Less distraction.

This commit is contained in:
Zhang Huangbin 2018-07-04 10:23:24 +02:00
parent 48ccac9e78
commit 01dfd1741b
2 changed files with 18 additions and 45 deletions

View File

@ -13,34 +13,20 @@ below to enable it.
[Allow internal network devices to send email with insecure connection](./additional.smtp.port.html)
* Disable postscreen service first: [Disable postscreen service](./enable.postscreen.html#disable-postscreen-service).
* Find comment out settings in Postfix config file `/etc/postfix/main.cf`
(Linux/OpenBSD) or `/usr/local/etc/postfix/main.cf` (FreeBSD):
* Enable smtp authentication by uncommenting settings below in Postfix config
file `/etc/postfix/main.cf` (Linux/OpenBSD) or
`/usr/local/etc/postfix/main.cf` (FreeBSD):
```
#
# Enable SASL authentication on port 25 and force TLS-encrypted SASL authentication.
# WARNING: NOT RECOMMENDED to enable smtp auth on port 25, all end users should
# be forced to submit email through port 587 instead.
#
#smtpd_sasl_auth_enable = yes
#smtpd_tls_auth_only = yes
#smtpd_sasl_security_options = noanonymous
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_tls_auth_only = yes
```
* Restart or reload Postfix service.
!!! note
With `smtpd_tls_auth_only = yes`, it requires clients to enable STARTTLS
for secure connection, if you don't want this for some reason, please
comment it out.
* uncomment lines below:
```
smtpd_sasl_auth_enable = yes
smtpd_tls_auth_only = yes
smtpd_sasl_security_options = noanonymous
```
* Restart or reload Postfix service.
That's all.

View File

@ -33,37 +33,24 @@ connection, you may try another tutorial instead:
</div>
<ul>
<li>Disable postscreen service first: <a href="./enable.postscreen.html#disable-postscreen-service">Disable postscreen service</a>.</li>
<li>Find comment out settings in Postfix config file <code>/etc/postfix/main.cf</code>
(Linux/OpenBSD) or <code>/usr/local/etc/postfix/main.cf</code> (FreeBSD):</li>
</ul>
<pre><code>#
# Enable SASL authentication on port 25 and force TLS-encrypted SASL authentication.
# WARNING: NOT RECOMMENDED to enable smtp auth on port 25, all end users should
# be forced to submit email through port 587 instead.
#
#smtpd_sasl_auth_enable = yes
#smtpd_tls_auth_only = yes
#smtpd_sasl_security_options = noanonymous
</code></pre>
<div class="admonition note">
<p class="admonition-title">Note</p>
<p>With <code>smtpd_tls_auth_only = yes</code>, it requires clients to enable STARTTLS
for secure connection, if you don't want this for some reason, please
comment it out.</p>
</div>
<ul>
<li>uncomment lines below:</li>
<li>Enable smtp authentication by uncommenting settings below in Postfix config
file <code>/etc/postfix/main.cf</code> (Linux/OpenBSD) or
<code>/usr/local/etc/postfix/main.cf</code> (FreeBSD):</li>
</ul>
<pre><code>smtpd_sasl_auth_enable = yes
smtpd_tls_auth_only = yes
smtpd_sasl_security_options = noanonymous
smtpd_tls_auth_only = yes
</code></pre>
<ul>
<li>Restart or reload Postfix service.</li>
</ul>
<p>That's all.</p><div class="footer">
<div class="admonition note">
<p class="admonition-title">Note</p>
<p>With <code>smtpd_tls_auth_only = yes</code>, it requires clients to enable STARTTLS
for secure connection, if you don't want this for some reason, please
comment it out.</p>
</div><div class="footer">
<p style="text-align: center; color: grey;">All documents are available in <a href="https://bitbucket.org/zhb/iredmail-docs/src">BitBucket repository</a>, and published under <a href="http://creativecommons.org/licenses/by-nd/3.0/us/" target="_blank">Creative Commons</a> license. You can <a href="https://bitbucket.org/zhb/iredmail-docs/get/tip.tar.bz2">download the latest version</a> for offline reading. If you found something wrong, please do <a href="https://www.iredmail.org/contact.html">contact us</a> to fix it.</p>
</div>
<!-- Global site tag (gtag.js) - Google Analytics -->