Re: Identifying used patches

On Sat, Mar 26, 2016 at 03:26:57AM +0100, Jens Bauer wrote:
> "SMTP Protocol Error: 553 sorry, that domain isn't in my list of 
> allowed rcpthosts; no valid cert for gatewaying (#5.7.1)"

> I am denying any authorization/authentication on port 25.
> I require secure authorization/authentication on port 587.

> My actual question is:
> Which patch(es) use "ALLOW_INSECURE_AUTH", "DENY_TLS" and "REQUIRE_AUTH" ?
> 
> Normally, I would only apply a minimum set of patches, which means I'm not likely to use a "combined patch".
> Is it *only* the patches from John M. Simpson, or are there others too ?
> -A lot of arrows point in that direction, which means that I might have stopped rolling my own recipe and used John's patches with my own RCPTCHECK added (I would expect that John's patch would include the "ANY DNS" patch, though).

From what you've said above, I would suggest you get the latest (7.10) 
combined patch[1] and install from his instructions using the various 
run scripts[2].

  1: <https://qmail.jms1.net/patches/combined-details.shtml>
  2: <https://qmail.jms1.net/scripts/>

Surprisingly (or not so) that combined set has served me well. The only 
change I've added is some TLS options to prevent SSL2[3].

  3: <https://www.usenix.org.uk/content/qmail.html>

Using John's patches will at least get you a good stable system with 
minimal effort.

-- 
Best regards,
Ed http://www.s5h.net/