POSTFIX & SMTP Relay Denied

pau_kacang · 03-23-2010, 04:46 AM

hello,

i'm just finish install & setup postfix & spamassasin. i can send & received email from my local area network. i already install webmail client & i can send received. when using my pda from outside my network i can received but i just can send email to my domain only. for other domain it's error relay access denied. here my postfix configuration. anybody know how to solved this problem

caksin · 03-23-2010, 09:34 AM

Where is your postfix configuration? Is it me or did you forget to post it?
I had the same problem trying through outlook when I first setup a server, if you don't tick the "my server requires authentication" checkbox, it gives the "relay access denied" error. If you can find any configuration option like the one I mentioned, try that.

rpedrica · 03-23-2010, 10:58 AM

You need to of course setup sasl auth to do allow non-ip specified relaying from external. A better way is to use TLS auth however that is another kettle of fish.

pau_kacang · 03-28-2010, 08:31 PM

thanx for replay,

i tried to configure POSTFIX TLS auth with Slackware 12.2. i refer to thti link http://www.postfix.org/TLS_README.html, but i can't find in my slack box. can anybody help me how to configure TLS auth on POSTFIX + SLACKWARE 12.2

tuxrules · 03-29-2010, 07:37 AM

Quote:

Originally Posted by pau_kacang

thanx for replay,

i tried to configure POSTFIX TLS auth with Slackware 12.2. i refer to thti link http://www.postfix.org/TLS_README.html, but i can't find in my slack box. can anybody help me how to configure TLS auth on POSTFIX + SLACKWARE 12.2

You first need to create a self-signed CA certificate. Google for the phrase and you'll get detailed how-tos. Then you need to make changes listed in TLS README. For help, here's my config options in main.cf.

Code:

### Begin Section - SMTP with STARTTLS section
smtpd_use_tls = yes

### add tls info in headers
smtpd_tls_received_header = yes

### offer SMTP AUTH with TLS only
smtpd_tls_auth_only = yes

### RSA key and certificates:
smtpd_tls_cert_file = /path/to/cert_file

smtpd_tls_key_file = /path/to/key_file

### log level 1 only produces Log TLS handshake and certificate information.
smtpd_tls_loglevel = 1

### http://www.postfix.org/TLS_README.html
### USE EITHER THIS --this will not force the use TLS
smtpd_tls_security_level = may
### OR THIS --- this will force everyone to use TLS.
#smtpd_tls_security_level = encrypt

### set smtpd_sasl_tls security options
smtpd_sasl_tls_security_options = noanonymous, noactive, nodictionary

smtpd_tls_session_cache_database = btree:/var/spool/postfix/data/smtpd_scache
smtpd_tls_session_cache_timeout = 3600s
smtpd_starttls_timeout = 120s

### use /dev/urandom for tls
tls_random_source = dev:/dev/urandom