Postfix: Must issue a STARTTLS command first

Discussion in 'Server Operation' started by gabrix, Apr 24, 2008.

  1. gabrix

    gabrix New Member

    I run postfix tls and sasl with dovecot -pop3s on a debian lenny .Everything looks all right but this message is filling the mail.log:
    Code:
    Apr 24 23:11:28 mail postfix/smtpd[9693]: watchdog_pat: 0x808ddd8
    Apr 24 23:11:28 mail postfix/smtpd[9693]: vstream_fflush_some: fd 15 flush 24
    Apr 24 23:11:28 mail postfix/smtpd[9693]: vstream_buf_get_ready: fd 15 got 36
    Apr 24 23:11:28 mail postfix/smtpd[9693]: < www.gabrix.ath.cx[10.0.0.5]: MAIL FROM:<[email protected]>
    Apr 24 23:11:28 mail postfix/smtpd[9693]: > www.gabrix.ath.cx[10.0.0.5]: 530 5.7.0 Must issue a STARTTLS command first
    
    Looks like hosts in my lan miss to STARTTLS when they relay messages to postfix, i use nullmailer , also .

    And this is the postconf -n i have :
    Code:
    alias_database = hash:/etc/aliases
    alias_maps = hash:/etc/aliases
    command_directory = /usr/sbin
    config_directory = /etc/postfix
    daemon_directory = /usr/lib/postfix
    debug_peer_level = 6
    debug_peer_list = 127.0.0.0/8 , 10.0.0.0/24
    disable_dns_lookups = yes
    header_checks = regexp:/etc/postfix/header_checks
    home_mailbox = Maildir/
    html_directory = no
    inet_interfaces = all
    mail_owner = postfix
    mailbox_command = 
    mailq_path = /usr/bin/mailq
    manpage_directory = /usr/local/man
    mydestination = $mydomain , $myhostname , ns.$mydomain , argo.$mydomain , www.$mydomain , localhost.$mydomain , localhost
    mydomain = gabrix.ath.cx
    myhostname = mail.gabrix.ath.cx
    mynetworks = 10.0.0.0/24 , 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
    newaliases_path = /usr/bin/newaliases
    queue_directory = /var/spool/postfix
    readme_directory = no
    relayhost = [gmail-smtp.l.google.com]
    sample_directory = /etc/postfix
    sendmail_path = /usr/sbin/sendmail
    setgid_group = postdrop
    smtp_generic_maps = hash:/etc/postfix/generic
    smtp_sasl_auth_enable = yes
    smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
    smtp_sasl_security_options = noanonymous
    smtp_sasl_tls_security_options = $smtp_sasl_security_options
    smtp_tls_CAfile = /etc/postfix/ssl/cacert.pem
    smtp_tls_cert_file = /etc/postfix/ssl/cert.pem
    smtp_tls_key_file = /etc/postfix/ssl/key.pem
    smtp_tls_loglevel = 1
    smtp_tls_session_cache_database = btree:/var/run/smtp_tls_session_cache
    smtp_use_tls = yes
    smtpd_banner = mail.gabrix.ath.cx ESMTP (GNU/Linux)
    smtpd_enforce_tls = yes
    smtpd_helo_required = yes
    smtpd_sasl_auth_enable = yes
    smtpd_sasl_local_domain = $myhostname
    smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
    smtpd_tls_ask_ccert = yes
    smtpd_tls_cert_file = /etc/postfix/ssl/cert.pem
    smtpd_tls_key_file = /etc/postfix/ssl/key.pem
    smtpd_tls_received_header = yes
    smtpd_tls_session_cache_database = btree:/var/run/smtpd_tls_session_cache
    smtpd_use_tls = yes
    strict_rfc821_envelopes = yes
    tls_random_source = dev:/dev/urandom
    transport_maps = hash:/etc/postfix/transport
    unknown_local_recipient_reject_code = 550
    
    If you need more information to help me out just ask , thanks !!!!
     
    Last edited: Apr 24, 2008
  2. falko

    falko Super Moderator Howtoforge Staff

    Please try
    Code:
    postconf -e 'smtpd_tls_auth_only = no'
    /etc/init.d/postfix restart
     
  3. Rk_Raj

    Rk_Raj New Member

    must issue STARTTLS first

    hi friend i tried it by issuing

    postconf -e 'smtpd_tls_auth_only = no'

    but still I am receiving the same error
     

Share This Page