Arch Linux

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#1741 - Postfix requires gsasl support or cyrus

Attached to Project: Arch Linux
Opened by Justin Smithies (justinsmithies) - Friday, 05 November 2004, 19:26 GMT
Last edited by Dale Blount (dale) - Friday, 05 November 2004, 19:31 GMT
Task Type Feature Request
Category Packages: Extra
Status Closed
Assigned To Dale Blount (dale)
Architecture not specified
Severity Low
Priority Normal
Reported Version 0.7 Wombat
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Please can you implement GSASL support in POSTFIX or CYRUS-SASL for the next release of POSTFIX...

An email server without SASL is very vulnerable....
This task depends upon

Closed by  Jürgen Hötzel (juergen)
Tuesday, 03 January 2006, 00:07 GMT
Reason for closing:  Implemented
Additional comments about closing:  Good. Just switched a mailserver to postifix@arch using TLS and SASL authentication via PAM/LDAP.

Jürgen
Comment by Dale Blount (dale) - Friday, 05 November 2004, 19:34 GMT
Postfix is not vulnerable if setup correctly, it is a closed relay by default (defaults to relaying for connected networks ONLY). It is however, a valid feature request which I will look into implementing (assuming it doesn't compromise code security).
Comment by pixel (pixel) - Sunday, 15 May 2005, 21:43 GMT
It would be very nice to have postfix+sasl+tls package provided by the official repo.
Dale, I hope you still think about including that.
Comment by Jürgen Hötzel (juergen) - Wednesday, 19 October 2005, 14:09 GMT
I strongly support this. Compiling postfix with sasl-support will not break anything:
SMTP-Authentication is not enabled by default. You need to enable it in main.cf:

smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated reject_unauth_destination

I use the latest 2.1-release on my server.

Patch attached.

Jürgen
(application/octet-stream)    PKGBUILD.patch (1.6 KiB)
Comment by Leonard Ritter (paniq) - Monday, 24 October 2005, 17:01 GMT
i support that one as well, and i require mysql support for a proper management of virtual email addresses.. why not pull that one in as well?

here's a great tutorial (for debian tho, but who cares) that would be much easier if sasl/tls/mysql support was added to postfix and cyrus-sasl permanently:

http://workaround.org/articles/ispmail-sarge

to follow this tutorial, i had to build two manual PKGBUILD's.
Comment by Dale Blount (dale) - Monday, 19 December 2005, 19:07 GMT
sasl and tls has been added to postfix 2.2.7-1. Please test and report if it works for you.

Loading...