost:465
CONNECTED(00000003)
depth=0 C = PL, ST = Mazovia Province, L = Warsaw, O = Stunnel Developers, OU = Provisional CA, CN = localhost
verify error:num=18:self signed certificate
verify return:1
depth=0 C = PL, ST = Mazovia Province, L = Warsaw, O = Stunnel Developers, OU = Provisional CA, CN = localhost
verify return:1
---
Certificate chain
 0 s:/C=PL/ST=Mazovia Province/L=Warsaw/O=Stunnel Developers/OU=Provisional CA/CN=localhost
   i:/C=PL/ST=Mazovia Province/L=Warsaw/O=Stunnel Developers/OU=Provisional CA/CN=localhost
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=PL/ST=Mazovia Province/L=Warsaw/O=Stunnel Developers/OU=Provisional CA/CN=localhost
issuer=/C=PL/ST=Mazovia Province/L=Warsaw/O=Stunnel Developers/OU=Provisional CA/CN=localhost
---
No client certificate CA names sent
Peer signing digest: SHA512
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 1444 bytes and written 433 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: 38D39BC76E3E1276B5775DA20E71E083F1369E230E20999FF8A0076E04C18980
    Session-ID-ctx: 
    Master-Key: 46B94FC66B977F906AEA9C7435FD3730DC108DA838C7C4CBFE314780118E1BC497EEE1D0A4A0BD50F1124E47AD4EC381
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1508527965
    Timeout   : 300 (sec)
    Verify return code: 18 (self signed certificate)
---
220 4MLinux.localdomain ESMTP Postfix
EHLO ILOVELINUX.ORG
250-4MLinux.localdomain
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
The three ports tested above behave as they should do.
I DO NOT recommend to use the "SMTP Authentication And Encryption" section of Webmin. You will end up with setting up, for example, STARTTLS on port 25. I don't like this idea, just like I do not expect the "https" connection on port 80.

.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Configuring Ports on Mail Server [Postfix] carlosinfl Linux - Server 1 03-07-2012 02:26 AM
Configuration Issues with Virtual Users on Postfix/Courier/MySQL Fedora 12 IssacT Linux - Server 4 05-10-2010 07:08 PM
Postfix Local users and Users on another server... apinta10 Linux - Server 9 08-04-2008 10:04 PM
Postfix Configuration Question: Postfix server as a catch-all on office LAN enso491 Linux - Server 5 04-14-2008 05:35 PM
having users setting up server on restricted ports GŠutama Linux - Networking 6 06-15-2003 02:20 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > 4MLinux

All times are GMT -5. The time now is 07:21 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration