Re: NOT a Stubborn Cert issue

11 msg	SMTP authentication with saslauthd against PAM
7 msg	Error in SMTP sequence
2 msg	dkim-milter on relay server unknown-jobid exter...

Stubborn Cert issue
\ Dehnert James Sr (12 Apr 2007)
. \ Victor Duchovni (13 Apr 2007)
. . \ Dehnert James Sr (14 Apr 2007)
. . . \ Dehnert James Sr (14 Apr 2007)
. . . . \ (Wietse Venema) (14 Apr 2007)
. . . . . \ Dehnert James Sr (15 Apr 2007)
. . . . . . \ (Wietse Venema) (15 Apr 2007)
. . . . . . . \ Dehnert James Sr (16 Apr 2007)
. . . . . . \ Victor Duchovni (15 Apr 2007)
. . . \ Victor Duchovni (14 Apr 2007)
. . . . \ Victor Duchovni (14 Apr 2007)

3 msg	Problems with false positives
4 msg	reject_unverified_recipient case sensitive?
3 msg	dkim=fail (verification error: invalid key gran...
5 msg	? Using header checks on (Postini) X-pstn-levels
2 msg	Can't find error in my config file. Can you?
1 msg	chroot postgresql ssl problem
15 msg	What cert to buy
3 msg	Address re-writing
9 msg	Mail Rejected when we relay for a client.
8 msg	Queueing up archive messages
2 msg	Cannot send e-mails from any e-mail clients
1 msg	Re: outbound mail failure - need to fix asap -S...
4 msg	outbound mail failure - need to fix asap
3 msg	Postfix alias problem
2 msg	problem to send a mail to a command in aliases
3 msg	smtpd_auth

Subject:	Re: NOT a Stubborn Cert issue
Group:	Postfix-users
From:	Dehnert James Sr
Date:	16 Apr 2007

On Apr 15, 2007, at 8:27 AM, Wietse Venema wrote:

> Dehnert James Sr:
>> Well, OK I actually tried...
>>
>> -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
>>
>> and
>>
>> -o smtpd_client_restrictions=permit_sasl_authenticated,reject
>>
>> and
>>
>> -o reject
>
> Where does Postfix documentation define the meaning of "-o reject"?

That was just me experimenting, but, since I only connected and never
sent, it never really did anything. I was hoping it would reject
everything, but my test was invalid.

>
>> clearly, this has nothing to do with the cert issue, so I should have
>> re titled this message. I ran across this while I was testing
>> everything with all the tls stuff commented out, and it worried me,
>> but it's way, way, WAY more likely that I have screwed up my
>> configuration as opposed to some issue with postfix itself, but -o
>> reject by itself just seems so hard for me to screw up.
>
> You did not answer my question:
>
>>> Everyone can connect, but CAN THEY SEND MAIL?

I realized my error a few hours after sending my response. Since I
was caught up in the CERT connection issue I never actualy tried to
send a message!

So, with the following configuration in master.cf, I can send
authorized messages ONLY.

submission inet n - n - - smtpd -v
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject

My apologies for responding while sleepy before.

So my only issue now is with the certs.

>
> Wietse
>
>