Re: Delete port 465 in master.cf

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

Re: Delete port 465 in master.cf

Charles Marcus
On 11/7/2008 3:59 AM, Josep M. wrote:

> I have Postfix running since some years ago and always ok, now when
> upgraded to Debian Lenny started giving to me these error messages when
> tested port 465
>
> Nov  7 09:15:57 140 postfix/smtpd[26674]: fatal: bad boolean
> configuration: smtpd_tls_auth_only =
> Nov  7 09:15:58 140 postfix/master[11065]: warning: process
> /usr/lib/postfix/smtpd pid 26674 exit status 1
> Nov  7 09:15:58 140 postfix/master[11065]: warning:
> /usr/lib/postfix/smtpd: bad command startup -- throttling

<snip>

> #smtps     inet  n       -       n       -       -       smtpd  -o
> smtpd_tls_wrappermode=yes -o smtp
> d_sasl_auth_enable=yes -o smtpd_tls_auth_only = yes  -o
> smtpd_client_restrictions=permit_sasl_authen
> ticated,reject

I think you're getting this error because spaces are not allowed in
master.cf config options, so, you could continue to support port 465 if
you changed:

-o smtpd_tls_auth_only = yes

to

-o smtpd_tls_auth_only=yes

But yes, use of 465/SMTPS is deprecated in favor of submission port
(587+TLS), and only needed if you need/want to support older clients
that do not support TLS (old versions of Outlook, Outlook Express, and
maybe some older mobile/phone clients)...

--

Best regards,

Charles
Reply | Threaded
Open this post in threaded view
|

Re: Delete port 465 in master.cf

Noel Jones-2
Josep M. wrote:

> Hello.
>
> I have Postfix running since some years ago and always ok, now when
> upgraded to Debian Lenny started giving to me these error messages when
> tested port 465
>
> Nov  7 09:15:57 140 postfix/smtpd[26674]: fatal: bad boolean
> configuration: smtpd_tls_auth_only =
> Nov  7 09:15:58 140 postfix/master[11065]: warning: process
> /usr/lib/postfix/smtpd pid 26674 exit status 1
> Nov  7 09:15:58 140 postfix/master[11065]: warning:
> /usr/lib/postfix/smtpd: bad command startup -- throttling
>
> I  was reading that port 465 is not supported in new versions of
> Postfix,

Not true.  Postfix has never supported *sending to* smtps, but
has always supported incoming connections with the
smtpd_tls_wrappermode directive (well, always since TLS was
supported).  This is unlikely to change.

> so I will use port 587 as I was doing, I would like ask if
> these line in master.cf config  file can be deleted without broke
> nothing. I tested and apprently is ok.
>
>
> #smtps     inet  n       -       n       -       -       smtpd  -o
> smtpd_tls_wrappermode=yes -o smtp
> d_sasl_auth_enable=yes -o smtpd_tls_auth_only = yes  -o
> smtpd_client_restrictions=permit_sasl_authen
> ticated,reject

You can't have spaces in -o options in master.cf.  Remove the
spaces around the equal sign and the above should work fine.

It's good to offer your clients both the deprecated smtps port
465 and the standard submission port 587 so they can connect
regardless of what their mail client supports.

>
>
> Thanks
> Josep
>

--
Noel Jones