ubuntuusers.de

Schönen guten Morgen,

ich habe ein ähnliches Problem:

Ich erhalte immer folgende Fehlermeldung im Log

Jan  7 10:11:12 server postfix/qmgr[5146]: 06E55F64FB9: from=<rene.andres@meinedomain.de>, size=355, nrcpt=1 (queue active)
Jan  7 10:11:12 server postfix/qmgr[5146]: B3576F64FC3: from=<rene.andres@meinedomain.de>, size=355, nrcpt=1 (queue active)
Jan  7 10:11:12 server postfix/smtp[5158]: SMTPS wrappermode (TCP port 465) requires setting "smtp_tls_wrappermode = yes", and "smtp_tls_security_level = encrypt" (or stronger)
Jan  7 10:11:12 server postfix/smtp[5160]: SMTPS wrappermode (TCP port 465) requires setting "smtp_tls_wrappermode = yes", and "smtp_tls_security_level = encrypt" (or stronger)
Jan  7 10:11:12 server postfix/smtp[5161]: SMTPS wrappermode (TCP port 465) requires setting "smtp_tls_wrappermode = yes", and "smtp_tls_security_level = encrypt" (or stronger)
Jan  7 10:11:12 server postfix/smtp[5162]: SMTPS wrappermode (TCP port 465) requires setting "smtp_tls_wrappermode = yes", and "smtp_tls_security_level = encrypt" (or stronger)
Jan  7 10:11:12 server postfix/smtp[5163]: SMTPS wrappermode (TCP port 465) requires setting "smtp_tls_wrappermode = yes", and "smtp_tls_security_level = encrypt" (or stronger)
Jan  7 10:11:15 server postfix/pickup[5145]: D6C27F650B1: uid=1000 from=<randres>
Jan  7 10:11:15 server postfix/cleanup[5169]: D6C27F650B1: message-id=<20170107091115.D6C27F650B1@meinserver>
Jan  7 10:11:15 server postfix/qmgr[5146]: D6C27F650B1: from=<rene.andres@meinedomain.de>, size=355, nrcpt=1 (queue active)
Jan  7 10:13:12 server postfix/smtp[5158]: AA6C8F65033: lost connection with smtp.strato.de[81.169.145.133] while receiving the initial server greeting

In der master.cf habe ich jedoch den wrappermode=yes gesetzt und security_level = encrypted

# ==========================================================================
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (no)    (never) (100)
# ==========================================================================
smtp      inet  n       -       y       -       -       smtpd
#smtp      inet  n       -       y       -       1       postscreen
#smtpd     pass  -       -       y       -       -       smtpd
#dnsblog   unix  -       -       y       -       0       dnsblog
#tlsproxy  unix  -       -       y       -       0       tlsproxy
#submission inet n       -       y       -       -       smtpd
#  -o syslog_name=postfix/submission
   -o smtpd_tls_security_level=encrypt
#  -o smtpd_sasl_auth_enable=yes
#  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_recipient_restrictions=
#  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
smtps     inet  n       -       -       -       -       smtpd
#  -o syslog_name=postfix/smtps
   -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes

Könnt ihr mir helfen?

Danke euch.

Wie sieht deine main.cf aus? In der master.cf ist smtp_tls_security_level = encrypt jedenfalls nicht fuer smpts auf 465 gesetzt.

Hallo,

mein main.cf sieht wie folgt aus:

# See /usr/share/postfix/main.cf.dist for a commented, more complete version


# Debian specific:  Specifying a file name will cause the first
# line of that file to be used as the name.  The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname

smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

readme_directory = no

# TLS parameters
smtpd_tls_cert_file = /etc/dovecot/dovecot.pem
smtpd_tls_key_file = /etc/dovecot/private/dovecot.pem
smtpd_use_tls = yes
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

# See /usr/share/doc/postfix/TLS_README.gz in the postfix-doc package for
# information on enabling SSL in the smtp client.

myhostname = server
alias_maps = hash:/etc/aliases
mydestination = server, localhost.localdomain, localhost, 
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
mailbox_size_limit = 51200000
message_size_limit = 50000000
recipient_delimiter =
home_mailbox = Maildir/
smtpd_sasl_auth_enable = yes
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/dovecot-auth
smtpd_sasl_authenticated_header = yes
smtpd_sasl_local_domain = $myhostname
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions = reject_unknown_sender_domain reject_unknown_recipient_domain reject_unauth_pipelining permit_mynetworks permit_sasl_a$
smtpd_sender_restrictions = reject_unknown_sender_domain
mailbox_command = /usr/lib/dovecot/deliver -c /etc/dovecot/conf.d/01-mail-stack-delivery.conf -m "${EXTENSION}"
smtp_use_tls = yes
smtpd_tls_security_level = encrypt
smtpd_tls_received_header = yes
smtpd_tls_mandatory_protocols = SSLv3, TLSv1
smtpd_tls_mandatory_ciphers = medium
smtpd_tls_auth_only = yes
tls_random_source = dev:/dev/urandom
virtual_alias_maps = hash:/etc/postfix/virtual
inet_interfaces = all
myorigin = /etc/mailname
relayhost = [smtp.strato.de]:465
inet_protocols = all

smtp_sasl_auth_enable = yes
# noplaintext weglassen, wenn Passwörter im Klartext übertragen werden müssen:
# (nicht empfohlen, nur wenn's anders nicht funktioniert)
smtp_sasl_security_options =  noanonymous
smtp_sasl_password_maps = hash:/etc/postfix/sasl_password

sender_canonical_maps = hash:/etc/postfix/sender_canonical
smtp_generic_maps = hash:/etc/postfix/generic

Wie setze ich den in master.cf den port auf 465? Muss der Port hinter encrypt?

Habe in der main.cf den Bezug aufgenommen, danach lief es einwandfrei

Iceman170283 schrieb:

Habe in der main.cf den Bezug aufgenommen, danach lief es einwandfrei

Bitte was?