Re: [opensuse] Another problem authenticating with postfix.

Carlos E. R. wrote:

Hi,

Here goes another one. In "SASL_README.html" I read:

Postfix version 2.3 supports-per-sender SASL password information. To
search the Postfix SASL password by sender before it searches by
destination, specify:

/etc/postfix/main.cf:
smtp_sender_dependent_authentication = yes
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd

/etc/postfix/sasl_passwd:
user@xxxxxxxxxxx username:password
bar.com username
[mail.myisp.net] username:password
[mail.myisp.net]:submission username:password

Looks a bit weird. I once had sender_dependent_relayhost_maps working, but
it didn't look like that.


Now, I can't make head or tails of that brief explanation; perhaps there
is another file that explains it in more detail, but meanwhile I'm stuck.

My problem is thus:

I normally use my own postfix (on a dynamic IP) to send everywhere.
Sometimes it is rejected, and then I send via a relay. And then I have new
problems: none of my mail account provider accept emails if the "from"
address in the email is not one of theirs!

In that case you need to use sender_dependent_relayhost_maps. Usually
Postfix decides the relayhost respectively the nexthop based on the
recipient address. In case of sender_dependent_relayhost_maps the nexthop
is chosen by the sender address.

This is probably what you need here.


For instance, using my telefonica account, the one that I got working in
another email, I can send if my from is the one above, but not if I'm
using my sourceforge alias:

]: > smtp.telefonica.net[213.4.149.66]: MAIL FROM:<myaddress@sourceforge> SIZE=1000 BODY=8BITMIME AUTH=<>
]: > smtp.telefonica.net[213.4.149.66]: RCPT TO:<myaddress@somewhere> ORCPT=rfc822;myaddress@somewhere
]: > smtp.telefonica.net[213.4.149.66]: DATA
]: < smtp.telefonica.net[213.4.149.66]: 553 MAIL FROM:<myaddress@sourceforge> domain not accepted

It doesn't even ask for authentification, and my IP is from telefonica.net
at the moment. I know that this will give rise to some eyebrows, but it is
an unfortunate fact.

Auth should have happened before mail from.


Is this possible? I don't know, because I don't understand how postfix
supports "per-sender" password information.

perhaps it means:

That's it. For the sender address "user@xxxxxxxxxxx" you need to set up
two settings:

sasl_passwd:
user@xxxxxxxxxxx username:password

sender_dependent_relayhost_maps = hash:/etc/postfix/sender_relayhosts

/etc/postfix/sender_relayhosts:
user@xxxxxxxxxxx [relayhost]

By the way, I don't know if your ISP deleted my direct mail to you or
shoved it into the spamfolder or whatever, but I sent you a private mail
to tell you that you posted your auth data... :-/


--
Sandy

List replies only please!
Please address PMs to: news-reply2 (@) japantest (.) homelinux (.) com
--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx

Relevant Pages

  • Re: Postfix-Sender and recipient restriction problem
    ... This is because Postfix is the Final Recipient for this domain. ... Mail server dont alert me "Sender address reject:User unknown in local ... allows mail relaying for all IPs you enter in mynetworks. ...
    (Debian-User)
  • Re: Squirrelmail and postfix
    ... That's very weird, because inside the email I can see the sender, date, ... You do realise that Squirrelmail not showing you correct header info has nothing to do with Postfix, ... Only when actually sending new mail will it use Postfix, or any other MTA, and then only in the sense that if anything goes wrong there you are not likely to see it in Squirrelmail's interface afterwards - unless you daily check your Sent mail. ...
    (comp.os.linux.misc)
  • [opensuse] Another problem authenticating with postfix.
    ... Postfix version 2.3 supports-per-sender SASL password information. ... To send via a transport when the destination is on a list, ...
    (SuSE)
  • Re: [SLE] Postfix: Blocking mails from a top-level domain
    ... I use Postfix 2.2.5-5 on SUSE 10.0. ... I want to reject all emails where the sender is from the top-level domain .biz. ... to the access map. ...
    (SuSE)
  • Re: Exch 2003 #5.5.0 smtp;553 + unable to verify address
    ... Postfix can do "sender callout verifications", ... tries to send email in the name of john@xxxxxxxxxxx to a Postfix server, ... > sending from Exchange 2000 is no problem, ...
    (microsoft.public.inetserver.iis.smtp_nntp)