Hi, I am new to Posfix, and to Linux. Please presume nothing!!
I have set up a new server, using SUSE Leap 42.1. Its running, and running Postfix and Dovecot. Mail works fine from inside. I’m currently using plain authentication while I get this sorted.
i have followed this procedure to install the TLS, create the certs etc http://xmodulo.com/secure-mail-server-using-encryption.html
What I wish to do is to allow external clients to use the mail server - currenlty receive is ok, but send is relay denied. Also I’d like to secure the server so passwords are not sent in clear.
The current error message is “postfix/smtpd[16451]: warning: No server certs available. TLS won’t be enabled” I have checked the settings in postfix main.cf, and the directories are correct and the certs exist in those directories. Here is a copy of my running postconf -n;
postconf -n
alias_maps =
biff = no
broken_sasl_auth_clients = yes
canonical_maps =
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter =
daemon_directory = /usr/lib/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5
defer_transports =
delay_warning_time = 0h
disable_dns_lookups = no
disable_mime_output_conversion = no
disable_vrfy_command = yes
home_mailbox = Maildir/
html_directory = /usr/share/doc/packages/postfix-doc/html
inet_interfaces = all
inet_protocols = all
mail_owner = postfix
mail_spool_directory = /var/mail
mailbox_command =
mailbox_size_limit = 0
mailbox_transport =
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains =
masquerade_exceptions =
message_size_limit = 0
message_strip_characters =
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
mydomain = neptunes-gear.com
mynetworks = 192.168.1.0/24, 127.0.0.0/8, 60.234.78.98/32, 202.74.226.36/32
mynetworks_style = subnet
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/packages/postfix-doc/README_FILES
relay_domains = $mydestination, hash:/etc/postfix/relay
relayhost =
relocated_maps =
sample_directory = /usr/share/doc/packages/postfix-doc/samples
sender_canonical_maps =
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
smtp_sasl_password_maps =
smtp_tls_cert_file = /etc/ssl/certs/postfixcert.pem
smtp_tls_key_file = /etc/ssl/private/postfixkey.pem
smtpd_banner = $myhostname ESMTP
smtpd_client_restrictions =
smtpd_delay_reject = yes
smtpd_helo_required = yes
smtpd_helo_restrictions =
smtpd_relay_restrictions = permit_sasl_authenticated, permit_mynetworks, check_relay_domains
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks, check_relay_domains
smtpd_tls_auth_only = yes
smtpd_tls_loglevel = 3
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
smtpd_use_tls = yes
strict_8bitmime = no
strict_rfc821_envelopes = no
transport_maps =
unknown_local_recipient_reject_code = 550
virtual_alias_domains =
If anyone can help me with this id be really grateful. I’ve spent a few days setting this up and researching online so far…
Thanks
Matt