Topic: 5.5 & obtuse-smtpd-qmail-howto

[Bill Talcott]

Hmmmm, do you know if http://kepler.covenant.edu/~talarson/ssl/SSL-Email-HOWTO-2.html still applies to 5.0 and 5.1.2? I didn't realize how much was sent plaintext...

[Nathan Fowler]

Yes, they will still function in 4.1.2+, however, there are some changes that I found necessary in that howto.  Let me get the modified how-to...:


http://forums.contribs.org/index.php?topic=4146.msg14367#msg14367


Note that
/usr/sbin/stunnel -d smtps -l /usr/sbin/smtpd was changed to /usr/sbin/stunnel -d smtps -l /usr/sbin/smtpd -n smtp

It is necessary to define the daemon type if using SMTP.

Hope this helped,
Nathan

[Shelby Moore]

Does anyone have the http://forums.contribs.org/index.php?topic=4146.msg14367#msg14367 HowTo working on 5.5?  This worked fine for me on 5.0 but now that I upgraded to 5.5 no luck.  Wondering if it just me or if the HowTo does not work for 5.5  Thanks,

Shelby

[Nathan Fowler]

Where does the process break down?

Nathan

[Shelby Moore]

Trying to send an email to myself in Outlook I get the following message from outlook:

The message could not be sent because one of the recipients was rejected by the server. The rejected e-mail address was 'shelbym@v-cut.com'. Subject 'test', Account: 'www.v-cut.com', Server: 'www.v-cut.com', Protocol: SMTP, Server Response: '421 Service not available, closing transmission channel', Port: 465, Secure(SSL): Yes, Server Error: 421, Error Number: 0x800CCC79

Checking the maillog on SME 5.5 I see this:

Jul 11 10:54:24 waterboy smtpd[5037]: SMTP HELO from localhost(127.0.0.1) as "layout001"
Jul 11 10:54:24 waterboy smtpd[5037]: mail from
Jul 11 10:54:24 waterboy smtpd[5037]: Can not stat address check file /etc/smtpd_check_rules (No such file or directory)!
Jul 11 10:54:24 waterboy smtpd[5037]: Missing or empty address check file - Abandoning session

smtpd_check_rules is there.  I am new to all this so I am not sure what else the log might be telling me.  Any ideas?

Shelby

[David Stanton]

Hmmmmm
I know I'm an idiot, but does anyone know where the best place to set the environment variable to make mailfront authenticate for relay?

[Nathan Fowler]

David, you're question is very valid, and you know what? I have no clue.  I can't find any decent documentation for mailfront, and Charlie states that all qmail documentation can be applied to mailfront.  You're best bet for support would be at their mailing list.


I would check out:
http://lists.em.ca/?list=bgware

More specifically:
http://lists.em.ca/?command=showthread&list=bgware&month=200207&threadid=fgknnknphnlalfhbjogm

Good luck the developers for Mailfront appear to be real cocks (excuse my language).

Nathan

[Nathan Fowler]

David, if you ever wanted to revert back a version from SME 5.5 you could always use http://www.stickit.nu/pop-before-smtp.  Relay-Control would be more powerful if you can get it working.  Please take detailed notes along the way so you could compile a meager HowTo to assist others.  Relay Control is a hot topic and as it stands now, no one has the answer.

Nathan

[Charlie Brady]

Nathan Fowler wrote:

> Good luck the developers for Mailfront appear to be real
> cocks (excuse my language).

No, I will not excuse your language! The developer of Mailfront has made an excellent package available to you at no cost. What have you ever done for him?

CB

[Nathan Fowler]

I will not get involved in this.

Thanks,
Nathan

[Charlie Brady]

Nathan Fowler wrote:
 
> I will not get involved in this.

That's rather cowardly of you, Nathan, given that it was your gratuitous insult which raised the issue in the first place. You *are* involved, and should just apologise.

Regards

Charlie

[David Stanton]

I'm going to try to dig up some documentation I have on Qmail, but I'm thinking that might have to go back to 5.1.2 for now.

Thanks again for the help!!!

[Shelby Moore]

Looks like I am headed back myself.  Any one else have any ideas how to get this to work on 5.5?

Thanks,

Shelby

[Stefan Braunstein]

>  5.5 does not ship with SASL enabled,
> as mailfront does not yet support TLS (SSL),
> and we discourage use of cleartext passwords
> (or cleartext equivalent) over the Internet.

So what do I do, if I use 5.5 and my ISP only supports SMTP auth?

Stefan