Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm following this postfix guide and im stuck at Authentication (SASL) point. I did all as i should without problem, but still i can login to smtp without any login/password. Im doing telnet 25 and i dont have to provide any password.

Whats more, my goal is to use SHA1 as password hash method in database. Im really confused right now. Im finding misleading posts that i should use TLS instead of SASL or use Dovecot etc.

What im doing wrong? I lost point of using SASL at all, dont understand this.

share|improve this question

I'm guessing you have the following in your

smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks, 
    warn_if_reject reject_non_fqdn_sender, reject_unknown_sender_domain,
    reject_unauth_pipelining, permit

If you want to test SASL try changing the above to this:

smtpd_sender_restrictions = permit_sasl_authenticated, reject

Also, I think the last "permit" should be a "reject" when you are done testing.

As to the TLS part, the guide you are following includes steps which enforce TLS before authentication.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.