[prev in list] [next in list] [prev in thread] [next in thread] 

List:       courier-users
Subject:    Re: [courier-users] [Solved] Unable to Mail Through ATT Uverse ISP
From:       John Vasko <john () vaskos ! com>
Date:       2012-07-21 23:23:13
Message-ID: 500B39E1.50502 () vaskos ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Sam Varshavchik, thanks for the help!

Sending encrypted mail is now working through ATT Uverse with stunnel with courier. \
My esmtpauthinfo file was missing the port as parameter.

At:
http://www.courier-mta.org/courier.html

Documentation does not show the ,port or /SECURITY= options when looking at:
esmtpauthclient
This configuration file configures ESMTP authentication for the ESMTP client. This is \
a text file of zero or more lines that contain the following fields: relay userid \
password

The description of esmtproutes is described more explicitly:
esmtproutes
This file is used by the ESMTP module, and it contains one or more lines in the \
following form: domain:relay[,port][/SECURITY=STARTTLS][/SECURITY=NONE]

More info and setup on FreeBSD 9.0:

> telnet smtp.att.yahoo.com 587
Trying 98.138.31.74...
Connected to smtp1.sbc.mail.am0.yahoodns.net.
Escape character is '^]'.
220 smtp101.sbc.mail.ne1.yahoo.com ESMTP
ehlo localhost
250-smtp101.sbc.mail.ne1.yahoo.com
250-AUTH LOGIN PLAIN XYMCOOKIE
250-PIPELINING
250-SIZE 41697280
250 8BITMIME
quit


== Courier Send Mail Through ISP ==
cd /usr/local/etc/courier/

# ATTUverse Auth Working (Unencrypted?)
vi esmtpauthclient
  smtp.att.yahoo.com,587 USER@sbcglobal.net PASSWORD
vi esmtproutes
  :smtp.att.yahoo.com,587

# ATTUverse Auth Working (Encrypted through stunnel)
esmtpauthclient
  LOCALHOST.EXAMPLE.COM,2525 USER@sbcglobal.net PASSWORD
esmtproutes
  :LOCALHOST.EXAMPLE.COM,2525

== Stunnel Conf ==
vi /etc/rc.conf
  stunnel_enable="YES"
cd /usr/local/etc/rc.d/
vi stunnel
  : ${stunnel_enable="YES"}
  : ${stunnel_config="/usr/local/etc/stunnel/${name}.conf"}
  : ${stunnel_pidfile="/var/run/stunnel/${name}.pid"}
cd /usr/local/etc/stunnel
cp stunnel.conf-sample stunnel.conf
vi stunnel.conf
  chroot = /var/run/stunnel
  setuid = stunnel
  setgid = stunnel
  pid = /stunnel.pid
  options = NO_SSLv2
  [attsmtp]
  client = yes
  verify = 0
  accept = 2525
  connect = smtp.att.yahoo.com:465
  delay = yes
cd /var/run
mkdir stunnel
chown stunnel:stunnel stunnel
service stunnel start
telnet localhost 2525
ehlo localhost

== Make Stunnel LISTEN on 2525 on restart (Requires Stunnel 4.53) ==
Run the default supfile and update all ports (took me like 30 min):
  csup -g -L 2 -h cvsup5.us.FreeBSD.org /usr/share/examples/cvsup/ports-supfile
pkgtools was used for upgrading:
  portsdb -Fu
  portupgrade stunnel


On 07/20/2012 02:01 PM, John Vasko wrote:
> The misplaced colon was a typo in my email. The configuration files 
> are as they should be on the server, and outgoing email still isn't 
> working. I hope that didn't ruin my chances in getting help with my issue.
> 
> I tried some variations of esmtproutes (and corresponding changes in 
> esmtpauthclient when trying with gmail) but I get the same 
> "authentication required" error. See Below:
> 
> esmtproutes
> > smtp.att.yahoo.com,587
> > > mail gets bounced with auth required
> 
> > smtp.att.yahoo.com,587/SECURITY=STARTTLS
> > > mail gets bounced with unable to set minimum security
> 
> > smtp.att.yahoo.com,465/SECURITY=SSL3
> > > mail gets stuck in mailq (SSL3 was just a guess and probably an 
> invalid option)
> 
> > smtp.gmail.com,587
> > > mail gets bounced with auth required
> 
> UNDELIVERABLE MAIL
> Your message to the following recipients cannot be delivered:
> <john@EXAMPLE.COM>:
> gmail-smtp-msa.l.google.com [173.194.79.109]:
> > > > MAIL FROM:<john@vaskos.com> BODY=7BIT SIZE=795
> <<< 530-5.5.1 Authentication Required. Learn more at
> <<< 530 5.5.1 
> http://support.google.com/mail/bin/answer.py?answer=14257 
> jv6sm4551948pbc.40
> 
> Please advise.
> 
> More Info:
> 
> The original document that helped me get emails working on my other 
> non-courier machine was:
> http://qiaoyang.blogspot.com/2007/08/sendmail-auth-ssl-tunnel-att-yahoo.html
> With the exception that I had the following authinfo:
> > AuthInfo: "U:root" "I:john@sbcglobal.net" "P:xxxxxx" "M:LOGIN PLAIN"|
> Instead of:
> > AuthInfo: "U:myname@sbcglobal.net" "I:myname@sbcglobal.net" 
> "P:xxxxxx" "M:LOGIN PLAIN"|
> 
> On 07/20/2012 04:13 AM, Sam Varshavchik wrote:
> > John Vasko writes:
> > 
> > > On FreeBSD 9.0 trying to send mail from courier's cone I get bounced 
> > > messages with:
> > > UNDELIVERABLE MAIL
> > > Your message to the following recipients cannot be delivered:
> > > <USER@gmail.com>:
> > > smtp1.sbc.mail.am0.yahoodns.net [67.195.15.66]:
> > > > > > MAIL FROM:<john@EXAMPLE.COM> BODY=7BIT SIZE=795
> > > <<< 530 authentication required - for help go to 
> > > http://help.yahoo.com/sbc/dsl/mail/pop/pop-11.html
> > > 
> > > My relevant configuration is below.
> > > 
> > > Please advise.
> > > 
> > > -------------
> > > 
> > > /usr/local/etc/courier/esmtproutes
> > > smtp.att.yahoo.com,587
> > 
> > That should be
> > 
> > > smtp.att.yahoo.com,587
> > 
> > > /usr/local/etc/courier/esmtpauthclient
> > > > smtp.att.yahoo.com john@sbcglobal.net PASSWORD
> > 
> > And that should be
> > 
> > smtp.att.yahoo.com john@sbcglobal.net PASSWORD
> 


[Attachment #5 (text/html)]

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body text="#000000" bgcolor="#FFFFFF">
    <div class="moz-cite-prefix">
      <pre>Sam Varshavchik, thanks for the help!

Sending encrypted mail is now working through ATT Uverse with stunnel with courier. \
My esmtpauthinfo file was missing the port as parameter.

At:
<a class="moz-txt-link-freetext" \
href="http://www.courier-mta.org/courier.html">http://www.courier-mta.org/courier.html</a>


Documentation does not show the ,port or /SECURITY= options when looking at:
esmtpauthclient
This configuration file configures ESMTP authentication for the ESMTP client. This is \
a text file of zero or more lines that contain the following fields: relay userid \
password

The description of esmtproutes is described more explicitly:
esmtproutes
This file is used by the ESMTP module, and it contains one or more lines in the \
following form: domain:relay[,port][/SECURITY=STARTTLS][/SECURITY=NONE]

More info and setup on FreeBSD 9.0:

&gt; telnet smtp.att.yahoo.com 587
Trying 98.138.31.74...
Connected to smtp1.sbc.mail.am0.yahoodns.net.
Escape character is '^]'.
220 smtp101.sbc.mail.ne1.yahoo.com ESMTP
ehlo localhost
250-smtp101.sbc.mail.ne1.yahoo.com
250-AUTH LOGIN PLAIN XYMCOOKIE
250-PIPELINING
250-SIZE 41697280
250 8BITMIME
quit


== Courier Send Mail Through ISP ==
cd /usr/local/etc/courier/

# ATTUverse Auth Working (Unencrypted?)
vi esmtpauthclient
 smtp.att.yahoo.com,587 <a class="moz-txt-link-abbreviated" \
href="mailto:USER@sbcglobal.net">USER@sbcglobal.net</a> PASSWORD vi esmtproutes
 :smtp.att.yahoo.com,587

# ATTUverse Auth Working (Encrypted through stunnel)
esmtpauthclient
 LOCALHOST.EXAMPLE.COM,2525 <a class="moz-txt-link-abbreviated" \
href="mailto:USER@sbcglobal.net">USER@sbcglobal.net</a> PASSWORD esmtproutes
 :LOCALHOST.EXAMPLE.COM,2525

== Stunnel Conf ==
vi /etc/rc.conf
 stunnel_enable="YES"
cd /usr/local/etc/rc.d/
vi stunnel
 : ${stunnel_enable="YES"}
 : ${stunnel_config="/usr/local/etc/stunnel/${name}.conf"}
 : ${stunnel_pidfile="/var/run/stunnel/${name}.pid"}
cd /usr/local/etc/stunnel
cp stunnel.conf-sample stunnel.conf
vi stunnel.conf
 chroot = /var/run/stunnel
 setuid = stunnel
 setgid = stunnel
 pid = /stunnel.pid
 options = NO_SSLv2
 [attsmtp]
 client = yes
 verify = 0
 accept = 2525
 connect = smtp.att.yahoo.com:465
 delay = yes
cd /var/run
mkdir stunnel
chown stunnel:stunnel stunnel
service stunnel start
telnet localhost 2525
ehlo localhost

== Make Stunnel LISTEN on 2525 on restart (Requires Stunnel 4.53) ==
Run the default supfile and update all ports (took me like 30 min):
 csup -g -L 2 -h cvsup5.us.FreeBSD.org /usr/share/examples/cvsup/ports-supfile
pkgtools was used for upgrading:
 portsdb -Fu
 portupgrade stunnel
</pre>
      <br>
      On 07/20/2012 02:01 PM, John Vasko wrote:<br>
    </div>
    <blockquote cite="mid:5009C71D.2000302@gmail.com" type="cite">
      <meta content="text/html; charset=ISO-8859-1"
        http-equiv="Content-Type">
      <div class="moz-cite-prefix">The misplaced colon was a typo in my
        email. The configuration files are as they should be on the
        server, and outgoing email still isn't working. I hope that
        didn't ruin my chances in getting help with my issue.<br>
        <br>
        I tried some variations of esmtproutes (and corresponding
        changes in esmtpauthclient when trying with gmail) but I get the
        same "authentication required" error. See Below:<br>
        <br>
        esmtproutes<br>
        &nbsp;:smtp.att.yahoo.com,587<br>
        &nbsp;&gt;&gt; mail gets bounced with auth required<br>
        <br>
        &nbsp;:smtp.att.yahoo.com,587/SECURITY=STARTTLS<br>
        &nbsp;&gt;&gt; mail gets bounced with unable to set minimum security<br>
        <br>
        &nbsp;:smtp.att.yahoo.com,465/SECURITY=SSL3<br>
        &nbsp;&gt;&gt; mail gets stuck in mailq (SSL3 was just a guess and
        probably an invalid option)<br>
        <br>
        &nbsp;:smtp.gmail.com,587<br>
        &nbsp;&gt;&gt; mail gets bounced with auth required<br>
        <br>
        UNDELIVERABLE MAIL<br>
        Your message to the following recipients cannot be delivered:<br>
        <a moz-do-not-send="true" class="moz-txt-link-rfc2396E"
          href="mailto:john@EXAMPLE.COM">&lt;john@EXAMPLE.COM&gt;</a>:<br>
        &nbsp;&nbsp;&nbsp; gmail-smtp-msa.l.google.com [173.194.79.109]:<br>
        &gt;&gt;&gt; MAIL FROM:<a moz-do-not-send="true"
          class="moz-txt-link-rfc2396E" \
href="mailto:john@vaskos.com">&lt;john@vaskos.com&gt;</a>  BODY=7BIT SIZE=795<br>
        &lt;&lt;&lt; 530-5.5.1 Authentication Required. Learn more at<br>
        &lt;&lt;&lt; 530 5.5.1 <a moz-do-not-send="true"
          class="moz-txt-link-freetext"
          href="http://support.google.com/mail/bin/answer.py?answer=14257">http://support.google.com/mail/bin/answer.py?answer=14257</a>
  jv6sm4551948pbc.40<br>
        <br>
        Please advise.<br>
        <br>
        More Info:<br>
        <br>
        The original document that helped me get emails working on my
        other non-courier machine was:<br>
        <a moz-do-not-send="true" class="moz-txt-link-freetext"
href="http://qiaoyang.blogspot.com/2007/08/sendmail-auth-ssl-tunnel-att-yahoo.html">ht \
tp://qiaoyang.blogspot.com/2007/08/sendmail-auth-ssl-tunnel-att-yahoo.html</a><br>  \
With the exception that I had the following authinfo:<br>  <code>AuthInfo: "U:root" \
<a moz-do-not-send="true"  class="moz-txt-link-rfc2396E"
            href="mailto:I:john@sbcglobal.net">"I:john@sbcglobal.net"</a>
          "P:xxxxxx" "M:LOGIN PLAIN"</code><br>
        Instead of:<br>
        <code>AuthInfo: <a moz-do-not-send="true"
            class="moz-txt-link-rfc2396E"
            href="mailto:U:myname@sbcglobal.net">"U:myname@sbcglobal.net"</a>
          <a moz-do-not-send="true" class="moz-txt-link-rfc2396E"
            href="mailto:I:myname@sbcglobal.net">"I:myname@sbcglobal.net"</a>
          "P:xxxxxx" "M:LOGIN PLAIN"</code><br>
        <br>
        On 07/20/2012 04:13 AM, Sam Varshavchik wrote:<br>
      </div>
      <blockquote
        cite="mid:cone.1342782806.250628.30510.1000@monster.email-scan.com"
        type="cite">John Vasko writes: <br>
        <br>
        <blockquote type="cite">On FreeBSD 9.0 trying to send mail from
          courier's cone I get bounced messages with: <br>
          UNDELIVERABLE MAIL <br>
          Your message to the following recipients cannot be delivered:
          <br>
          <a moz-do-not-send="true" class="moz-txt-link-rfc2396E"
            href="mailto:USER@gmail.com">&lt;USER@gmail.com&gt;</a>: <br>
          &nbsp;&nbsp;&nbsp;&nbsp; smtp1.sbc.mail.am0.yahoodns.net [67.195.15.66]: \
<br>  &gt;&gt;&gt; MAIL FROM:<a moz-do-not-send="true"
            class="moz-txt-link-rfc2396E" \
href="mailto:john@EXAMPLE.COM">&lt;john@EXAMPLE.COM&gt;</a>  BODY=7BIT SIZE=795 <br>
          &lt;&lt;&lt; 530 authentication required - for help go to <a
            moz-do-not-send="true" class="moz-txt-link-freetext"
            href="http://help.yahoo.com/sbc/dsl/mail/pop/pop-11.html">http://help.yahoo.com/sbc/dsl/mail/pop/pop-11.html</a>
  <br>
          <br>
          My relevant configuration is below. <br>
          <br>
          Please advise. <br>
          <br>
          ------------- <br>
          <br>
          /usr/local/etc/courier/esmtproutes <br>
          &nbsp; smtp.att.yahoo.com,587 <br>
        </blockquote>
        <br>
        That should be <br>
        <br>
        :smtp.att.yahoo.com,587 <br>
        <br>
        <blockquote type="cite">/usr/local/etc/courier/esmtpauthclient <br>
          &nbsp; :smtp.att.yahoo.com <a moz-do-not-send="true"
            class="moz-txt-link-abbreviated"
            href="mailto:john@sbcglobal.net">john@sbcglobal.net</a>
          PASSWORD <br>
        </blockquote>
        <br>
        And that should be <br>
        <br>
        smtp.att.yahoo.com <a moz-do-not-send="true"
          class="moz-txt-link-abbreviated"
          href="mailto:john@sbcglobal.net">john@sbcglobal.net</a>
        PASSWORD<br>
      </blockquote>
      <br>
    </blockquote>
    <br>
  </body>
</html>



------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/

_______________________________________________
courier-users mailing list
courier-users@lists.sourceforge.net
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic