Postfix No TLS?

Discussion in 'General' started by 40esp, May 14, 2009.

  1. 40esp

    40esp New Member

    I followed the opensuse 11.1 ispconfig 3 tutorial. I followed it to the bone, but, postfix does not want me to connect via SSL. I did a telnet localhost 25, and start tls and all the normal stuff is there. I can connect via plain login just fine.

    I even tried re generating the certificates to no satisfaction.

    Thanks for the help :)

    Basically my email client will just sit there, and its like the connection is timing out...

    This is what troubles me in my maillog:

    May 13 23:32:54 sv1 postfix/smtpd[15514]: warning: connect to private/tlsmgr: Connection refused
    May 13 23:32:54 sv1 postfix/smtpd[15514]: warning: problem talking to server private/tlsmgr: Connection refused
    May 13 23:32:54 sv1 postfix/smtpd[15514]: warning: no entropy for TLS key generation: disabling TLS support


    Here is my postconf:

    alias_maps = hash:/etc/aliases
    biff = no
    body_checks = regexp:/etc/postfix/body_checks
    broken_sasl_auth_clients = yes
    canonical_maps = hash:/etc/postfix/canonical
    command_directory = /usr/sbin
    config_directory = /etc/postfix
    content_filter = amavis:[127.0.0.1]:10024
    daemon_directory = /usr/lib/postfix
    data_directory = /var/lib/postfix
    debug_peer_level = 2
    defer_transports =
    delay_warning_time = 1h
    disable_dns_lookups = no
    disable_mime_output_conversion = no
    header_checks = regexp:/etc/postfix/header_checks
    html_directory = /usr/share/doc/packages/postfix-doc/html
    inet_interfaces = all
    inet_protocols = all
    mail_owner = postfix
    mail_spool_directory = /var/mail
    mailbox_command =
    mailbox_size_limit = 0
    mailbox_transport =
    mailq_path = /usr/bin/mailq
    manpage_directory = /usr/share/man
    masquerade_classes = envelope_sender, header_sender, header_recipient
    masquerade_domains =
    masquerade_exceptions = root
    message_size_limit = 0
    message_strip_characters = \0
    mime_header_checks = regexp:/etc/postfix/mime_header_checks
    mydestination = sv1.jaikobcreate.com, localhost, localhost.localdomain
    myhostname = sv1.jaikobcreate.com
    mynetworks = 127.0.0.0/8
    mynetworks_style = subnet
    nested_header_checks = regexp:/etc/postfix/nested_header_checks
    newaliases_path = /usr/bin/newaliases
    proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps
    queue_directory = /var/spool/postfix
    readme_directory = /usr/share/doc/packages/postfix-doc/README_FILES
    receive_override_options = no_address_mappings
    relay_domains = mysql:/etc/postfix/mysql-virtual_relaydomains.cf
    relayhost =
    relocated_maps = hash:/etc/postfix/relocated
    sample_directory = /usr/share/doc/packages/postfix-doc/samples
    sender_canonical_maps = hash:/etc/postfix/sender_canonical
    sendmail_path = /usr/sbin/sendmail
    setgid_group = maildrop
    smtp_sasl_auth_enable = no
    smtp_use_tls = no
    smtpd_client_restrictions = check_client_access mysql:/etc/postfix/mysql-virtual_client.cf
    smtpd_helo_required = no
    smtpd_helo_restrictions =
    smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, check_recipient_access mysql:/etc/postfix/mysql-virtual_recipient.cf, reject_unauth_destination
    smtpd_sasl_auth_enable = yes
    smtpd_sasl_authenticated_header = yes
    smtpd_sender_restrictions = check_sender_access mysql:/etc/postfix/mysql-virtual_sender.cf
    smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
    smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
    smtpd_tls_security_level = may
    smtpd_use_tls = yes
    strict_8bitmime = no
    strict_rfc821_envelopes = no
    transport_maps = proxy:mysql:/etc/postfix/mysql-virtual_transports.cf
    unknown_local_recipient_reject_code = 550
    virtual_alias_domains =
    virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, mysql:/etc/postfix/mysql-virtual_email2email.cf
    virtual_gid_maps = static:5000
    virtual_mailbox_base = /var/vmail
    virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf
    virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf
    virtual_transport = maildrop
    virtual_uid_maps = static:5000

    Also, when I uncomment tlsmgr in master.cf, it seems to timeout faster. Like bam cant connect instead of timing out.
     
    Last edited: May 14, 2009
  2. 40esp

    40esp New Member

    Anyone?

    My mail log is populated with:

    May 14 14:46:40 sv1 postfix/smtpd[4643]: warning: connect to private/tlsmgr: Connection refused
    May 14 14:46:40 sv1 postfix/smtpd[4643]: warning: problem talking to server private/tlsmgr: Connection refused
    May 14 14:46:41 sv1 postfix/smtpd[4643]: warning: connect to private/tlsmgr: Connection refused
    May 14 14:46:41 sv1 postfix/smtpd[4643]: warning: problem talking to server private/tlsmgr: Connection refused
    May 14 14:46:41 sv1 postfix/smtpd[4643]: warning: no entropy for TLS key generation: disabling TLS support

    I followed the ispconfig 3 opensuse 11.1 tutorial to the bone.

    This is my master.cf if it helps...

    netstat does not show a smtps...
     
    Last edited: May 14, 2009
  3. 40esp

    40esp New Member

    I don't know what it was, but I fixed it.

    I made these changes to master.cf:

    qmgr fifo n - n 300 1 qmgr
    #qmgr fifo n - n 300 1 oqmgr
    tlsmgr unix - - n 1000? 1 tlsmgr

    and did:

    chmod o= /etc/postfix/smtpd.key

    Works like a charm.
     

Share This Page