1 Topic by lmatys

  • lmatys
  • Member
  • Offline
  • Registered: 2017-05-25
  • Posts: 17

Topic: SMTP AUTH port 25

======== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.6
- Linux/BSD distribution name and version:  CentOS Linux release 7.3.1611 (Core)
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro? Yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hi.
I'm trying to run tcp/25 smtp auth option.
I've done all like below, but the smtp serwer does not respond with 250-AUTH
http://www.iredmail.org/docs/enable.smt … rt.25.html

ehlo localhost
250-irm.hti.pl
250-SIZE 125829120
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
quit
221 2.0.0 Bye

I can see that postscreen service runs by default after installation, and the documentation says that,
"WARNING: With postscreen service enabled, your users must use port 587 to send email, port 25 will be used by postscreen service instead of normal smtp service."

So is the postscreen service the problem?
How to start smtp auth at port 25 with current situation?

Regards.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by Waschl (edited by Waschl 2017-07-24 23:01:31)

  • Waschl
  • Member
  • Offline
  • From: Germany
  • Registered: 2016-02-12
  • Posts: 12

Re: SMTP AUTH port 25

Have you set the following parameters in postfix main.cf:

smtpd_sasl_auth_enable = yes
smtpd_tls_auth_only = no --> if you want to use unencrypted sasl support
smtpd_tls_auth_only = yes --> if you want only encrypted (after STARTTLS) sasl support

Then you have to allow the ip adresses of your clients that use sasl on port 25 in postscreen_access.cidr like this example:
127.0.0.1     permit

3 Reply by lmatys

  • lmatys
  • Member
  • Offline
  • Registered: 2017-05-25
  • Posts: 17

Re: SMTP AUTH port 25

I've added the permission at postscreen_access.cidr and now it's OK, thank You ;-).