ich habe postfix in verbindung mit dovecot (imap(s)) und sasl auth installiert und soweit konfiguriert das ich mich über console ohne probleme einloggen kann und auch emails versenden/empfangen kann.
der login über externe clients, egal welche (ob outlook oder theBat), klappt aber leider nicht.
könntet ihr mir da bitte helfen?
hier mal meine konfigs:
postfix/main.cf
Code: Select all
myorigin = $mydomain
smtpd_banner = $myhostname ESMTP
biff = no
append_dot_mydomain = no
# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h
readme_directory = no
myhostname = my-server.my-domain.com
mydomain = my-server.my-domain.com
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = $mydomain
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
recipient_delimiter = +
inet_interfaces = all
mydestination = localhost, $mydomain
inet_protocols = all
html_directory = /usr/share/doc/postfix/html
# Virtuelle Mailboxen
virtual_mailbox_domains = /etc/postfix/virtual_domains
virtual_mailbox_base = /var/mail/vhosts
virtual_mailbox_maps = hash:/etc/postfix/vmailbox
virtual_alias_maps = hash:/etc/postfix/virtual_alias
virtual_minimum_uid = 100
virtual_uid_maps = static:5000
virtual_gid_maps = static:5000
virtual_transport = dovecot
dovecot_destination_recipient_limit = 1
mailbox_size_limit = 0
smtpd_use_tls=yes
smtpd_tls_security_level = may
smtpd_tls_auth_only = no
# wenn login funzt, auf yes setzen
smtpd_tls_auth_only = no
smtpd_tls_cert_file=/etc/ssl/certs/my-domain.crt
smtpd_tls_key_file=/etc/ssl/private/my-domain.key
smtpd_tls_CAfile = /etc/ssl/certs/class3.pem
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtpd_tls_received_header = yes
tls_random_source = dev:/dev/urandom
# AuthentifizierungsMechanismus
smtpd_sasl_auth_enable = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain = $mydomain
smtpd_require_helo = yes
smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, \ reject_invalid_hostname, reject_unknown_client, reject_rbl_client sbl-xbl.spamhaus.org \ reject_unknown_sender_domain, reject_non_fqdn_sender
smtpd_recipient_restrictions = reject_non_fqdn_sender, reject_unknown_sender_domain, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_invalid_helo_hostname, reject_rbl_client zen.spamhaus.org
smtpd_recipient_limit = 250
broken_sasl_auth_clients = yes
Code: Select all
# 1.0.15: /etc/dovecot/dovecot.conf
log_path: /var/log/dovecot
info_log_path: /var/log/dovecot
log_timestamp: %Y-%m-%d %H:%M:%S
listen: [::]
ssl_listen: [::]
ssl_cert_file: /etc/ssl/certs/my-domain.crt
ssl_key_file: /etc/ssl/private/my-domain.key
disable_plaintext_auth: no
login_dir: /var/run/dovecot/login
login_executable: /usr/lib/dovecot/imap-login
mail_privileged_group: mail
mail_location: maildir:/var/mail/vhosts/%d/%n
auth default:
mechanisms: plain login ntlm digest-md5 cram-md5
passdb:
driver: passwd-file
args: /var/mail/vhosts/%d/shadow
userdb:
driver: passwd-file
args: /var/mail/vhosts/%d/passwd
userdb:
driver: passwd
userdb:
driver: static
args: uid=vmail gid=vmail home=/var/mail/vhosts/%d/%n
socket:
type: listen
client:
path: /var/spool/postfix/private/auth
mode: 432
group: vmail
master:
path: /var/run/dovecot/auth-master
mode: 384
user: vmail
group: vmail
bis jetzt hab ich port 25 (in+out), port 110/143/995 (in) in der firewall freigegeben. sollte reichen oder?
beim login über externe email clients werde ich zwar zum akzeptieren des zertifikats aufgefordert, anschließend aber immer und immer wieder zur eingabe des pw´s gefragt.
ich bedanke mich schonmal für eure hilfe!
lg
