The perfect setup *Postfix With SMTP-AUTH And TLS* assistance needed!!

[andyc]

Hi guys.
Whata fantastic site..no wonder it has a google PR of 7!!
Anyway, I am pretty new to unix (12 months my own server) and I have just done Till Brehms guide to setting up

http://www.howtoforge.com/perfect_setup_centos_4.4_p5


Postfix With SMTP-AUTH And TLS setup.

Really excellent tutorial by Till (THANKS Till! ) and I learnt a lot about this install..but now Im a little stuck

To start with I want to add some pop3s accounts. I had them working on a previous server, all domains and MX records are setup right but I just need to add them to this server.

Can anyone tell me how I add users for example:

andrew@domain.com

robert@domainb.com

sue@domainx.co.uk, and rob@domainx.co.uk

and so on?? (pop3 or/and pop3s so I understand both ways)

Also, how do I setup SMTP further for use with Outlook or another email client?

THanks guys..I would really appreciate assistance as I want to do this right

[andyc]

or does anyone know of even a good howto or tutorial??

[falko]

Take a look here: http://www.howtoforge.com/forums/showthread.php?t=2 (or install a control panel such as ISPConfig ).

[andyc]

Thanks for the reply Falco
I am very tempted to install a control panel such as ISP config just for ease of use in the future with managing my own sites.... what is the cost of this , do you know?
It surely cannot be open source? I see you are a co author of this so you must know these answers
Do development costs get paid for by your supporting the application?
i am very impressed by it and have heard of it before but may well install it very soon

[andyc]

Also...the link is for IMAP and I want pop3s

I did the seup though and couldnt get it working
What do I put in my

IMAP server:
and SMTP server:

boxes in outlook?

I just put the server name...server#.blabla.com

didnt work at all and I followed the guide religously!!
Looks like I might be installing ISPconfig tomorrw at this rate

[falko]

Originally Posted by andyc

what is the cost of this , do you know?
It surely cannot be open source? I see you are a co author of this so you must know these answers

It's free and comes under a BSD license. Take a look at www.ispconfig.org .

Originally Posted by andyc

Also...the link is for IMAP and I want pop3s

That's no difference as long as pop3s is running. You can check by running

netstat -tap

Originally Posted by andyc

I did the seup though and couldnt get it working
What do I put in my

IMAP server:
and SMTP server:

boxes in outlook?

Any FQDN or IP address that points to your server. To rule out DNS problems for now, I suggest you try the IP address first.

[andyc]

Ispconfig looks very impressive.I may well install it very soon at this rate but I want to sort this gremlin first or I imagine it will cause me problems with ispconfig too

All ports are open for pop3 , pop3s IMAP smtp etc
FQDN resolves fine
Outlook pop3 account runs all tests on account fine (and imap seems ok)
except neitehr will sennd an email using my domain


: Relay access denied


Heres my virtual file

Originally Posted by Virtual in /etc/postfix/

VIRTUAL(5)
office@domain1.com my_user

Originally Posted by bottom part of main.conf

readme_directory = /usr/share/doc/postfix-2.2.10/README_FILES
smtpd_sasl_local_domain =
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
mynetworks = 127.0.0.0/8
smtpd_tls_auth_only = no
smtp_use_tls = yes
smtp_tls_note_starttls_offer = yes
smtpd_use_tls = yes
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom
home_mailbox = Maildir/
mailbox_command =
virtual_alias_maps = hash:/etc/postfix/virtual
virtual_alias_domains = domain1.com domain1.co.uk domain2.co.uk

Anyone have any ideas what is wrong??
I did have local-host-domains line in and this file in etc/postfix/ but it made no difference and it was not shown in postfix config manuals so I removed it!!

[andyc]

ok.
So this is really annoying me now!!!
ive tried for hours to get this working and Im still getting relay access denied
Any ideas guys?

Mar 11 02:11:24 server8 postfix/smtp[16662]: certificate peer name verification failed for acc2.com: CommonName mis-match: colo16.ukhost4u.com
Mar 11 02:11:24 server8 postfix/smtp[16662]: Server certificate could not be verified
Mar 11 02:11:25 server8 postfix/smtp[16662]: 6C2B11CCFD7: to=<andrew@acc2.com>, relay=acc2.com[85.13.251.165], delay=7, status=sent (250 OK id=1HQDWi-0002fO-H1)
Mar 11 02:11:25 server8 postfix/qmgr[16607]: 6C2B11CCFD7: removed
Mar 11 02:12:07 server8 postfix/pickup[16606]: BDA9F1CCFD7: uid=0 from=<root>
Mar 11 02:12:07 server8 postfix/cleanup[16660]: BDA9F1CCFD7: message-id=<20070311021207.BDA9F1CCFD7@server8.domain.net>
Mar 11 02:12:07 server8 postfix/qmgr[16607]: BDA9F1CCFD7: from=<root@server8.domain.net>, size=325, nrcpt=1 (queue active)
Mar 11 02:12:08 server8 postfix/smtp[16662]: BDA9F1CCFD7: to=<andrew@anotheremail.com>, relay=mx.core.plus.net[84.92.2.1], delay=1, status=sent (250 OK id=1HQDb8-0007CF-Ok)
Mar 11 02:12:08 server8 postfix/qmgr[16607]: BDA9F1CCFD7: removed
Mar 11 02:12:45 server8 postfix/qmgr[16607]: 6A5B51CCFD1: from=<root@server8.domain.net>, size=7574, nrcpt=1 (queue active)
Mar 11 02:12:45 server8 postfix/smtp[16662]: 6A5B51CCFD1: host mx0.123-reg.co.uk[195.224.48.115] said: 451 Temporary local problem - please try later (in reply to RCPT TO command)
Mar 11 02:12:45 server8 postfix/smtp[16662]: 6A5B51CCFD1: to=<anton@cemar.co.uk>, orig_to=<root>, relay=mx0.123-reg.co.uk[195.224.48.116], delay=79843, status=deferred (host mx0.123-reg.co.uk[195.224.48.116] said: 451 Temporary local problem - please try later (in reply to RCPT TO command))

I have tried emailing myself via bash and I recieve zero email and it says email sent (then removed but is that from the queue?)

Heres main.cnf for what its worth

myhostname = server8.register1.net
mydomain = register1.net
mydestination = /etc/postfix/local-host-names
local_recipient_maps =
unknown_local_recipient_reject_code = 550
mynetworks = 168.100.189.0/28, 127.0.0.0/8, 00.000.000.0/25 (my ip range!)
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
debug_peer_level = 2
debugger_command =
PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin
xxgdb $daemon_directory/$process_name $process_id & sleep 5
sendmail_path = /usr/sbin/sendmail.postfix
newaliases_path = /usr/bin/newaliases.postfix
mailq_path = /usr/bin/mailq.postfix
setgid_group = postdrop
readme_directory = /usr/share/doc/postfix-2.2.10/README_FILES
smtpd_sasl_local_domain =
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
mynetworks = 127.0.0.0/8
smtpd_tls_auth_only = no
smtp_use_tls = yes
smtp_tls_note_starttls_offer = yes
smtpd_use_tls = yes
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom
home_mailbox = Maildir/
mailbox_command =
virtual_alias_maps = hash:/etc/postfix/virtual

All other items are commented or totally bog standard post fix config like queue_directory = /var/spool/postfix...

My virtual file is called "virtual"

office@domain1.com office_user
webmaster@domain2.co.uk bossuser

Ive also had the local-host-names directive in teh conf file and the associated file in postfix dir but it still doesnt work!! (and I get log message saying domain.com shouldnt be listed in mydestination and virtual_alias_domains ...

Could it be a network setting I need to look into??

please help!!!

[falko]

Originally Posted by andyc

Outlook pop3 account runs all tests on account fine (and imap seems ok)
except neitehr will sennd an email using my domain


: Relay access denied

Sending has nothing to do with POP3 and IMAP.
Please make sure that "Server requires authentication." is enabled in your email client.

[andyc]

Originally Posted by falko

Sending has nothing to do with POP3 and IMAP.
Please make sure that "Server requires authentication." is enabled in your email client.

hi
thanks Falco.
Is it possible that there is a problem with my ISP mx record for the domain ??!
Authentification is ticked yes.

I had the domain working and it sent and received fine to other domains on the net.
Now. I am getting messages back in only the imap folder?
saying

This is the Postfix program at host server8.domain.net.
I'm sorry to have to inform you that your message could not be delivered.For further assistance, please send mail to <postmaster>
If you do so, please include this problem report. You can delete your own text from the attached returned message.

The Postfix program

<andrew@myhousemail.com>: host mx.core.plus.net[84.92.2.1] said: 550 Sender
verify failed (in reply to RCPT TO command)

I cant find the directive Ive changed that would cause this?