1

Topic: smtp auth on 25 port

==== Required information ====
- iRedMail version last
- Debian
- MySQL
- Apache
- Manage mail accounts with iRedAdmin-Pro? No
====


How to configure postfix to work smtp-auth on port 25.
I use official postfix documentation. & now workinkg on TLS 587 port.
HELO command rejected: need fully-qualified hostname -  Thunderbird write on 25 port.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: smtp auth on 25 port

Hi,
check the postfix config file /etc/postfix/main.cf
under the line # HELO restriction  (about line 176 in a standard iredmail config)

smtpd_helo_restrictions =
    permit_mynetworks
    permit_sasl_authenticated
    check_helo_access pcre:/etc/postfix/helo_access.pcre
    reject_non_fqdn_helo_hostname
    reject_unknown_helo_hostnam

Check appropriate postfix  document for valid settings. ( http://www.postfix.org/SMTPD_ACCESS_README.html )
The active setting can also be checked with: postconf -n | grep smtpd_helo_restrictions

    smtpd_helo_restrictions = permit_mynetworks permit_sasl_authenticated check_helo_access pcre:/etc/postfix/helo_access.pcre reject_non_fqdn_helo_hostname reject_unknown_helo_hostname

I guess you can remove the line "reject_non_fqdn_helo_hostname" and restart postfix
NOTE: Since you have chosen to use port 25 for smtp auth, I gues you will also use ot for normal incomming e-mail NOT using smtp-auth. Changing the "smtpd_helo_restrictions" will then effect both types of connections.
Thats why it is a good reasson why using port 587 for SMTP-AUTH and port 25 for non-auth.
Just my personal opinion.
/regards

3

Re: smtp auth on 25 port

borodin wrote:

I use official postfix documentation. & now workinkg on TLS 587 port.

It's better build a full-featured mail server with iRedMail instead of doing it manually.