Running SMTP on multiple ports (postfix)

[eKg]

Hello all;

As with most large ISP's, my ISP filters port 25 (SMTP). As a web hosting provider, I felt that my customers should be able to use my email server to send email, as well as receive it. It's kind of a value added feature

So, here's how I did it:

Open /etc/postfix/master.cf and add the following line:

587       inet  n       -       n       -       -       smtpd

This is for postfix only. Restart postfix and your done. This doesn't really have anything to do with ISPConfig, however maybe it should be an option...?

EDIT: I forgot to tell you, SMTP will listen on ports 25 and 587

[alex916]

This is a great solution but when i try to send an email using 587 port, no auth is required and the server become an open relay.
Any idea?

[falko]

Have a look here: http://www.howtoforge.com/forums/sho...28&postcount=4

[alex916]

Yes, i tried to send a email from my network.
Running telnet localhost 587 this is the output:

debian:/etc/postfix# telnet localhost 587
Trying 127.0.0.1...
Connected to localhost.localdomain.
Escape character is '^]'.
220 debian.domain.tld ESMTP Postfix (Debian/GNU)
ehlo localhost
250-debian.domain.tld
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
250 8BITMIME
quit
221 Bye
Connection closed by foreign host.

[alex916]

I tried to use this tip from a remote pc with an outside ip but it doesn't work.
When I send an email, i can't authenticate me using port 587.

[falko]

Originally Posted by alex916

Running telnet localhost 587 this is the output:

debian:/etc/postfix# telnet localhost 587
Trying 127.0.0.1...
Connected to localhost.localdomain.
Escape character is '^]'.
220 debian.domain.tld ESMTP Postfix (Debian/GNU)
ehlo localhost
250-debian.domain.tld
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-STARTTLS
250-AUTH LOGIN PLAIN
250-AUTH=LOGIN PLAIN
250 8BITMIME
quit
221 Bye
Connection closed by foreign host.

Looks fine.

I tried to use this tip from a remote pc with an outside ip but it doesn't work.
When I send an email, i can't authenticate me using port 587.

What's the exact error message? What's in the mail log? Did you enable "Server requires authentication." in your email client?

[alex916]

Looking mail.log, when i use port 587, i have this error:

Aug 3 16:14:58 debian postfix/smtpd[3759]: connect from unknown[192.168.0.4]
Aug 3 16:14:58 debian postfix/smtpd[3759]: warning: SASL authentication failure: cannot connect to saslauthd server: No such file or directory
Aug 3 16:14:58 debian postfix/smtpd[3759]: warning: unknown[192.168.0.4]: SASL LOGIN authentication failed
Aug 3 16:14:58 debian postfix/smtpd[3759]: lost connection after AUTH from unknown[192.168.0.4]
Aug 3 16:14:58 debian postfix/smtpd[3759]: disconnect from unknown[192.168.0.4]

Thanks Falko

[falko]

Is saslauthd running? What's the output of

ps aux|grep saslauthd

?
What's in /etc/postfix/master.cf?

[alex916]

debian:~# ps aux|grep saslauthd
root      1805  0.0  0.6  6556 1580 ?        Ss   Jul20   0:00 /usr/sbin/saslauthd -m /var/spool/postfix/var/run/saslauthd -a pam
root      1806  0.0  0.7  6664 1928 ?        S    Jul20   0:00 /usr/sbin/saslauthd -m /var/spool/postfix/var/run/saslauthd -a pam
root      1807  0.0  0.7  6664 1928 ?        S    Jul20   0:00 /usr/sbin/saslauthd -m /var/spool/postfix/var/run/saslauthd -a pam
root      1808  0.0  0.7  6664 1928 ?        S    Jul20   0:00 /usr/sbin/saslauthd -m /var/spool/postfix/var/run/saslauthd -a pam
root      1809  0.0  0.6  6556 1580 ?        S    Jul20   0:00 /usr/sbin/saslauthd -m /var/spool/postfix/var/run/saslauthd -a pam
root     22604  0.0  0.3  2048  780 pts/0    S+   12:26   0:00 grep saslauthd

And Master.cf

#=========================================================
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
#========================================================
smtp      inet  n       -       -       -       -       smtpd
#submission inet n      -       -       -       -       smtpd
#       -o smtpd_etrn_restrictions=reject
#628      inet  n       -       -       -       -       qmqpd
pickup    fifo  n       -       -       60      1       pickup
cleanup   unix  n       -       -       -       0       cleanup
qmgr      fifo  n       -       -       300     1       qmgr
#qmgr     fifo  n       -       -       300     1       oqmgr
rewrite   unix  -       -       -       -       -       trivial-rewrite
bounce    unix  -       -       -       -       0       bounce
defer     unix  -       -       -       -       0       bounce
trace     unix  -       -       -       -       0       bounce
verify    unix  -       -       -       -       1       verify
flush     unix  n       -       -       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
smtp      unix  -       -       -       -       -       smtp
relay     unix  -       -       -       -       -       smtp
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq     unix  n       -       -       -       -       showq
error     unix  -       -       -       -       -       error
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       n       -       -       lmtp
anvil     unix  -       -       n       -       1       anvil
#
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# maildrop. See the Postfix MAILDROP_README file for details.
#
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -d -t$nexthop -f$sender $recipient
scalemail-backend unix  -       n       n       -       2       pipe
  flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}

# only used by postfix-tls
#tlsmgr   fifo  -       -       n       300     1       tlsmgr
#smtps    inet  n       -       n       -       -       smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
#587      inet  n       -       n       -       -       smtpd -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes
587       inet  n       -       n       -       -       smtpd

The problem occurs only when i try to use like smtp port 587.
Using 25 it's all ok.

[falko]

Change this line:

587       inet  n       -       n       -       -       smtpd

to

587       inet  n       -       -       -       -       smtpd

in /etc/postfix/master.cf and restart Postfix.