Re: how to set up postfix smtp client to use SSL (port 465)

4 msg	clarification for smtpd milters and header/body...
8 msg	Does Postfix support 64bit platform ?
7 msg	reject_sender_login_mismatch on certain domains...
4 msg	Postfix local problem
2 msg	How can I find out which email account the spam...
4 msg	duplicate SMTP ID?
13 msg	Asking Open Relay
3 msg	mail deferring incorrectly?
3 msg	Possible problems with identical MX records
3 msg	John Hardin's Email Sanitizer on Postfix inboun...
4 msg	Am I being a relay for spam?
3 msg	Unable to write a very simple access policy server
8 msg	set maximal_queue_lifetime for incoming and out...
3 msg	Postfix 2.4 patchlevel 05 available
1 msg	Postfix 2.3 patchlevel 12 available
4 msg	Is there a way to append the domain name to a s...
3 msg	LDAP lookup failures with Postfix 2.3.4

how to set up postfix smtp client to use SSL (p...
\ Joe Harvell (31 Jul 2007)
. \ Noel Jones (31 Jul 2007)
. . \ Joe Harvell (31 Jul 2007)
. . . \ Joe Harvell (31 Jul 2007)

3 msg	Postfix 2.4 patchlevel 04 available
6 msg	Sender address rejected - Sender domain blocked

Subject:	Re: how to set up postfix smtp client to use SSL (port 465)
Group:	Postfix-users
From:	Joe Harvell
Date:	31 Jul 2007

Never mind. Somehow I hadn't saved an editor buffer or something. I
noticed a postfix log stating that saslpass.db was older than its
source. I updated it and it now works. Thanks for your help.

Joe Harvell wrote:
> Ok. This partially works. But now I can't get postfix to do SMTP auth
> to the relay:
>
>
> main.cf
> smtp_tls_per_site=hash:/etc/postfix/tls_per_site
> smtp_sasl_security_options=
> smtp_sasl_auth_enable=yes
> smtp_sasl_password_maps=hash:/etc/postfix/saslpass
> # look at stunnel.conf to find real relay
> relayhost=[dingo.pvt]:56399
>
>
> stunnel.conf
> client=yes
> [att ssmtp]
> accept = dingo.pvt:56399
> connect = smtp.att.yahoo.com:465
>
> # remotehost user:password
> smtp.att.yahoo.com <secret>
> smtp.sbcglobal.yahoo.com <secret>
> smtp-sbc.mail.yahoo.com <secret>
> smtp.sbc.mail.yahoo4.akadns.net <secret>
> dingo.pvt <secret>
>
>
> I get mail bounced with 530 - Authentication Required.
>
> I captured packets on the unencrypted side of the stunnel:
>
>
> rcv 220 smtp114.sbc.mail.re2.yahoo.com ESMTP
> snd EHLO 75.32.10.169
> rcv 250-smtp114.sbc.mail.re2.yahoo.com
> rcv 250-AUTH LOGIN PLAIN XYMCOOKIE
> rcv 250-PIPELINING
> rcv 250 8BITMIME
> snd MAIL FROM:<jharvell>
> snd RCPT TO:<harvell>
> snd DATA
> rcv 530 authentication required - for help go to
> http://help.yahoo.com/help/us/sbc/dsl/mail/pop/pop-11.html
>
> Clearly, Postfix is not performing SMTP Auth. But it does do this when
> I specify relayhost as [smtp.att.yahoo.com]:25. I assume Postfix must
> be trying to match entries in saslpass by doing a reverse DNS lookup of
> the IP address identified by the relayhost hostname. So for dingo.pvt,
> I expect it resolves that to an address then does a reverse lookup to
> get the canonical name. But dingo.pvt (actually dingo.pvt.) is the
> canonical name:
>
> dig -t a dingo.pvt
> ;; ANSWER SECTION:
> dingo.pvt. 0 IN A 192.168.11.1
>
> dig -t ptr 1.11.168.192.in-addr.arpa.
> ;; ANSWER SECTION:
> 1.11.168.192.in-addr.arpa. 172800 IN PTR dingo.pvt.
>
>
> Things I already tried:
>
> - postmap /etc/postfix/saslpass
> - restarting postfix
> - restarting saslauthd
> - putting dingo.pvt. instead of dingo.pvt in my saslpass
>
>
> Noel Jones wrote:
>
>> At 03:25 PM 7/31/2007, Joe Harvell wrote:
>>
>>> I can configure Thunderbird to deliver to smtp.att.yahoo.com using
>>> SMTP over SSL (port 465). How can I do this with Postfix?
>>>
>> There was a recent thread about this.
>> http://archives.neohapsis.com/archives/postfix/2007-03/1350.html
>>
>> Ask again if you need further help.
>>
>>
>
>
>
>
>