SMTP with and without SSL

**rr10111101** · Oct 20th 2019

Hello,

I changed my server to ssl. So I can send the mails over SSL.

But I need to send emails without ssl (plain), till I changed it everywhere. (the authentication)

Can someone tell me, what I need to change, to make it so. Pop3-Receiving works, only SMTP-sending is the problem.

I-Mscp is the newest.

Thanks.

**DrCarsonBeckett** · Oct 21st 2019

You can use the unsecured ports even if SSL is enabled if I remeber it correctly.

Just take a look at the panel which ports you need to select.

**rr10111101** · Oct 21st 2019

The problem is, that the scanners don't work anymore.

They said, that they didn't support the transaction. (authentification-error)

This happens also with older Email-Clients like Outlook 2007.

What I didn't understand, some clients can login with plain and some not.

**rr10111101** · Oct 21st 2019

This is my main.cf from postfix

Code

# General parameters
inet_protocols = ipv4
inet_interfaces = all
mynetworks_style = host
smtp_bind_address = .....
smtp_bind_address6 =
myhostname = .....
mydomain = .....
myorigin = $myhostname
smtpd_banner = $myhostname ESMTP i-MSCP 1.5.3 Managed
append_dot_mydomain = no
append_at_myorigin = yes
biff = no
recipient_delimiter = +
message_size_limit = 0
# Local delivery parameters
mydestination = $myhostname localhost.$mydomain localhost $mydomain
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
local_transport = local
local_destination_concurrency_limit = 2
local_destination_recipient_limit = 1
local_recipient_maps = proxy:unix:passwd.byname $alias_maps
mail_spool_directory = /var/mail
mailbox_size_limit = 0
# Virtual delivery parameters
virtual_mailbox_base = /var/mail/virtual
virtual_mailbox_limit = 0
virtual_mailbox_domains = hash:/etc/postfix/imscp/domains
virtual_mailbox_maps = hash:/etc/postfix/imscp/mailboxes
virtual_alias_domains =
virtual_alias_maps = hash:/etc/postfix/imscp/aliases
virtual_transport = dovecot
virtual_destination_concurrency_limit = 2
virtual_destination_recipient_limit = 1
virtual_minimum_uid = 999
virtual_uid_maps = static:999
virtual_gid_maps = static:8
# Relay parameters
relay_domains = hash:/etc/postfix/imscp/relay_domains
relay_recipient_maps =
relay_transport = relay
relayhost =
# Transport parameters
transport_maps = hash:/etc/postfix/imscp/transport
# SMTP restrictions
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_helo_hostname, reject_invalid_helo_hostname, permit
smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_sender, reject_unknown_sender_domain, permit
smtpd_recipient_restrictions = reject_non_fqdn_recipient, reject_unknown_recipient_domain, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_unlisted_recipient, permit
smtpd_data_restrictions = reject_multi_recipient_bounce, reject_unauth_pipelining
# i-MSCP responder parameters
imscp-arpl_destination_concurrency_limit = 2
imscp-arpl_destination_recipient_limit = 1
# Parameters added at run-time by i-MSCP or 3rd-party components
smtpd_sasl_type = dovecot
smtpd_sasl_authenticated_header = yes
broken_sasl_auth_clients = yes
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_auth_enable = yes
dovecot_destination_recipient_limit = 1
dovecot_destination_concurrency_limit = 2
smtp_tls_session_cache_database = btree:/var/lib/postfix/smtp_scache
smtpd_tls_session_cache_timeout = 3600s
smtpd_tls_security_level = may
smtp_tls_exclude_ciphers = aNULL, MD5
smtp_tls_loglevel = 0
smtpd_relay_restrictions =
compatibility_level = 2
smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
smtpd_tls_ciphers = high
smtpd_tls_session_cache_database = btree:/var/lib/postfix/smtpd_scache
smtp_tls_ciphers = high
smtpd_tls_loglevel = 0
smtp_tls_security_level = may
smtpd_tls_exclude_ciphers = aNULL, MD5
smtp_tls_protocols = !SSLv2, !SSLv3
smtpd_tls_cert_file = /etc/imscp/imscp_services.pem
smtpd_tls_received_header = yes
smtpd_tls_auth_only = no
smtpd_tls_key_file = /etc/imscp/imscp_services.pem
smtpd_tls_protocols = !SSLv2, !SSLv3
milter_default_action = tempfail
non_smtpd_milters = unix:/spamass/spamass.sock, unix:/clamav/clamav-milter.ctl, unix:/var/run/opendkim/opendkim.sock
smtpd_milters = unix:/spamass/spamass.sock, unix:/clamav/clamav-milter.ctl, unix:/var/run/opendkim/opendkim.sock
milter_connect_macros = i j {daemon_name} v {if_name} _
postscreen_blacklist_action = enforce
postscreen_dnsbl_sites = zen.spamhaus.org*3, bl.mailspike.net*2, b.barracudacentral.org*2, bl.spameatingmonkey.net, bl.spamcop.net, dnsbl.sorbs.net=127.0.0.[2;3;6;7;10], ix.dnsbl.manitu.net, bl.blocklist.de, list.dnswl.org=127.0.[0..255]
postscreen_dnsbl_action = enforce
postscreen_dnsbl_threshold = 2
postscreen_dnsbl_whitelist_threshold = -1
postscreen_access_list = permit_mynetworks, cidr:/etc/postfix/postscreen_access.cidr
postscreen_greet_action = enforce

Display More

**Nuxwin** · Oct 21st 2019

rr10111101

Please edit your last answer and suround your copy-past with bbcode tags: [code] bla bla bla [/code]

About your question: If you enable SSL for the services (which include the smtp server) through the i-MSCP installer (or while reconfiguration), you should still be able to authentication without SSL (not recommended). You need give us further details: How your client (using no ssl) are configured exactly?

**rr10111101** · Oct 21st 2019

Normally I use the domainname of the user.

Pop with 110 and SMTP without SSL 25

**Nuxwin** · Oct 21st 2019

Quote from rr10111101

Normally I use the domainname of the user.

Pop with 110 and SMTP without SSL 25

"and SMTP without SSL 25" mean nothing for me You need use the port 587 for the SMTP submissions, whenever the connexion is secured over TLS or not. You should be able to enable/disable TLS (STARTTLS), through your mail client. TLS is not mandatory ( smtpd_tls_security_level = maybe )

See also: http://www.postfix.org/postcon…#smtpd_tls_security_level

BTW: Not using TLS with latest i-MSCP is really not recommended are credential as sent plaintext...

**rr10111101** · Oct 21st 2019

could this help?

Code

/var/www/imscp/engine/setup/imscp-reconfigure --reconfigure

**Nuxwin** · Oct 21st 2019

Please, first disable the postscreen plugin to see if the problem remain after.

**rr10111101** · Oct 21st 2019

It's deinstalled. It's not better. I have problems now to connect.

SMTP with and without SSL

Share

Daily visitors