x
all questions login
General DNS & Domains Dyn Email Update Clients Dyn Developer

Hello Everybody!

I am trying to do what I thought would be a plain-vanilla, easy-as-pie, setup for Postfix.

I have a system running Ubuntu 10.0.4.1, that is running as my network's main file store, and because of this I want to get "logwatch" logs e-mailed to my regular http://charter.net e-mail account.

As noted in another posting - since I have a residential dynamic IP assigned, any attempts by me to set up something like a standard SENDMAIL setup is doomed to failure.

So, I set up a brand-new installation of Ubuntu 10.0.4.1, installed logwatch, and configured postfix using the instructions given HERE. Including all the steps to set up certs with open SSL. Nothing worked. So, I tried the workaround given by the poster HERE, by omitting the port number in the sasl_passwd file.

The result of all this is that I am getting authentication errors as if my certificates are bogus.

Viz: (from the log "mail info")

Oct  2 13:22:52 Storage3 postfix/smtp[15926]: certificate verification failed for http://outbound.mailhop.org[204.13.248.71]:2525: untrusted issuer /C=US/O=Equifax/OU=Equifax Secure Certificate Authority
Oct  2 13:22:52 Storage3 postfix/smtp[15926]: 5AF05121F63: to=<root@vgorilla.com>, relay=outbound.mailhop.org[204.13.248.71]:2525, delay=0.29, delays=0.07/0/0.2/0.02, dsn=5.0.0, status=bounced (host http://outbound.mailhop.org[204.13.248.71] said: 550 You must authenticate to use MailHop Outbound (in reply to MAIL FROM command))

I tried this both ways, with and without the port number.

Eventually, I ended up by just stopping postfix, and renaming http://main.cf so that it cannot restart automagically.

I am at a loss. Sendmail seemed to be easier. . . Is there a way to try this without SSL so that I can verify my basic config is correct before I start playing with the encryption stuff?

Here is an abstract of my mail log showing two attempts to get this beast working.

Viz:

====================================
First, start with sasl_password showing "outbound.mailhop.org" w/o "2525"
====================================

Oct  2 13:16:25 Storage3 postfix/postfix-script[15541]: starting the Postfix mail system
Oct  2 13:16:25 Storage3 postfix/master[15543]: daemon started -- version 2.7.0, configuration /etc/postfix
Oct  2 13:21:39 Storage3 postfix/postfix-script[15556]: the Postfix mail system is running: PID: 15543
Oct  2 13:22:43 Storage3 postfix/pickup[15544]: A242A12042A: uid=0 from=<root>
Oct  2 13:22:43 Storage3 postfix/cleanup[15924]: A242A12042A: message-id=<20101002172243.A242A12042A@Storage3.vgorilla.com>
Oct  2 13:22:43 Storage3 postfix/qmgr[15545]: A242A12042A: from=<root@vgorilla.com>, size=4017, nrcpt=1 (queue active)
Oct  2 13:22:52 Storage3 postfix/smtp[15926]: certificate verification failed for http://outbound.mailhop.org[204.13.248.71]:2525: untrusted issuer /C=US/O=Equifax/OU=Equifax Secure Certificate Authority
Oct  2 13:22:52 Storage3 postfix/smtp[15926]: A242A12042A: to=<root@vgorilla.com>, orig_to=<root>, relay=outbound.mailhop.org[204.13.248.71]:2525, delay=11, delays=2.3/0.34/8.2/0.02, dsn=5.0.0, status=bounced (host http://outbound.mailhop.org[204.13.248.71] said: 550 You must authenticate to use MailHop Outbound (in reply to MAIL FROM command))
Oct  2 13:22:52 Storage3 postfix/cleanup[15924]: 5AF05121F63: message-id=<20101002172252.5AF05121F63@Storage3.vgorilla.com>
Oct  2 13:22:52 Storage3 postfix/qmgr[15545]: 5AF05121F63: from=<>, size=6014, nrcpt=1 (queue active)
Oct  2 13:22:52 Storage3 postfix/bounce[15929]: A242A12042A: sender non-delivery notification: 5AF05121F63
Oct  2 13:22:52 Storage3 postfix/qmgr[15545]: A242A12042A: removed
Oct  2 13:22:52 Storage3 postfix/smtp[15926]: certificate verification failed for http://outbound.mailhop.org[204.13.248.71]:2525: untrusted issuer /C=US/O=Equifax/OU=Equifax Secure Certificate Authority
Oct  2 13:22:52 Storage3 postfix/smtp[15926]: 5AF05121F63: to=<root@vgorilla.com>, relay=outbound.mailhop.org[204.13.248.71]:2525, delay=0.29, delays=0.07/0/0.2/0.02, dsn=5.0.0, status=bounced (host http://outbound.mailhop.org[204.13.248.71] said: 550 You must authenticate to use MailHop Outbound (in reply to MAIL FROM command))
Oct  2 13:22:52 Storage3 postfix/qmgr[15545]: 5AF05121F63: removed
Oct  2 13:24:18 Storage3 postfix/postfix-script[15936]: stopping the Postfix mail system
Oct  2 13:24:18 Storage3 postfix/master[15543]: terminating on signal 15

===============================
Stop postfix - add ":2525" to sasl_passwd - re-postmap hash - restart and try again.
===============================


Oct  2 16:31:05 Storage3 postfix/postfix-script[16737]: starting the Postfix mail system
Oct  2 16:31:05 Storage3 postfix/master[16739]: daemon started -- version 2.7.0, configuration /etc/postfix
Oct  2 16:31:13 Storage3 postfix/postfix-script[16749]: the Postfix mail system is running: PID: 16739
Oct  2 16:31:26 Storage3 postfix/pickup[16740]: 43C77121F61: uid=0 from=<root>
Oct  2 16:31:26 Storage3 postfix/cleanup[17101]: 43C77121F61: message-id=<20101002203126.43C77121F61@Storage3.vgorilla.com>
Oct  2 16:31:26 Storage3 postfix/qmgr[16741]: 43C77121F61: from=<root@vgorilla.com>, size=4017, nrcpt=1 (queue active)
Oct  2 16:31:34 Storage3 postfix/smtp[17103]: certificate verification failed for http://outbound.mailhop.org[204.13.248.71]:2525: untrusted issuer /C=US/O=Equifax/OU=Equifax Secure Certificate Authority
Oct  2 16:31:34 Storage3 postfix/smtp[17103]: 43C77121F61: to=<root@vgorilla.com>, orig_to=<root>, relay=outbound.mailhop.org[204.13.248.71]:2525, delay=11, delays=2/0.13/8.4/0.02, dsn=5.0.0, status=bounced (host http://outbound.mailhop.org[204.13.248.71] said: 550 You must authenticate to use MailHop Outbound (in reply to MAIL FROM command))
Oct  2 16:31:35 Storage3 postfix/cleanup[17101]: 02D87121F62: message-id=<20101002203135.02D87121F62@Storage3.vgorilla.com>
Oct  2 16:31:35 Storage3 postfix/qmgr[16741]: 02D87121F62: from=<>, size=6014, nrcpt=1 (queue active)
Oct  2 16:31:35 Storage3 postfix/bounce[17119]: 43C77121F61: sender non-delivery notification: 02D87121F62
Oct  2 16:31:35 Storage3 postfix/qmgr[16741]: 43C77121F61: removed
Oct  2 16:31:35 Storage3 postfix/smtp[17103]: certificate verification failed for http://outbound.mailhop.org[204.13.248.72]:2525: untrusted issuer /C=US/O=Equifax/OU=Equifax Secure Certificate Authority
Oct  2 16:31:35 Storage3 postfix/smtp[17103]: 02D87121F62: to=<root@vgorilla.com>, relay=outbound.mailhop.org[204.13.248.72]:2525, delay=0.41, delays=0.07/0/0.32/0.02, dsn=5.0.0, status=bounced (host http://outbound.mailhop.org[204.13.248.72] said: 550 You must authenticate to use MailHop Outbound (in reply to MAIL FROM command))
Oct  2 16:31:35 Storage3 postfix/qmgr[16741]: 02D87121F62: removed

==========================
Postfix stopped and http://main.cf file renamed to prevent it from re-starting with bogus config.
==========================

Any help would be gratefully appreciated!

Thanks!

Jim (JR)

more ▼

asked Oct 02 at 09:04 PM

Jim 4\'s gravatar image

Jim 4
11 2 3 4

10|600 characters needed characters left

The question has been closed Dec 17 at 04:05 PM ago by RotBlitz for the following reason "Abandoned question".


2 answers:

Not really a help with postfix, I don't have personal experience. But why don't you simply send these logs to your "regular http://charter.net e-mail account"? And yes, why not with sendmail or similar tools. Any SMTP client would do.

more ▼

answered Oct 02 at 09:16 PM

RotBlitz\'s gravatar image

RotBlitz ♦
28k 4 14 94

10|600 characters needed characters left

Hmm.. Need more technical details.

Could you post the results of the following commands:

1)

ls -halF /etc/postfix

2)

grep -i tls /etc/postfix/main.cf

3)

grep -i relay /etc/postfix/main.cf

4)

cat /etc/postfix/transport

5)

grep -i smtp_sasl /etc/postfix/main.cf

I wouldn't expect any of the above commands to produce any confidential output. However, I would also want to see the contents of your sasl_passwd file, but replace your username and password with dummy/fictional values before you post it!

By the way, I agree with you that making it work without TLS (SSL) first is a reasonable starting point. When you have that working well, proceeding with TLS shouldn't be that much of a problem.

more ▼

answered Oct 02 at 09:45 PM

VikingTiger\'s gravatar image

VikingTiger ♦
11.6k 2 10 124

10|600 characters needed characters left

© 1998-2012  Dynamic Network Services Inc.  -  Legal Notices  -  Privacy Policy  -  Contacts     

Powered by AnswerHub - Enterprise Social Q&A