search for: submission_relay_trust

Hello, I'm having trouble configuring the submission proxy. I have configured the submission service as follow: submission_host = smtp.example.com submission_relay_host = localhost submission_relay_port = 8587 submission_relay_rawlog_dir = /var/log/dovecot/ submission_relay_trusted = yes My main issue is that until I login, dovecot-submission won't connect to the backend and query the capabilities and so won't report the right capabilities. That mean that the first EHLO message don't get the right capabilities list. " EHLO example.com 250-smtp.example.c...

...ission service in order to replace the corresponding part in Postfix (which is my SMTP server). I configured submission it with just a few options different of the default ones: submission_client_workarounds = whitespace-before-path submission_relay_host = 127.0.0.1 submission_relay_port = 10026 submission_relay_trusted = yes The issue I'm having is that the SMTP AUTH is enforced and performed correctly, but it doesn't get published on the server capaabilities when the connection doesn't come from localhost. This causes issues with some smtp clients which authenticate (python smtpclient). When I...

...uring the submission proxy. >> >> I have configured the submission service as follow: >> >> submission_host = smtp.example.com >> submission_relay_host = localhost >> submission_relay_port = 8587 >> submission_relay_rawlog_dir = /var/log/dovecot/ >> submission_relay_trusted = yes >> >> My main issue is that until I login, dovecot-submission won't connect to the backend and query the capabilities and so won't report the right capabilities. >> >> That mean that the first EHLO message don't get the right capabilities list. >>...

I'm setting up an alternative submission relay host for dovecot. Atm, it's pointing @ fastmail.com. with dovecot config, submission_relay_host = smtp.fastmail.com submission_relay_port = 465 submission_relay_ssl = smtps submission_relay_ssl_verify = no submission_relay_trusted = yes submission_relay_user = 'acctID at mydomain.com' submission_relay_password = 'acctPWD' submission relay via dovecot proxy works as expected -- mail's delivered/received by intended recipient. in local dovecot logs I notice ==> /var/log/dovecot/dovecot...

...onfigured the submission service as follow: >>> >>> submission_host = smtp.example.com <http://smtp.example.com> >>> submission_relay_host = localhost >>> submission_relay_port = 8587 >>> submission_relay_rawlog_dir = /var/log/dovecot/ >>> submission_relay_trusted = yes >>> >>> My main issue is that until I login, dovecot-submission won't >>> connect to the backend and query the capabilities and so won't >>> report the right?capabilities. >>> >>> That mean that the first EHLO message don't...

On 10/1/2019 11:42 PM, Aki Tuomi via dovecot wrote: > Can you configure mail_debug=yes, try again, and post the logs? > > Aki Hello Aki, This is the only piece of relevant info I've been getting in the logs, and I'm trying to figure out how I can get more debug data on this: Oct 02 07:34:09 imap(asai2 at triata.globalchange.media)<43553><9fylXO6TtycKCgDu>: Debug:

...{ ??? port = 587 ? } } ssl = required ssl_cert = </etc/dovecot/dovecot-backend.pem ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it submission_client_workarounds = whitespace-before-path submission_host = ### submission_relay_host = ### submission_relay_ssl = starttls submission_relay_trusted = yes userdb { ? driver = prefetch } userdb { ? args = /etc/dovecot/dovecot-ldap-userdb.conf.ext ? driver = ldap } protocol lda { ? mail_plugins = " acl notify replication zlib" } protocol imap { ? mail_max_userip_connections = 100 ? mail_plugins = " acl notify replication zl...

...port = 587 ? } } ssl_cert = </etc/letsencrypt/live/triata.globalchange.media/fullchain.pem ssl_key = # hidden, use -P to show it submission_relay_host = triata.globalchange.media submission_relay_password = # hidden, use -P to show it submission_relay_port = 587 submission_relay_ssl = starttls submission_relay_trusted = yes submission_relay_user = %u userdb { ? args = /etc/dovecot/dovecot-mysql.conf ? driver = sql } protocol lda { ? mail_plugins = } -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://dovecot.org/pipermail/dovecot/attachments/20190925/ca2c2f18/attachm...

...he corresponding part in >Postfix >(which is my SMTP server). >I configured submission it with just a few options different of the >default ones: > >submission_client_workarounds = whitespace-before-path >submission_relay_host = 127.0.0.1 >submission_relay_port = 10026 >submission_relay_trusted = yes > >The issue I'm having is that the SMTP AUTH is enforced and performed >correctly, but it doesn't get published on the server capaabilities >when >the connection doesn't come from localhost. This causes issues with >some >smtp clients which authenticate...

...unsigned int submission_max_recipients; const char *submission_client_workarounds; const char *submission_logout_format; /* submission backend: */ const char *submission_backend_capabilities; /* submission relay: */ const char *submission_relay_host; in_port_t submission_relay_port; bool submission_relay_trusted; const char *submission_relay_user; const char *submission_relay_master_user; const char *submission_relay_password; const char *submission_relay_ssl; bool submission_relay_ssl_verify; const char *submission_relay_rawlog_dir; unsigned int submission_relay_max_idle_time; unsigned int s...

...> I'm having trouble configuring the submission proxy. > > I have configured the submission service as follow: > > submission_host = smtp.example.com > submission_relay_host = localhost > submission_relay_port = 8587 > submission_relay_rawlog_dir = /var/log/dovecot/ > submission_relay_trusted = yes > > My main issue is that until I login, dovecot-submission won't connect to the backend and query the capabilities and so won't report the right capabilities. > > That mean that the first EHLO message don't get the right capabilities list. > > " > EHLO...

...> I'm having trouble configuring the submission proxy. > > I have configured the submission service as follow: > > submission_host = smtp.example.com > submission_relay_host = localhost > submission_relay_port = 8587 > submission_relay_rawlog_dir = /var/log/dovecot/ > submission_relay_trusted = yes > > My main issue is that until I login, dovecot-submission won't connect to the backend and query the capabilities and so won't report the right capabilities. That is true and expected. No connection to the relay server is made until the user is logged in. > That mean t...

...server where I run dovecot and a relay server with postfix. The relevant part of dovecot's config is as follows (sanitized): hostname = submission.domain.local submission_client_workarounds = whitespace-before-path submission_relay_host = 192.168.1.1 <- postfix submission_relay_port = 25 submission_relay_trusted = yes Postfix is configured as follows: smtpd_authorized_xclient_hosts = 192.168.1.2 <- submission server Everything apparently works as expected, meaning that I can correctly authenticate on the submission server and the email is relayed to postfix, where I can see the original MUA's...

...rnative submission relay host for dovecot. Atm, it's pointing @ fastmail.com. > > with dovecot config, > > submission_relay_host = smtp.fastmail.com > submission_relay_port = 465 > submission_relay_ssl = smtps > submission_relay_ssl_verify = no > submission_relay_trusted = yes > submission_relay_user = 'acctID at mydomain.com' > submission_relay_password = 'acctPWD' > > submission relay via dovecot proxy works as expected -- mail's delivered/received by intended recipient. > > in local dovecot logs I notice >...

...tats-writer { ??? group = vmail ??? mode = 0660 ??? user = vmail ? } } ssl_cert = </etc/letsencrypt/live/triata.globalchange.media/fullchain.pem ssl_key = # hidden, use -P to show it submission_relay_host = triata.globalchange.media submission_relay_port = 587 submission_relay_ssl = starttls submission_relay_trusted = yes userdb { ? args = /etc/dovecot/dovecot-mysql.conf ? driver = sql } protocol lmtp { ? mail_plugins = " sieve" } protocol lda { ? mail_plugins = }

...gt;> (which is my SMTP server). >> I configured submission it with just a few options different of the >> default ones: >> >> submission_client_workarounds = whitespace-before-path >> submission_relay_host = 127.0.0.1 >> submission_relay_port = 10026 >> submission_relay_trusted = yes >> >> The issue I'm having is that the SMTP AUTH is enforced and performed >> correctly, but it doesn't get published on the server capaabilities >> when >> the connection doesn't come from localhost. This causes issues with >> some >>...

...= 0660 > ??? user = vmail > ? } > } > ssl_cert = </etc/letsencrypt/live/triata.globalchange.media/fullchain.pem > ssl_key = # hidden, use -P to show it > submission_relay_host = triata.globalchange.media > submission_relay_port = 587 > submission_relay_ssl = starttls > submission_relay_trusted = yes > userdb { > ? args = /etc/dovecot/dovecot-mysql.conf > ? driver = sql > } > protocol lmtp { > ? mail_plugins = " sieve" > } > protocol lda { > ? mail_plugins = > } >

?I've a dovecot instance setup with submission proxy, protocols = imap lmtp submission sieve hostname = internal.mx.example.com submission_relay_host = internal.mx.example.com submission_relay_port = 465 submission_relay_trusted = yes submission_relay_ssl = smtps submission_relay_ssl_verify = yes service submission-login { inet_listener submission { address = 10.2.2.10, 127.0.0.1 port = 50465 ssl = yes } } protocol submission { ssl_cert = < /sec/vmail/mx.example.com.server.EC.crt.pem ssl_key =...

...= </etc/ssl/private/michaelmarley.com.pem ssl_cipher_list = HIGH !RC4 !aNULL !eNULL !3DES @STRENGTH ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_min_protocol = TLSv1.2 ssl_prefer_server_ciphers = yes submission_relay_host = localhost submission_relay_port = 24 submission_relay_trusted = yes userdb { driver = passwd } protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" } local_name matthewtmarley.com { ssl_cert = </etc/ssl/private/matthewtmarley.com.pem ssl_key = # hidden, use -P to show it }

...</etc/letsencrypt/live/triata.globalchange.media/fullchain.pem > ssl_key = # hidden, use -P to show it > submission_relay_host = triata.globalchange.media > submission_relay_password = # hidden, use -P to show it > submission_relay_port = 587 > submission_relay_ssl = starttls > submission_relay_trusted = yes > submission_relay_user = %u > userdb { > ? args = /etc/dovecot/dovecot-mysql.conf > ? driver = sql > } > protocol lda { > ? mail_plugins = > } > -- "Catch the Magic of Linux..." -------------------------------------------------------------------...