Bypass SASL Authen for Webmail (127.0.0.1), but enable it for external remote.

From: Truong Tan Son (no email)
Date: Mon May 21 2007 - 23:03:32 EDT

  • Next message: Daniel L. Miller: "Re: Logging outgoing recipients and exempt them from spam checking?"

    Dear Sir,

    My scenario:
    25:[Postfix ] -->10025[TrendMicro SMB]--->10026:[maildrop]

    I want to bypass SASL Authen for Webmail with setting "smtp_sasl_auth_enable = no", it does not take effect.
    (SASL Authen for another remoted client, it works good.)

    #/etc/postfix/main.cf
    smtp_sasl_auth_enable = no
    ^^^^^^^^^^^^^^^^^^^^^^
    content_filter = scan:[127.0.0.1]:10025

    smtpd_sasl_auth_enable = yes
    smtpd_sasl_authenticated_header = yes
    smtpd_reject_unlisted_recipient = yes
    broken_sasl_auth_clients = yes

    smtpd_sender_login_maps = mysql:/etc/postfix/mysql/mysql_login_maps.cf
    smtpd_sender_restrictions = check_client_access cidr:/etc/postfix/client_access,check_recipient_access
    mysql:/etc/postfix/mysql/mysql_all_staffs.cf,
    reject_unlisted_sender,reject_sender_login_mismatch,reject_unauthenticated_sender_login_mismatch,permit_sasl_authenticated

    smtpd_restriction_classes = check_mynetworks, check_permit_sender
    check_mynetworks = check_sender_access pcre:/etc/postfix/fcv_senders
    check_permit_sender = check_sender_access mysql:/etc/postfix/mysql/all_staff_permit.cf,reject

    #/etc/postfix/master.cf
    scan unix - - n - 10 smtp
                 -o smtp_send_xforward_command=yes
                 -o disable_mime_output_conversion=yes
                 -o smtp_generic_maps=
    127.0.0.1:10026 inet n - n - - smtpd
                 -o content_filter=
                 -o smtp_sasl_auth_enable
                ^^^^^^^^^^^^^^^^^^^^^
                 -o smtpd_sender_login_maps

    ***ERROR WEBMAIL***
    May 22 03:49:24 mail postfix/smtpd[7347]: NOQUEUE: reject: RCPT from mail[127.0.0.1]: 553 5.7.1 <>: Sender
    address rejected: not logged in; from=<> to=<> proto=ESMTP helo=<172.16.11.55>

    Can we have other setting to do that ?

    Thanks you and best regards,

    --
    Truong Tan Son. 
    

  • Next message: Daniel L. Miller: "Re: Logging outgoing recipients and exempt them from spam checking?"





    Hosted Email Solutions

    Invaluement Anti-Spam DNSBLs



    Powered By FreeBSD   Powered By FreeBSD