[courier-users] AUTH_REQUIRED blocks inbound mail

permalink · #1 (**permalink**) 07-20-2007

--===============0873733978==
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content=3D"text/html;charset=3DUTF-8" http-equiv=3D"Content-Type"=
>
<title></title>
</head>
<body bgcolor=3D"#ffffff" text=3D"#000000">
Hi 
 
I have a problem with courier... I'm new with this software and I'm
installed a mailserver courier-based (courieresmtp, courier-imap,
courier-pop, courier-webadmin). 
 
I have to configure a smtp with authentication on ldap. Then I
configured /etc/courier/esmtpd in this way: 
 
AUTH_REQUIRED=3D"1" 
ESMTPAUTH=3D"LOGIN" 
 
When I send a mail from my domain to other email-address with this smtp
server (i tried with my thunderbird client) all's well: auth works fine.<=
br>
But if I send a mail with other smtp server to an address of my domain
I have this error in /var/log/maillog 
 
Jul 20 18:22:21 xxxxx courieresmtpd:
started,ip=3D[::ffff:xx.xx.xx.xx] 
Jul 20 18:22:21 xxxxx courieresmtpd:
error,relay=3D::ffff:xx.xx.xx.xx,msg=3D"535 Authentication required.",cmd=
:
MAIL FROM:<a class=3D"moz-txt-link-rfc2396E" href=3D"mailto:xxxxxxxx@xxxx=
xxx.com"><xxxxxxxx@xxxxxxx.com></a> SIZE=3D577 
Jul 20 18:22:29 xxxxx courieresmtpd:
error,relay=3D::ffff:xx.xx.xx.xx,msg=3D"535 Authentication required.",cmd=
:
RCPT TO:<a class=3D"moz-txt-link-rfc2396E" href=3D"mailto:xxxxxx@mydomain=
=2Ecom"><xxxxxx@mydomain.com></a> 
Jul 20 18:22:45 xxxxx courieresmtpd:
error,relay=3D::ffff:xx.xx.xx.xx,msg=3D"535 Authentication required.",cmd=
:
DATA 
 
<big>and I don't know why. 
 
If I set AUTH_REQUIRED=3D"0" in /etc/courier/esmtpd all works fine. 
 
Anyone can help me? I've searched in google but I didn't find anythings
helps me 
 
Thanx in advance 
 
Daniele 
 
This is my /etc/courier/esmtpd: 
 
##VERSION: $Id: esmtpd.dist.in,v 1.23 2007/06/23 11:55:08 mrsam
Exp $ 
# 
# 
# esmtpd created from esmtpd.dist by sysconftool 
# 
# Do not alter lines that begin with ##, they are used when upgrading =

# this configuration. 
# 
#=C2=A0 Copyright 1998 - 2004 Double Precision, Inc.=C2=A0 See COPYING fo=
r 
#=C2=A0 distribution information. 
# 
#=C2=A0 This configuration file sets various options for Courier's esmtpd=

server. 
#=C2=A0 It is started by couriertcpd, Courier's TCP server. 
#=C2=A0 A lot of the stuff here is documented in the manual page for
couriertcpd. 
 
##NAME: PATH:0 
# 
#=C2=A0 Specify the default PATH that everything inherits. 
 
PATH=3D/usr/lib/courier/bin:/bin:/usr/bin:/usr/local/bin 
 
##NAME: SHELL:0 
# 
#=C2=A0 The default shell 
 
SHELL=3D/bin/sh 
 
##NAME: ULIMIT:0 
# 
#=C2=A0 Sets the maximum size of courieresmtpd's data segment 
# 
 
ULIMIT=3D16384 
 
##NAME: BOFHCHECKDNS:0 
# 
#=C2=A0 Comment out the following line in order to accept mail with a bad=
 
#=C2=A0 return address. 
 
BOFHCHECKDNS=3D"0" 
 
##NAME: BOFHNOEXPN:1 
# 
#=C2=A0 Set BOFHNOEXP to 1 to disable EXPN 
 
BOFHNOEXPN=3D0 
 
##NAME: BOFHNOVRFY:1 
# 
#=C2=A0 Set BOFHNOVERIFY to disable VRFY 
 
BOFHNOVRFY=3D0 
 
##NAME: NOADDMSGID:0 
# 
#=C2=A0 The following environment variables keep Courier from adding 
#=C2=A0 default Date: and Message-ID: header to messages which do not hav=
e
them. 
#=C2=A0 If you would like to add default headers only for mail from certa=
in 
#=C2=A0 IP address ranges, you can override them in couriertcpd access fi=
le, 
#=C2=A0 see couriertcpd(8). 
 
NOADDMSGID=3D"0" 
 
##NAME: NOADDDATE:0 
# 
 
NOADDDATE=3D"0" 
 
##NAME: ESMTP_LOG_DIALOG:0 
# 
#=C2=A0 If set, log the esmtp dialog. 
 
ESMTP_LOG_DIALOG=3D0 
 
##NAME: AUTH_REQUIRED:0 
# 
# Set AUTH_REQUIRED to 1 in order to force the client to use ESMTP 
# authentication.=C2=A0 You can override AUTH_REQUIRED on a per-IP addres=
s
basis 
# using smtpaccess.=C2=A0 See makesmtpaccess(8). 
 
AUTH_REQUIRED=3D"1" 
 
################################################## #######################=
 
# 
##NAME: COURIERTLS:0 
# 
# The following variables configure ESMTP STARTTLS.=C2=A0 If OpenSSL is
available 
# during configuration, the couriertls helper gets compiled, and upon =

# installation a dummy TLS_CERTFILE gets generated.=C2=A0 courieresmtpd w=
ill 
# automatically advertise the ESMTP STARTTLS extension if both
TLS_CERTFILE 
# and COURIERTLS exist. 
# 
# WARNING: Peer certificate verification has NOT yet been tested.=C2=A0
Proceed 
# at your own risk.=C2=A0 Only the basic SSL/TLS functionality is known t=
o be 
# working. Keep this in mind as you play with the following variables.<br=
>
 
COURIERTLS=3D/usr/lib/courier/bin/couriertls 
 
##NAME: ESMTP_TLS_REQUIRED:0 
# 
# Set ESMTP_TLS_REQUIRED to 1 if you REQUIRE SSL/TLS to be used for
receiving 
# mail.=C2=A0 Setting it here will require it for every connection.=C2=A0=
You can
also 
# set ESMTP_TLS_REQUIRED in the smtpaccess file, see makesmtpaccess(8)
for 
# more information 
# 
# ESMTP_TLS_REQUIRED=3D1 
 
##NAME: TLS_PROTOCOL:0 
# 
# 
# TLS_PROTOCOL sets the protocol version.=C2=A0 The possible versions are=
: 
# 
# SSL2 - SSLv2 
# SSL3 - SSLv3 
# TLS1 - TLS1 
 
TLS_PROTOCOL=3DSSL23 
 
##NAME: TLS_CIPHER_LIST:0 
# 
# TLS_CIPHER_LIST optionally sets the list of ciphers to be used by the<b=
r>
# OpenSSL library.=C2=A0 In most situations you can leave TLS_CIPHER_LIST=
 
# undefined 
# 
# TLS_CIPHER_LIST=3D"ALL:!ADH:RC4+RSA:+SSLv2:@STRENG TH" 
 
# TLS_TIMEOUT is currently not implemented, and reserved for future use.<=
br>
# This is supposed to be an inactivity timeout, but its not yet
implemented. 
 
##NAME: TLS_DHCERTFILE:0 
# 
# TLS_DHCERTFILE - PEM file that stores our Diffie-Hellman cipher pair.<b=
r>
# When OpenSSL is compiled to use Diffie-Hellman ciphers instead of RSA<b=
r>
# you must generate a DH pair that will be used.=C2=A0 In most situations=
the 
# DH pair is to be treated as confidential, and the file specified by =

# TLS_DHCERTFILE must not be world-readable. 
# 
# TLS_DHCERTFILE=3D 
 
##NAME: TLS_CERTFILE:0 
# 
# TLS_CERTFILE - certificate to use.=C2=A0 TLS_CERTFILE is required for
SSL/TLS 
# servers, and is optional for SSL/TLS clients.=C2=A0 TLS_CERTFILE is usu=
ally 
# treated as confidential, and must not be world-readable. 
# 
TLS_CERTFILE=3D/usr/lib/courier/share/esmtpd.pem 
 
##NAME: TLS_CERTINFO:0 
# 
# TLS_PEERCERTDIR, TLS_OURCACERT - when it is required that all peer 
# certificates are signed by specific certificate authorities, set 
# TLS_OURCACERT to the name of the file containing the certificate root
keys, 
# or set TLS_PEERCERTDIR to the name of the directory containing 
# the certificate root keys. 
# 
# For convenience's sake, Courier installs a default set of root
certificates 
# (which has been swiped from Mozilla's CVS tree :-) ).=C2=A0 Before enab=
ling 
# certificate verification, you should examine all the certificates in
the 
# following directory.=C2=A0 ANY certificate signed by ANY root cert in<b=
r>
# TLS_PEERCERTDIR will be accepted 
# 
# TLS_PEERCERTDIR=3D/usr/lib/courier/share/rootcerts 
# TLS_OURCACERT=3D 
 
##NAME: TLS_VERIFYPEER:0 
# 
# TLS_VERIFYPEER - how to verify peer certificates.=C2=A0 The possible
values of 
# this setting are: 
# 
# NONE - do not verify anything 
# 
# PEER - verify the peer certificate, if one's presented 
# 
# REQUIREPEER - require a peer certificate, fail if one's not presented<b=
r>
# 
# SSL/TLS servers will usually set TLS_VERIFYPEER to NONE.=C2=A0 SSL/TLS
clients 
# will usually set TLS_VERIFYPEER to REQUIREPEER. 
# 
TLS_VERIFYPEER=3DNONE 
 
 
##NAME: MAILUSERGROUP:0 
# 
#=C2=A0 Mail user and group 
 
MAILUSER=3Ddaemon 
MAILGROUP=3Ddaemon 
 
##NAME: ADDRESS:0 
# 
#=C2=A0 Address to listen on, can be set to a single IP address. 
# 
#ADDRESS=3D127.0.0.1 
ADDRESS=3D0 
 
##NAME: PORT:1 
# 
#=C2=A0 PORT specified the port number to listen on.=C2=A0 The standard "=
smtp"
port 
#=C2=A0 is port 25. 
# 
#=C2=A0 Multiple port numbers can be separated by commas.=C2=A0 When mult=
iple port 
#=C2=A0 numbers are used it is possibly to select a specific IP address f=
or a 
#=C2=A0 given port as "ip.port".=C2=A0 For example, "127.0.0.1.900,192.68=
=2E0.1.900" 
#=C2=A0 accepts connections on port 900 on IP addresses 127.0.0.1 and
192.68.0.1 
#=C2=A0 The ADDRESS setting, if given, is a default for ports that do not=

have 
#=C2=A0 a specified IP address. 
 
PORT=3D25 
 
##NAME: BLACKLISTS:1 
# 
#=C2=A0 Blacklists we query. 
# 
#=C2=A0 The BLOCK environment variable is automatically enforced by submi=
t. 
#=C2=A0 Nobody really does anything about BLOCK2, this is mainly for use =
by 
#=C2=A0 plug-in mail filters.=C2=A0 If you want Courier to unilaterally b=
lock 
#=C2=A0 mail from IP addresses listed by Spamhaus or CBL, and you have a
separate 
#=C2=A0 localmailfilter that keys off BLOCK2, uncomment the following.=C2=
=A0 If
you want 
#=C2=A0 to unilaterally block everything listed by Spamhaus or CBL, just
replace 
#=C2=A0 BLOCK2 with BLOCK. 
# 
# BLACKLISTS=3D'-block=3Dzen.spamhaus.org,BLOCK2
-block=3Dcbl.abuseat.org,BLOCK2' 
 
BLACKLISTS=3D"" 
 
##NAME: ACCESSFILE:1 
# 
#=C2=A0 Access file: $ACCESSFILE - plain text file/dir, $ACCESSFILE.dat -=

compiled 
#=C2=A0 database. 
# 
 
ACCESSFILE=3D${sysconfdir}/smtpaccess 
 
##NAME: MAXDAEMONS:0 
# 
#=C2=A0 Maximum number of daemons started 
# 
 
MAXDAEMONS=3D"40" 
 
##NAME: MAXPERC:0 
# 
#=C2=A0 Maximum number of connections accepted from the same C address bl=
ock 
# 
 
MAXPERC=3D"20" 
 
##NAME: MAXPERID:0 
# 
# 
#=C2=A0 Maximum number of connections accepted from the same IP address<b=
r>
 
MAXPERIP=3D"10" 
 
##NAME: PIDFILE:0 
# 
#=C2=A0 File where couriertcpd will save its process ID 
# 
 
PIDFILE=3D/var/spool/courier/tmp/esmtpd.pid 
 
##NAME: TCPDOPTS:3 
# 
# TCPDOPTS can contain other couriertcpd options, such as 
# -nodnslookup and -noidentlookup. 
# 
 
TCPDOPTS=3D"-stderrlogger=3D/usr/sbin/courierlogger -nodnslookup
-noidentlookup" 
#TCPDOPTS=3D"-stderrlogger=3D/usr/sbin/courierlogger" 
 
##NAME: ESMTPAUTH:4 
# 
# To enable authenticated SMTP relaying, uncomment the ESMTPAUTH
setting, 
# below, and set it to ESMTP authentication mechanisms we support.=C2=A0
Currently 
# LOGIN and CRAM-MD5 are available: 
# 
# ESMTPAUTH=3D"LOGIN CRAM-MD5" 
# 
# You can also try PLAIN, CRAM-SHA1, and CRAM-SHA256.=C2=A0 See INSTALL f=
or
more 
# information. 
# 
 
ESMTPAUTH=3D"LOGIN" 
 
##NAME: ESMTPAUTH_WEBADMIN:5 
# 
# ESMTPAUTH_WEBADMIN is used by the webadmin module 
# 
# Don't touch this setting. 
 
ESMTPAUTH_WEBADMIN=3D"LOGIN CRAM-MD5 CRAM-SHA1 CRAM-SHA256" 
 
##NAME: ESMTPAUTHINFOTLS:3 
# 
# To enable SASL PLAIN authentication when using TLS, uncomment the
following. 
# To enable SASL PLAIN with or without TLS, just add PLAIN to ESMTPAUTH,<=
br>
# above: 
# 
# ESMTPAUTH_TLS=3D"PLAIN LOGIN CRAM-MD5" 
# 
# ESMTPAUTH_TLS_WEBADMIN is used by the webadmin module 
 
ESMTPAUTH_TLS=3D"PLAIN LOGIN" 
 
##NAME: ESMTPAUTH_TLS_WEBADMIN:5 
 
ESMTPAUTH_TLS_WEBADMIN=3D"PLAIN LOGIN CRAM-MD5 CRAM-SHA1 CRAM-SHA256" =

 
##NAME: ESMTPDSTART:0 
# 
# ESMTPDSTART is not referenced anywhere in the standard Courier
programs 
# or scripts.=C2=A0 Rather, this is a convenient flag to be read by your
system 
# startup script in /etc/rc.d, like this: 
# 
#=C2=A0 prefix=3D/usr/lib/courier 
#=C2=A0 exec_prefix=3D/usr/lib/courier 
#=C2=A0 . ${sysconfdir}/esmtpd 
#=C2=A0 case x$ESMTPDSTART in 
#=C2=A0 x[yY]*) 
#=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 /usr/lib/courier/sbin/esmtpd =
start 
#=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 ;; 
#=C2=A0 esac 
# 
# The default setting is going to be NO, until Courier is shipped by
default 
# with enough platforms so that people get annoyed with having to flip
it to 
# YES every time. 
 
ESMTPDSTART=3D"YES" 
</big> 
<div class=3D"moz-signature">-- 
Daniele
Piaggesi 
--------=
--------------- 
System
Administrator 
Pronetic=
s
s.p.a. 
Via E. L=
=2E
Cerva 127/C 
Tel.=C2=A0=
=C2=A0=C2=A0=C2=A0+39.06.51530849 
Mob.=C2=A0=
=C2=A0+39.328.6176226 
</div>
</body>
</html>

--===============0873733978==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
--===============0873733978==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/.../courier-users

--===============0873733978==--

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode