· 9 years ago · Aug 26, 2016, 08:26 PM
1[First Attempt]
2[root@domain postfix]# telnet mail.example.org 587
3Trying 139.59.182.62...
4Connected to mail.example.org.
5Escape character is '^]'.
6220 example.org ESMTP Postfix
7ehlo mail.example.org
8250-example.org
9250-PIPELINING
10250-SIZE 10240000
11250-VRFY
12250-ETRN
13250-STARTTLS
14250-AUTH PLAIN
15250-AUTH=PLAIN
16250-ENHANCEDSTATUSCODES
17250-8BITMIME
18250 DSN
19starttls
20220 2.0.0 Ready to start TLS
21ehlo mail.example.org
22Connection closed by foreign host.
23
24[Second Attempt]
25[root@domain postfix]# telnet mail.example.org 587
26Trying 139.59.182.62...
27Connected to mail.example.org.
28Escape character is '^]'.
29220 example.org ESMTP Postfix
30ehlo mail.example.org
31250-example.org
32250-PIPELINING
33250-SIZE 10240000
34250-VRFY
35250-ETRN
36250-STARTTLS
37250-AUTH PLAIN
38250-AUTH=PLAIN
39250-ENHANCEDSTATUSCODES
40250-8BITMIME
41250 DSN
42auth plain
43334
44username
45535 5.7.8 Error: authentication failed: another step is needed in authentication
46quit
47221 2.0.0 Bye
48Connection closed by foreign host.
49
50[Third Attempt]
51[root@domain postfix]# telnet mail.example.org 587
52Trying 139.59.182.62...
53Connected to mail.example.org.
54Escape character is '^]'.
55220 example.org ESMTP Postfix
56ehlo mail.example.org
57250-example.org
58250-PIPELINING
59250-SIZE 10240000
60250-VRFY
61250-ETRN
62250-STARTTLS
63250-AUTH PLAIN
64250-AUTH=PLAIN
65250-ENHANCEDSTATUSCODES
66250-8BITMIME
67250 DSN
68MAIL FROM:<user@domain.org>
69250 2.1.0 Ok
70RCPT TO:<******@gmail.com>
71454 4.7.1 <*******@gmail.com>: Relay access denied
72quit
73221 2.0.0 Bye
74Connection closed by foreign host.
75
76Aug 26 19:55:11 example postfix/smtpd[22132]: connect from example.org[00.00.00.00]
77Aug 26 19:55:22 example postfix/smtpd[22132]: warning: example.org[00.00.00.00]: SASL plain authentication failed: another step is needed in authentication
78Aug 26 19:55:40 example postfix/smtpd[22132]: disconnect from example.org[00.00.00.00]
79Aug 26 19:55:42 example postfix/smtpd[22132]: connect from example.org[00.00.00.00]
80Aug 26 19:56:25 example postfix/smtpd[22132]: NOQUEUE: reject: RCPT from example.org[00.00.00.00]: 454 4.7.1 <*******@gmail.com>: Relay access denied; from=<******@example.org> to=<*******@gmail.com> proto=ESMTP helo=<mail.domain.org>
81Aug 26 19:56:30 example postfix/smtpd[22132]: disconnect from example.org[00.00.00.00]
82Aug 26 19:59:50 example postfix/anvil[22134]: statistics: max connection rate 2/60s for (submission:00.00.00.00) at Aug 26 19:55:11
83Aug 26 19:59:50 example postfix/anvil[22134]: statistics: max connection count 1 for (submission:00.00.00.00) at Aug 26 19:54:29
84Aug 26 19:59:50 example postfix/anvil[22134]: statistics: max cache size 1 at Aug 26 19:54:29
85
86myorigin = domain1.org
87 myhostname = domain2.org
88 inet_protocols = all
89 mydestination = mail.domain1.org, domain1
90 relay_domains = domain2
91 alias_maps = hash:/etc/aliases
92 alias_database = hash:/etc/aliases
93 alias_maps = hash:/etc/aliases
94 alias_database = hash:/etc/aliases
95 virtual_alias_domains = domain1.org domain2.org
96 virtual_alias_maps = hash:/etc/postfix/virtual
97 smtpd_use_tls = yes
98 smtpd_tls_auth_only = no
99 smtpd_tls_key_file = /etc/postfix/ssl/ssl.key
100 smtpd_tls_cert_file = /etc/postfix/ssl/ssl.crt
101 smtpd_tls_CAfile = /etc/postfix/ssl/interm.crt
102 smtpd_tls_loglevel = 1
103 smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
104 smtp_sasl_security_options = noanonymous
105 smtpd_tls_received_header = yes
106 smtpd_tls_session_cache_timeout = 3600s
107 tls_random_source = dev:/dev/urandom
108 smtpd_sasl_auth_enable = yes
109 smtp_sasl_auth_enable = yes
110 smtpd_tls_protocols = !SSLv2, !SSLv3
111 smtpd_sasl_local_domain =
112 smtpd_delay_reject = yes
113 broken_sasl_auth_clients = yes
114 smtpd_recipient_restrictions = reject_invalid_hostname,permit_sasl_authenticated,
115 reject_unknown_recipient_domain,
116 reject_unauth_destination,
117 reject_rbl_client sbl.spamhaus.org,
118 permit
119
120 smtpd_helo_restrictions = reject_invalid_helo_hostname,
121 reject_non_fqdn_helo_hostname,
122 reject_unknown_helo_hostname
123 mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
124 mailbox_size_limit = 0
125 recipient_delimiter = +
126 inet_interfaces = all
127 smtp_tls_security_level = may
128 smtp_tls_note_starttls_offer = yes
129
130smtp inet n - n - - smtpd
131 #smtp inet n - n - 1 postscreen
132 #smtpd pass - - n - - smtpd
133 #dnsblog unix - - n - 0 dnsblog
134 #tlsproxy unix - - n - 0 tlsproxy
135 submission inet n - n - - smtpd
136 # -o syslog_name=postfix/submission
137 # -o smtpd_tls_security_level=encrypt
138 # -o smtpd_sasl_auth_enable=yes
139 # -o smtpd_reject_unlisted_recipient=no
140 # -o smtpd_client_restrictions=$mua_client_restrictions
141 # -o smtpd_helo_restrictions=$mua_helo_restrictions
142 # -o smtpd_sender_restrictions=$mua_sender_restrictions
143 -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
144 # -o milter_macro_daemon_name=ORIGINATING
145 #smtps inet n - n - - smtpd
146 # -o syslog_name=postfix/smtps
147 # -o smtpd_tls_wrappermode=yes
148 # -o smtpd_sasl_auth_enable=yes
149 # -o smtpd_reject_unlisted_recipient=no
150 # -o smtpd_client_restrictions=$mua_client_restrictions
151 # -o smtpd_helo_restrictions=$mua_helo_restrictions
152 # -o smtpd_sender_restrictions=$mua_sender_restrictions
153 # -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
154 # -o milter_macro_daemon_name=ORIGINATING