Administrace komentářů

server postfix/smtpd[14613]: warning: unknown[93.91.48.134]: SASL LOGIN authentication failed: authentication failure 

# postfix config file

# uncomment for debugging if needed
#soft_bounce=yes

# postfix main
mail_owner = postfix
setgid_group = postdrop
delay_warning_time = 4

# postfix paths
html_directory = no
command_directory = /usr/sbin
daemon_directory = /usr/libexec/postfix
queue_directory = /var/spool/postfix
sendmail_path = /usr/sbin/sendmail.postfix
newaliases_path = /usr/bin/newaliases.postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
sample_directory = /usr/share/doc/postfix-2.2.2/samples
readme_directory = /usr/share/doc/postfix-2.2.2/README_FILES

# network settings
inet_interfaces = all
mydomain = mydomain.com
myhostname = server.mydomain.com
myorigin = server.mydomain.com
mynetworks_style = subnet
mydestination = $myhostname,
localhost
relay_domains = $mydestination

# mail delivery
recipient_delimiter = +

# mappings
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
#local_recipient_maps =

# virtual setup
virtual_alias_maps = mysql:/etc/postfix/mysql-virtual_alias_maps.cf,
regexp:/etc/postfix/virtual_regexp
virtual_gid_maps = static:89
virtual_mailbox_base = /home/vmail
virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual_domains_maps.cf
virtual_minimum_uid = 89
virtual_transport = virtual
virtual_uid_maps = static:89

# debugging
debug_peer_level = 2
debugger_command =
PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
xxgdb $daemon_directory/$process_name $process_id & sleep 5

# authentication
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
broken_sasl_auth_clients = yes
#smtpd_sasl_path = smtpd
smtpd_sasl_security_options = noanonymous
# tls config
smtp_use_tls = yes
smtpd_use_tls = yes
smtp_tls_note_starttls_offer = yes
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.pem
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.pem
smtpd_tls_CAfile = /etc/postfix/ssl/smtpd.pem
smtpd_tls_loglevel = 5
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom

# rules restrictions
# smtpd_client_restrictions = reject_rbl_client sb1.spamhaus.org
smtpd_helo_restrictions = permit_sasl_authenticated,
permit_mynetworks,
reject_non_fqdn_hostname
smtpd_sender_restrictions = reject_non_fqdn_sender,
reject_unknown_sender_domain
smtpd_recipient_restrictions = permit_sasl_authenticated permit_mynetworks check_relay_domains
smtpd_helo_required = yes
unknown_local_recipient_reject_code = 550
disable_vrfy_command = yes
smtpd_data_restrictions = reject_unauth_pipelining

content_filter = amavis:[127.0.0.1]:10024
receive_override_options = no_address_mappings 

pwcheck_method: auxprop
mech_list: PLAIN LOGIN
auxprop_plugin: sql
sql_verbose: yes
sql_engine: mysql
sql_hostnames: localhost
sql_user: postfix
sql_passwd: password
sql_database: postfix
sql_select: select password from mailbox where username = '%u@%r'
log_level: 7 

saslfinger - postfix Cyrus sasl configuration Sat Jan 2 07:37:35 MST 2010
version: 1.0.2
mode: server-side SMTP AUTH

-- basics --
Postfix: 2.5.6
System: Fedora release 11 (Leonidas)

-- smtpd is linked to --
libsasl2.so.2 => /usr/lib64/libsasl2.so.2 (0x00007f0290e2a000)

-- active SMTP AUTH and TLS parameters for smtpd --
broken_sasl_auth_clients = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_tls_CAfile = /etc/postfix/ssl/smtpd.pem
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.pem
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.pem
smtpd_tls_loglevel = 5
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes


-- listing of /usr/lib64/sasl2 --
total 572
drwxr-xr-x. 2 root root 4096 2009-10-13 06:14 .
drwxr-xr-x. 146 root root 102400 2010-01-01 04:51 ..
-rwxr-xr-x. 1 root root 16312 2009-02-24 03:44 libanonymous.so
-rwxr-xr-x. 1 root root 16312 2009-02-24 03:44 libanonymous.so.2
-rwxr-xr-x. 1 root root 16312 2009-02-24 03:44 libanonymous.so.2.0.22
-rwxr-xr-x. 1 root root 19352 2009-02-24 03:44 libcrammd5.so
-rwxr-xr-x. 1 root root 19352 2009-02-24 03:44 libcrammd5.so.2
-rwxr-xr-x. 1 root root 19352 2009-02-24 03:44 libcrammd5.so.2.0.22
-rwxr-xr-x. 1 root root 49176 2009-02-24 03:44 libdigestmd5.so
-rwxr-xr-x. 1 root root 49176 2009-02-24 03:44 libdigestmd5.so.2
-rwxr-xr-x. 1 root root 49176 2009-02-24 03:44 libdigestmd5.so.2.0.22
-rwxr-xr-x. 1 root root 16952 2009-02-24 03:44 liblogin.so
-rwxr-xr-x. 1 root root 16952 2009-02-24 03:44 liblogin.so.2
-rwxr-xr-x. 1 root root 16952 2009-02-24 03:44 liblogin.so.2.0.22
-rwxr-xr-x. 1 root root 16856 2009-02-24 03:44 libplain.so
-rwxr-xr-x. 1 root root 16856 2009-02-24 03:44 libplain.so.2
-rwxr-xr-x. 1 root root 16856 2009-02-24 03:44 libplain.so.2.0.22
-rwxr-xr-x. 1 root root 22240 2009-02-24 03:44 libsasldb.so
-rwxr-xr-x. 1 root root 22240 2009-02-24 03:44 libsasldb.so.2
-rwxr-xr-x. 1 root root 22240 2009-02-24 03:44 libsasldb.so.2.0.22
-rw-r--r--. 1 root root 25 2009-02-25 21:22 Sendmail.conf
-rw-r--r-- 1 root root 297 2010-01-02 05:19 smtpd.conf

-- listing of /etc/sasl2 --
total 20
drwxr-xr-x. 2 root root 4096 2010-01-02 04:57 .
drwxr-xr-x. 129 root root 12288 2010-01-02 02:34 ..
-rw-r--r-- 1 root root 271 2010-01-02 05:19 smtpd.conf




-- content of /usr/lib64/sasl2/smtpd.conf --
pwcheck_method: auxprop
#pwcheck_method:saslauthd
mech_list: PLAIN LOGIN
auxprop_plugin: sql
sql_verbose: yes
sql_engine: mysql
sql_hostnames: localhost
sql_user: --- replaced ---
sql_passwd: --- replaced ---
sql_database: postfix
sql_select: select password from mailbox where username = '%u@%r'
log_level: 7


-- content of /etc/sasl2/smtpd.conf --
pwcheck_method: auxprop
mech_list: PLAIN LOGIN
auxprop_plugin: sql
sql_verbose: yes
sql_engine: mysql
sql_hostnames: localhost
sql_user: --- replaced ---
sql_passwd: --- replaced ---
sql_database: postfix
sql_select: select password from mailbox where username = '%u@%r'
log_level: 7



-- active services in /etc/postfix/master.cf --
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
smtp inet n - n - - smtpd
pickup fifo n - n 60 1 pickup
cleanup unix n - n - 0 cleanup
qmgr fifo n - n 300 1 qmgr
tlsmgr unix - - n 1000? 1 tlsmgr
rewrite unix - - n - - trivial-rewrite
bounce unix - - n - 0 bounce
defer unix - - n - 0 bounce
trace unix - - n - 0 bounce
verify unix - - n - 1 verify
flush unix n - n 1000? 0 flush
proxymap unix - - n - - proxymap
proxywrite unix - - n - 1 proxymap
smtp unix - - n - - smtp
relay unix - - n - - smtp
-o smtp_fallback_relay=
showq unix n - n - - showq
error unix - - n - - error
retry unix - - n - - error
discard unix - - n - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - n - - lmtp
anvil unix - - n - 1 anvil
scache unix - - n - 1 scache
maildrop unix - n n - - pipe
flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
old-cyrus unix - n n - - pipe
flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user}
cyrus unix - n n - - pipe
user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user}
uucp unix - n n - - pipe
flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail unix - n n - - pipe
flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe
flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient

amavis unix - - - - 2 smtp
-o smtp_data_done_timeout=1200
-o smtp_send_xforward_command=yes

127.0.0.1:10025 inet n - - - - smtpd
-o content_filter=
-o local_recipient_maps=
-o relay_recipient_maps=
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o mynetworks=127.0.0.0/8
-o strict_rfc821_envelopes=yes
-o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
-o smtpd_bind_address=127.0.0.1

-- mechanisms on localhost --
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN


-- end of saslfinger output --