New subject: Postfix mit TLS (gelöst)

21 Nov 2020

      Hallo zusamme,
ich versuche postfix mit tls einzurichten, um auch aus einem shell-skript emails zu versenden.
Leider geht gar nichts.
Ich habe in der main.cf folgendes eingegeben :

relayhost = [smtp.1und1.de]:587
smtp_tls_note_starttls_offer = yes
smtp_use_tls = yes # Aktiviert TLS für Postfix
smtp_sasl_auth_enable = yes # Aktiviert SMTP AUTH für Postfix
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd # Gibt an wo Postfix die Zugangsdaten findet
smtp_sasl_security_options = # Durch setzen der leeren Option wird die PLAIN- und anonyme Authentifizierung aktivier
##smtp_sasl_mechanism_filter = plain 

sasl_passwd
smtp.1und1.de xxxxxxxx@yyyyyyyyy.info:supergeheim
smtp.1und1.de:587 xxxxxxxx@yyyyyyyyy.info:supergeheim

wenn ich das aktiviere

systemctl stop postfix;systemctl start postfix;systemctl status postfix

● postfix.service - Postfix Mail Transport Agent
 Loaded:loaded (/usr/lib/systemd/system/postfix.service; enabled; vendor preset:enabled)
 Active:active (running) since Sat 2020-11-21 09:57:07 CET; 11ms ago
 Process:12720 ExecStartPre=/bin/echo Starting mail service (Postfix) (code=exited, status=0/SUCCESS)
 Process:12721 ExecStartPre=/usr/lib/postfix/systemd/config_postfix (code=exited, status=0/SUCCESS)
 Process:12722 ExecStartPre=/usr/lib/postfix/systemd/update_chroot (code=exited, status=0/SUCCESS)
 Process:12723 ExecStartPre=/usr/lib/postfix/systemd/update_postmaps (code=exited, status=0/SUCCESS)
 Process:12734 ExecStart=/usr/sbin/postfix start (code=exited, status=0/SUCCESS)
 Process:12812 ExecStartPost=/usr/lib/postfix/systemd/wait_qmgr 60 (code=exited, status=0/SUCCESS)
 Process:12815 ExecStartPost=/usr/lib/postfix/systemd/cond_slp register (code=exited, status=0/SUCCESS)
 Main PID:12809 (master)
 Tasks:11 (limit:4915)
 CGroup:/system.slice/postfix.service
 ├─12809 /usr/lib/postfix/bin//master -w
 ├─12810 pickup -l -t fifo -u
 ├─12811 qmgr -l -t fifo -u
 ├─12813 /bin/sh /usr/lib/postfix/bin//postfix-script flush
 ├─12822 /bin/bash /usr/lib/postfix/systemd/cond_slp register
 ├─12827 /bin/sh /usr/lib/postfix/bin//postfix-script flush
 ├─12828 /usr/sbin/postconf -c /etc/postfix -h multi_instance_directories
 ├─12829 sed s/,/ /
 ├─12830 /bin/bash /usr/lib/postfix/systemd/cond_slp register
 ├─12832 getent services
 └─12833 sed -ne /^smtp/Is/^smtp[[:space:]]\+\([0-9]\+\)\/tcp.*/\1/gp

Nov 21 09:57:07 tux postfix[12734]:See http://www.postfix.org/COMPATIBILITY_README.html for details
Nov 21 09:57:07 tux postfix[12734]:To disable backwards compatibility use "postconf compatibility_level=2" and "postfix reload"
Nov 21 09:57:07 tux postfix/postfix-script[12807]:starting the Postfix mail system
Nov 21 09:57:07 tux postfix/master[12809]:/etc/postfix/master.cf:line 74:using backwards-compatible default setting chroot=y
Nov 21 09:57:07 tux postfix/master[12809]:/etc/postfix/master.cf:line 80:using backwards-compatible default setting chroot=y
Nov 21 09:57:07 tux postfix/master[12809]:daemon started -- version 3.5.8, configuration /etc/postfix
Nov 21 09:57:07 tux postfix[12813]:Postfix is running with backwards-compatible default settings
Nov 21 09:57:07 tux postfix[12813]:See http://www.postfix.org/COMPATIBILITY_README.html for details
Nov 21 09:57:07 tux postfix[12813]:To disable backwards compatibility use "postconf compatibility_level=2" and "postfix reload"
Nov 21 09:57:07 tux systemd[1]:Started Postfix Mail Transport Agent.

Alles gut bis hier

Nun
echo "Hallo" | mailx Testadresse.de

systemctl status postfix.service
postfix.service - Postfix Mail Transport Agent
 Loaded:loaded (/usr/lib/systemd/system/postfix.service; enabled; vendor preset:enabled)
 Active:active (running) since Sat 2020-11-21 09:57:07 CET; 20min ago
 Process:12720 ExecStartPre=/bin/echo Starting mail service (Postfix) (code=exited, status=0/SUCCESS)
 Process:12721 ExecStartPre=/usr/lib/postfix/systemd/config_postfix (code=exited, status=0/SUCCESS)
 Process:12722 ExecStartPre=/usr/lib/postfix/systemd/update_chroot (code=exited, status=0/SUCCESS)
 Process:12723 ExecStartPre=/usr/lib/postfix/systemd/update_postmaps (code=exited, status=0/SUCCESS)
 Process:12734 ExecStart=/usr/sbin/postfix start (code=exited, status=0/SUCCESS)
 Process:12812 ExecStartPost=/usr/lib/postfix/systemd/wait_qmgr 60 (code=exited, status=0/SUCCESS)
 Process:12815 ExecStartPost=/usr/lib/postfix/systemd/cond_slp register (code=exited, status=0/SUCCESS)
 Main PID:12809 (master)
 Tasks:5 (limit:4915)
 CGroup:/system.slice/postfix.service
 ├─12809 /usr/lib/postfix/bin//master -w
 ├─12810 pickup -l -t fifo -u
 ├─12811 qmgr -l -t fifo -u
 ├─17069 cleanup -z -t unix -u
 └─17070 trivial-rewrite -n rewrite -t unix -u

Nov 21 10:15:33 tux postfix/master[12809]:warning:/usr/lib/postfix/bin//smtp:bad command startup -- throttling
Nov 21 10:16:33 tux postfix/smtp[16853]:fatal:bad boolean configuration:smtp_sasl_auth_enable = yes # Aktiviert SMTP AUTH f??r Postfix
Nov 21 10:16:34 tux postfix/master[12809]:warning:process /usr/lib/postfix/bin//smtp pid 16853 exit status 1
Nov 21 10:16:34 tux postfix/master[12809]:warning:/usr/lib/postfix/bin//smtp:bad command startup -- throttling
Nov 21 10:17:17 tux postfix/pickup[12810]:8EF64B0513:uid=1000 from=<lothar>
Nov 21 10:17:17 tux postfix/cleanup[17069]:8EF64B0513:message-id=<20201121091717.8EF64B0513@tux.xxxxxxx.ddnss.de>
Nov 21 10:17:17 tux postfix/qmgr[12811]:8EF64B0513:from=, size=449, nrcpt=1 (queue active)
Nov 21 10:17:34 tux postfix/smtp[17132]:fatal:bad boolean configuration:smtp_sasl_auth_enable = yes # Aktiviert SMTP AUTH f??r Postfix
Nov 21 10:17:35 tux postfix/master[12809]:warning:process /usr/lib/postfix/bin//smtp pid 17132 exit status 1
Nov 21 10:17:35 tux postfix/master[12809]:warning:/usr/lib/postfix/bin//smtp:bad command startup -- throttling

und 
 host smtp.1und1.de[212.227.15.167] said:530
 Authentication required (in reply to MAIL FROM command)

Was kann ich tun ????

Hier noch
tux:/etc/postfix # postconf -n
alias_maps = hash:/etc/aliases
biff = no
canonical_maps = hash:/etc/postfix/canonical
command_directory = /usr/sbin
content_filter = amavis:[127.0.0.1]:10024
daemon_directory = /usr/lib/postfix/bin/
data_directory = /var/lib/postfix
debug_peer_level = 2
debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5
defer_transports =
delay_warning_time = 1h
disable_dns_lookups = no
disable_mime_output_conversion = no
disable_vrfy_command = yes
html_directory = /usr/share/doc/packages/postfix-doc/html
inet_interfaces = localhost
inet_protocols = all
mail_owner = postfix
mail_spool_directory = /var/mail
mailbox_command = /usr/lib/dovecot/deliver
mailbox_size_limit = 0
mailbox_transport =
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains =
masquerade_exceptions = root
message_size_limit = 0
message_strip_characters = \0
mydestination = $myhostname,localhost.$mydomain,$mydomain
myhostname = tux.xxxxxxxx.ddnss.de
mynetworks = 192.168.178.0/24, 127.0.0.0/8
mynetworks_style = subnet
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/packages/postfix-doc/README_FILES
relay_clientcerts =
relay_domains = $mydestination hash:/etc/postfix/relay
relayhost = [smtp.1und1.de]:587
relocated_maps = hash:/etc/postfix/relocated
sample_directory = /usr/share/doc/packages/postfix-doc/samples
sender_canonical_maps = hash:/etc/postfix/sender_canonical
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
smtp_sasl_auth_enable = yes # Aktiviert SMTP AUTH für Postfix
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd # Gibt an wo Postfix die Zugangsdaten findet
smtp_sasl_security_options = # Durch setzen der leeren Option wird die PLAIN- und anonyme Authentifizierung aktivier
smtp_tls_note_starttls_offer = yes
smtp_use_tls = yes # Aktiviert TLS für Postfix
smtpd_banner = $myhostname ESMTP
smtpd_client_restrictions =
smtpd_delay_reject = yes
smtpd_helo_required = no
smtpd_helo_restrictions =
smtpd_recipient_restrictions = permit_mynetworks,reject_unauth_destination
smtpd_sasl_auth_enable = no
smtpd_sasl_local_domain = 192.168.178.20
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_tls_CAfile =
smtpd_tls_CApath =
smtpd_tls_ask_ccert = no
smtpd_tls_auth_only = no
smtpd_tls_cert_file =
smtpd_tls_key_file =
smtpd_tls_loglevel = 1
smtpd_tls_received_header = no
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = no
strict_8bitmime = no
strict_rfc821_envelopes = no
tls_random_source = dev:/dev/urandom
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550
virtual_alias_domains = hash:/etc/postfix/virtual
virtual_alias_maps = hash:/etc/postfix/virtual

Lothar

Postfix mit TLS

Lothar

Christian Boltz

Lothar

Stephan Hemeier

Lothar

Andreas Ernst

Andy Witte

Lothar

Andy Witte

Lothar

Andy Witte

Lothar

Lothar

Lothar

tags

participants (5)