Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Using postfix with remote outlook client

Status
Not open for further replies.

happyjohn

IS-IT--Management
Nov 24, 2009
2
GB
Hi,
I'm attempting to run postfix with virtual domains using a mysql database and Dovecot for pop3/imap connections.
I have set up sasl authentication using dovecot for remote clients and when I telnet to my server on port 25, I can authenticate and send remote mail.
All works well for users in my network and when connecting via Squirrelmail but I cannot get outlook users connecting from outside of my network to be able to send mail to 3rd party domains.
Here is my main.cf:

Code:
queue_directory = /var/spool/postfix
command_directory = /usr/sbin

daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
mail_owner = postfix
myhostname = pabx.mydomain.com
mynetworks = 127.0.0.0/8 [::1/128] 115.221.18.243 115.221.18.244
myorigin = $myhostname
inet_interfaces = all
mydestination = $myhostname, mysql:/etc/postfix/sql/domains.cf, localhost
unknown_local_recipient_reject_code = 550
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
sendmail_path = /usr/sbin/sendmail.postfix
newaliases_path = /usr/bin/newaliases.postfix
mailq_path = /usr/bin/mailq.postfix
setgid_group = postdrop
html_directory = no
manpage_directory = /usr/share/man
readme_directory = /usr/share/doc/postfix-2.5.6/README_FILES
inet_protocols = all
relay_domains = $mydestination

# SMTP AUTH
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_sasl_authenticated_header = yes
smtp_sasl_password_maps = mysql:/etc/postfix/sql/sasl_password.cf
smtpd_sasl_local_domain = pabx.mydomain.com
smtpd_use_tls = no

# Using Dovecot
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth

# smtpd_recipient_restrictions
smtpd_recipient_restrictions =
  check_recipient_access hash:/etc/postfix/roleaccount_exceptions
  permit_mynetworks
  permit_sasl_authenticated
  reject_non_fqdn_sender
  reject_unknown_sender_domain
  reject_unknown_recipient_domain

  reject_unauth_destination
  reject_invalid_hostname
  reject_rbl_client blackholes.easynet.nl,
  reject_rbl_client cbl.abuseat.org,
  reject_rbl_client proxies.blackholes.wirehub.net,
  reject_rbl_client bl.spamcop.net,
  reject_rbl_client sbl.spamhaus.org,
  reject_rbl_client dnsbl.njabl.org,
  reject_rhsbl_sender dsn.rfc-ignorant.org
  check_helo_access pcre:/etc/postfix/halo_checks
  reject_unverified_sender
  permit

smtpd_data_restrictions =
  reject_multi_recipient_bounce

content_filter = amavisd:[127.0.0.1]:10024


# Database definitions
virtual_mailbox_base = /var/spool/mailboxes/
virtual_mailbox_domains = mysql:/etc/postfix/sql/vrdomains.cf
virtual_uid_maps = static:1000
virtual_gid_maps =  static:1000
virtual_mailbox_maps = mysql:/etc/postfix/sql/recipients.cf
virtual_alias_maps = mysql:/etc/postfix/sql/aliases.cf

and my Dovecot.conf
listen = *, [::]
auth default {
	mechanisms = plain
	passdb sql {
    args = /etc/dovecot-mysql.conf
	}
	userdb sql {
    args = /etc/dovecot-mysql.conf
	}
	socket listen {
		client  {
			path = /var/spool/postfix/private/auth
		   mode = 0660
			user = postfix
			group = postfix
		}
	}
}

Outlook clients are configured to authenticate with email addresses as usernames and using passwords which work when using squirrelmail.
Two weeks so far and very little hair left.
 
Hi,
just to let you know that I have found the answer so please don't spend time on this.
When researching the setup originally I picked up the info that Outlook uses PLAIN authentication. It doesn't, it used LOGIN. I added this into the authentication methods in Dovecot and all is now well.
OK, now to start on TLS!
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top