Qmail Support Forum

admin · Site Admin Joined: 21 Jun 2005 Posts: 209

Hi there!

I have a problem when using outlook express to send a mail using my
postfix server.

The mta is working good, i can use squirrelmail to send and receive mails.

I use SSL and have set outlook express mail account to use
"authenticate before smtp".

But, i get this error from outlook express when trying to send mail:

The server does not support a SSL connection. Account: 'gmx@fjun.com',
Server: 'mail.fjun.com', Protocol: SMTP, Server Response: '250 8BITMIME',
Port: 25, Secure(SSL): Yes, Server Error: 250, Error Number: 0x800CCC7D

and in my logs:

smtpd[16462]: > johboh.csbnet.se[193.11.251.63]: 220 fjun.csbnet.se ESMTP
Postfix
smtpd[16462]: < johboh.csbnet.se[193.11.251.63]: EHLO johboh
smtpd[16462]: > johboh.csbnet.se[193.11.251.63]: 250-fjun.csbnet.se
smtpd[16462]: > johboh.csbnet.se[193.11.251.63]: 250-PIPELINING
smtpd[16462]: > johboh.csbnet.se[193.11.251.63]: 250-SIZE 10240000
smtpd[16462]: > johboh.csbnet.se[193.11.251.63]: 250-VRFY
smtpd[16462]: > johboh.csbnet.se[193.11.251.63]: 250-ETRN
smtpd[16462]: > johboh.csbnet.se[193.11.251.63]: 250-AUTH LOGIN PLAIN
smtpd[16462]: match_list_match: johboh.csbnet.se: no match
smtpd[16462]: match_list_match: 193.11.251.63: no match
smtpd[16462]: > johboh.csbnet.se[193.11.251.63]: 250-AUTH=LOGIN PLAIN
smtpd[16462]: > johboh.csbnet.se[193.11.251.63]: 250 8BITMIME
smtpd[16462]: smtp_get: EOF
smtpd[16462]: match_hostname: johboh.csbnet.se ~? 127.0.0.1/32
smtpd[16462]: match_hostaddr: 193.11.251.63 ~? 127.0.0.1/32
smtpd[16462]: match_hostname: johboh.csbnet.se ~? 193.11.249.54/32
smtpd[16462]: match_hostaddr: 193.11.251.63 ~? 193.11.249.54/32
smtpd[16462]: match_list_match: johboh.csbnet.se: no match
smtpd[16462]: match_list_match: 193.11.251.63: no match
smtpd[16462]: send attr request = disconnect
smtpd[16462]: send attr ident = smtp:193.11.251.63
smtpd[16462]: private/anvil: wanted attribute: status
smtpd[16462]: input attribute name: status
smtpd[16462]: input attribute value: 0
smtpd[16462]: private/anvil: wanted attribute: (list terminator)
smtpd[16462]: input attribute name: (end)
smtpd[16462]: lost connection after EHLO from
johboh.csbnet.se[193.11.251.63]
smtpd[16462]: disconnect from johboh.csbnet.se[193.11.251.63]
smtpd[16462]: master_notify: status 1
smtpd[16462]: connection closed

here is my /etc/postfix/main.cf:

virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf
virtual_gid_maps = static:1001
virtual_mailbox_base = /usr/local/virtual
virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf
virtual_mailbox_limit = 51200000
virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
virtual_minimum_uid = 1001
virtual_transport = maildrop
virtual_uid_maps = static:1001
# Additional for quota support
virtual_create_maildirsize = yes
virtual_mailbox_extended = yes
virtual_mailbox_limit_maps =
mysql:/etc/postfix/mysql_virtual_mailbox_limit_maps.cf
virtual_mailbox_limit_override = yes
virtual_maildir_limit_message = Sorry, the user's maildir has overdrawn
his diskspace quota, please try again later.
virtual_overquota_bounce = yes

broken_sasl_auth_clients = yes
smtpd_recipient_restrictions =
permit_mynetworks,
permit_sasl_authenticated,
reject_non_fqdn_hostname,
reject_non_fqdn_sender,
reject_non_fqdn_recipient,
reject_unauth_destination,
reject_unauth_pipelining,
reject_invalid_hostname,
reject_rbl_client opm.blitzed.org,
reject_rbl_client list.dsbl.org,
reject_rbl_client bl.spamcop.net,
reject_rbl_client sbl-xbl.spamhaus.org
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous

here is my /etc/sasl2/smtpd.conf

pwcheck_method: authdaemond
log_level: 3
mech_list: PLAIN LOGIN
authdaemond_path:/var/lib/courier/authdaemon/socket

If i uncheck using SSL in outlook express i get an login promt in outlook
express and cannot login when trying to send mail. In the logs:

smtpd[16507]: < johboh.csbnet.se[193.11.251.63]: AUTH LOGIN
smtpd[16507]: smtpd_sasl_authenticate: sasl_method LOGIN
smtpd[16507]: smtpd_sasl_authenticate: uncoded challenge: Username:
smtpd[16507]: > johboh.csbnet.se[193.11.251.63]: 334 VXNlcm5hbWU6
smtpd[16507]: < johboh.csbnet.se[193.11.251.63]: Z214QGZqdW4uY29t
smtpd[16507]: smtpd_sasl_authenticate: decoded response: gmx@fjun.com
smtpd[16507]: smtpd_sasl_authenticate: uncoded challenge: Password:
smtpd[16507]: > johboh.csbnet.se[193.11.251.63]: 334 UGFzc3dvcmQ6
smtpd[16507]: < johboh.csbnet.se[193.11.251.63]: [REMOVED]
smtpd[16507]: smtpd_sasl_authenticate: decoded response: [REMOVED]
smtpd[16507]: warning: SASL authentication problem: unknown password
verifier
smtpd[16507]: warning: johboh.csbnet.se[193.11.251.63]: SASL LOGIN
authentication failed
smtpd[16507]: > johboh.csbnet.se[193.11.251.63]: 535 Error: authentication
failed

I can list mails in the folder trought IMAP with and without SSL in
outlook express.

Does any one has a suggestion? I would like to use SSL.

Best Regards,
Johan Böhlin

admin · Site Admin Joined: 21 Jun 2005 Posts: 209

> The server does not support a SSL connection. Account: 'gmx@fjun.com',
> Server: 'mail.fjun.com', Protocol: SMTP, Server Response: '250 8BITMIME',
> Port: 25, Secure(SSL): Yes, Server Error: 250, Error Number: 0x800CCC7D

Like the message says, your Postfix does not support TLS.

> smtpd[16462]: > johboh.csbnet.se[193.11.251.63]: 250-AUTH=LOGIN PLAIN
> smtpd[16462]: > johboh.csbnet.se[193.11.251.63]: 250 8BITMIME

Indeed, STARTTLS is not announced.

> here is my /etc/postfix/main.cf:

No traces of any configuration parameters that enables TLS.

Post "postconf -n" output, not verbatim main.cf contents.

I've seen this error message many times before, so you'll probably find
something in the archives. Otherwise post "saslfinger -s" output (google
to find that tool).

admin · Site Admin Joined: 21 Jun 2005 Posts: 209

> I use SSL and have set outlook express mail account to use
> "authenticate before smtp".

With SSL or with SASL?

> smtpd[16462]: > johboh.csbnet.se[193.11.251.63]: 250-AUTH=LOGIN PLAIN
> smtpd[16462]: > johboh.csbnet.se[193.11.251.63]: 250 8BITMIME

This server has no STARTTLS support.

See http://www.postfix.org/TLS_README.html

Wietse

admin · Site Admin Joined: 21 Jun 2005 Posts: 209

Hi there!

Thanks! I followed this guide, SMTP AUTH for dummies
(http://www.nervous.it/txt/Postfix-SMTP-AUTH-4-DUMMIES.html)
Now i works!

//Johan