[SM-USERS] smtps 465 works, submission 587 does not

2011-12-07 Thread Grant
Squirrelmail runs on the same machine as postfix and sends mail fine
when postfix is configured for smtps 465.  I read smtps is deprecated
so I switched postfix to submission 587 and changed the port in
squirrelmail's config but squirrelmail will no longer send mail.
Thunderbird sends mail fine over port 465 or 587.  In squirrelmail I
get:

ERROR:
Message not sent. Server replied:
0 Can't open SMTP stream.

In the postfix log I get:

[postfix/smtpd] connect from localhost[127.0.0.1]
[postfix/smtpd] lost connection after UNKNOWN from localhost[127.0.0.1]
[postfix/smtpd] disconnect from localhost[127.0.0.1]

Does anyone know how to fix this?

- Grant

--
Cloud Services Checklist: Pricing and Packaging Optimization
This white paper is intended to serve as a reference, checklist and point of 
discussion for anyone considering optimizing the pricing and packaging model 
of a cloud services business. Read Now!
http://www.accelacomm.com/jaw/sfnl/114/51491232/
-
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): 
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users


Re: [SM-USERS] smtps 465 works, submission 587 does not

2011-12-07 Thread Noel Butler
On Wed, 2011-12-07 at 16:59 -0800, Grant wrote:

> Squirrelmail runs on the same machine as postfix and sends mail fine
> when postfix is configured for smtps 465.  I read smtps is deprecated
> so I switched postfix to submission 587 and changed the port in
> squirrelmail's config but squirrelmail will no longer send mail.
> Thunderbird sends mail fine over port 465 or 587.  In squirrelmail I
> get:
> 
> ERROR:
> Message not sent. Server replied:
> 0 Can't open SMTP stream.
> 
> In the postfix log I get:
> 
> [postfix/smtpd] connect from localhost[127.0.0.1]
> [postfix/smtpd] lost connection after UNKNOWN from localhost[127.0.0.1]
> [postfix/smtpd] disconnect from localhost[127.0.0.1]
> 
> Does anyone know how to fix this?
> 


You haven't shown us much information... What are your settings for
SMTP?
Are you using TLS?  If so, have you verified thunderbird (postfix) works
with TLS or is actually really only working in plain.
What are your requirements for 587 in postfix, in
smtpd_recipient_restrictions?




signature.asc
Description: This is a digitally signed message part
--
Cloud Services Checklist: Pricing and Packaging Optimization
This white paper is intended to serve as a reference, checklist and point of 
discussion for anyone considering optimizing the pricing and packaging model 
of a cloud services business. Read Now!
http://www.accelacomm.com/jaw/sfnl/114/51491232/-
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): 
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Re: [SM-USERS] smtps 465 works, submission 587 does not

2011-12-07 Thread Grant
> Squirrelmail runs on the same machine as postfix and sends mail fine
> when postfix is configured for smtps 465.  I read smtps is deprecated
> so I switched postfix to submission 587 and changed the port in
> squirrelmail's config but squirrelmail will no longer send mail.
> Thunderbird sends mail fine over port 465 or 587.  In squirrelmail I
> get:
>
> ERROR:
> Message not sent. Server replied:
> 0 Can't open SMTP stream.
>
> In the postfix log I get:
>
> [postfix/smtpd] connect from localhost[127.0.0.1]
> [postfix/smtpd] lost connection after UNKNOWN from localhost[127.0.0.1]
> [postfix/smtpd] disconnect from localhost[127.0.0.1]
>
> Does anyone know how to fix this?

I just read that squirrelmail doesn't work with STARTTLS.  Is
deprecated SSL port 465 the only way to connect securely to a mail
server with squirrelmail?

> You haven't shown us much information... What are your settings for SMTP?

Here are my postfix settings.

master.cf:

submission inet n   -   n   -   -   smtpd
  -o smtpd_tls_security_level=encrypt
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  -o milter_macro_daemon_name=ORIGINATING

main.cf

smtpd_sasl_auth_enable = yes
smtpd_sasl2_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain =

smtpd_recipient_restrictions =
   permit_sasl_authenticated,
   permit_mynetworks,
   reject_unauth_destination,
   permit

postscreen_greet_action = enforce
postscreen_pipelining_enable = yes
postscreen_pipelining_action = enforce
postscreen_non_smtp_command_enable = yes
postscreen_non_smtp_command_action = enforce
postscreen_bare_newline_enable = yes
postscreen_bare_newline_action = enforce

smtpd_tls_security_level = may
smtpd_tls_auth_only = yes

> Are you using TLS?  If so, have you verified thunderbird (postfix) works
> with TLS or is actually really only working in plain.

I have thunderbird set to "Port: 587" and "Connection Security: STARTTLS".

If I set "Secure SMTP (TLS) : false" in squirrelmail, I get:

Authentication required
530 5.7.0 Must issue a STARTTLS command first

If I change port 587 to 25 in squirrelmail I get:

Bad sequence of commands
503 5.5.1 Error: authentication not enabled

- Grant

--
Cloud Services Checklist: Pricing and Packaging Optimization
This white paper is intended to serve as a reference, checklist and point of 
discussion for anyone considering optimizing the pricing and packaging model 
of a cloud services business. Read Now!
http://www.accelacomm.com/jaw/sfnl/114/51491232/
-
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): 
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users


Re: [SM-USERS] smtps 465 works, submission 587 does not

2011-12-07 Thread Paul Lesniewski
On Wed, Dec 7, 2011 at 5:59 PM, Grant  wrote:
>> Squirrelmail runs on the same machine as postfix and sends mail fine

Is there any reason you need an encrypted connection when sending mail
on the localhost?  This just creates unnecessary overhead and is
usually avoided if the connection is not over public networks.  It's
trivial to add a secondary listener to Postfix's master.cf that
accepts SquirrelMail/localhost-only email submissions unencrypted on
another port.

>> when postfix is configured for smtps 465.  I read smtps is deprecated
>> so I switched postfix to submission 587 and changed the port in
>> squirrelmail's config but squirrelmail will no longer send mail.
>> Thunderbird sends mail fine over port 465 or 587.  In squirrelmail I
>> get:
>>
>> ERROR:
>> Message not sent. Server replied:
>> 0 Can't open SMTP stream.
>>
>> In the postfix log I get:
>>
>> [postfix/smtpd] connect from localhost[127.0.0.1]
>> [postfix/smtpd] lost connection after UNKNOWN from localhost[127.0.0.1]
>> [postfix/smtpd] disconnect from localhost[127.0.0.1]
>>
>> Does anyone know how to fix this?
>
> I just read that squirrelmail doesn't work with STARTTLS.  Is

If you really need it, SquirrelMail version 1.5.2 supports it.

> deprecated SSL port 465 the only way to connect securely to a mail
> server with squirrelmail?

FWIW, although port 465 is deprecated, I'm not sure it (postfix's
smtps service) is going anywhere anytime soon.

-- 
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

--
Cloud Services Checklist: Pricing and Packaging Optimization
This white paper is intended to serve as a reference, checklist and point of 
discussion for anyone considering optimizing the pricing and packaging model 
of a cloud services business. Read Now!
http://www.accelacomm.com/jaw/sfnl/114/51491232/
-
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): 
https://lists.sourceforge.net/lists/listinfo/squirrelmail-users