From: Andreas Winkelmann (no email)
Date: Tue Oct 03 2006 - 14:38:05 EDT
Am Tuesday 03 October 2006 20:05 schrieb Sandy Drobic:
> > Oct 3 21:49:47 mail postfix/smtpd[6999]: connect from
> > unknown[125.23.52.249]
> > Oct 3 21:49:48 mail postfix/smtpd[6999]: lost connection after
> > CONNECT from unknown[125.23.52.249]
> > Oct 3 21:49:48 mail postfix/smtpd[6999]: disconnect from
> > unknown[125.23.52.249]
>
> I can not see any attempt to authenticate. Please verify that the client
> did indeed try to authenticate.
I think he has enabled SMTP-Auth in his Client.
SMTP has diffrent States.
"CONNECT" is from the Client-Connect until the HELO/EHLO.
"HELO/HELO" is from the Client sends EHLO until the Client sends "MAIL FROM".
"MAIL" ....
In this case the Client disconnects before it sends the EHLO-Command or
better, before the Server receives the EHLO. And before the Client sees
AUTH... or STARTTLS-Headers.
The only Reason I see for that is something in between the Client and the
Server which "fixup"s the SMTP-Traffic.
The Client connects, sends EHLO and the thing between says "5xx Command not
supported". The Client knows, no EHLO no Authentification and Disconnects.
If SMTP-Auth is disabled in the Client, the Client would send HELO after the
failed EHLO and tries to send the Mail. Which would end in an "Relay Access
denied".
> > -- active SMTP AUTH and TLS parameters for smtpd --
> > broken_sasl_auth_clients = yes
> > smtpd_sasl_auth_enable = yes
> > smtpd_sasl_local_domain =
> > smtpd_sasl_security_options = noanonymous
> > smtpd_tls_CAfile = /etc/postfix/cacert.pem
> > smtpd_tls_auth_only = yes
>
> Ah, that explains why you don't get an auth line. Please deactive that
> line while you debug sasl auth.
>
> smtpd_tls_auth_only = no
>
> Then execute "postfix reload".
>
> You can only authenticate now, if you use tls for your connection.
Yes, good catch. But I would guess after the thing above.
-- Andreas
|
|
|