help with smtp auth

[pheonix1t]

hello,
I need to authenticate to smtp.att.yahoo.com on port 465 using SSL.

I've made the file /opt/zimbra/conf/relay_password with the following:
smtp.att.yahoo.com:465 user@sbcglobal.netassword

I'm getting disconnect errors constantly.

This is on a zimbra server, new install. ATT used mail.swbell.net which was easy (no auth required) but they now require smtp auth using SSL to port 465.

Can you see anything wrong here? I'm stuck on why this isn't going out.

E6CD95F56C 2770 Tue Jan 15 08:30:53 MAILER-DAEMON
(lost connection with smtp.att.yahoo.com[68.142.198.11] while receiving the initial server greeting)
mkreit@tmo.blackberry.net

ECC395F6D2 68327 Mon Jan 14 23:26:33 MAILER-DAEMON
(mail transport unavailable)
mkreit@tmo.blackberry.net

E93095F5CD 1707 Mon Jan 14 22:16:14 MAILER-DAEMON
(mail transport unavailable)
cliffordwinslow814fb@hotmail.com

F0B355F7E0 2760092 Tue Jan 15 09:36:02 MAILER-DAEMON
(lost connection with smtp.att.yahoo.com[68.142.198.11] while receiving the initial server greeting)
mkreit@tmo.blackberry.net

-- 11913 Kbytes in 49 Requests.



zimbra@mail:~> postfix flush
zimbra@mail:~> tail -100 /var/log/zimbra.log
Jan 15 10:04:09 mail zimbramon[13973]: 13973:info: 2008-01-15 10:04:01, STATUS: mail.epione.org: mta: Running
Jan 15 10:04:09 mail zimbramon[13973]: 13973:info: 2008-01-15 10:04:01, STATUS: mail.epione.org: snmp: Running
Jan 15 10:04:09 mail zimbramon[13973]: 13973:info: 2008-01-15 10:04:01, STATUS: mail.epione.org: spell: Running
Jan 15 10:04:09 mail zimbramon[13973]: 13973:info: 2008-01-15 10:04:01, STATUS: mail.epione.org: stats: Running
Jan 15 10:04:12 mail postfix/smtp[13929]: 8F37F5F743: to=, relay=novell.epione.org[192.168.1.17]:25, delay=22, delays=0.03/0.08/21/0.01, dsn=2.0.0, status=sent (250 Ok)
Jan 15 10:04:12 mail postfix/qmgr[28545]: 8F37F5F743: removed
Jan 15 10:04:26 mail postfix/smtp[14030]: 2E50B5F73B: to=, relay=smtp.att.yahoo.com[68.142.198.11]:465, delay=33036, delays=33015/0.17/21/0, dsn=4.4.2, status=deferred (lost connection with smtp.att.yahoo.com[68.142.198.11] while receiving the initial server greeting)
Jan 15 10:04:26 mail postfix/smtp[14029]: 0D0E25F5B7: to=, relay=smtp.att.yahoo.com[68.142.198.11]:465, delay=42615, delays=42594/0.19/21/0, dsn=4.4.2, status=deferred (lost connection with smtp.att.yahoo.com[68.142.198.11] while receiving the initial server greeting)
Jan 15 10:04:26 mail postfix/smtp[14034]: 223415F6F3: to=, relay=smtp.att.yahoo.com[68.142.198.11]:465, delay=34599, delays=34578/0.32/21/0, dsn=4.4.2, status=deferred (lost connection with smtp.att.yahoo.com[68.142.198.11] while receiving the initial server greeting)
Jan 15 10:04:26 mail postfix/smtp[14031]: 21FB15F740: to=, relay=smtp.att.yahoo.com[68.142.198.11]:465, delay=33036, delays=33015/0.25/21/0, dsn=4.4.2, status=deferred (lost connection with smtp.att.yahoo.com[68.142.198.11] while receiving the initial server greeting)
Jan 15 10:04:26 mail postfix/smtp[14036]: 2EAB25F78E: to=, relay=smtp.att.yahoo.com[68.142.198.11]:465, delay=17463, delays=17442/0.4/21/0, dsn=4.4.2, status=deferred (lost connection with smtp.att.yahoo.com[68.142.198.11] while receiving the initial server greeting)
Jan 15 10:04:26 mail postfix/qmgr[28545]: warning: connect to transport retry: No such file or directory
Jan 15 10:04:26 mail postfix/qmgr[28545]: warning: connect to transport retry: No such file or directory
Jan 15 10:04:26 mail postfix/qmgr[28545]: 270675F6F2: to=, relay=none, delay=34659, delays=34638/21/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)
Jan 15 10:04:26 mail postfix/qmgr[28545]: 273DD5F67D: to=, relay=none, delay=40719, delays=40698/21/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)
Jan 15 10:04:26 mail postfix/qmgr[28545]: 300E55F79A: to=, relay=none, delay=15933, delays=15912/21/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)
Jan 15 10:04:26 mail postfix/qmgr[28545]: 3C7765F5C5: to=, relay=none, delay=15993, delays=15972/21/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)
Jan 15 10:04:26 mail postfix/qmgr[28545]: 357DE5F771: to=, relay=none, delay=16023, delays=16002/21/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)
Jan 15 10:04:26 mail postfix/qmgr[28545]: 3E4C55F668: to=, relay=none, delay=41049, delays=41028/21/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)
Jan 15 10:04:26 mail postfix/qmgr[28545]: 33E085F66D: to=, relay=none, delay=41222, delays=41201/21/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)
Jan 15 10:04:26 mail postfix/qmgr[28545]: 3311B5F5D6: to=, relay=none, delay=42422, delays=42401/21/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)
Jan 15 10:04:26 mail postfix/qmgr[28545]: 4D1535F65A: to=, relay=none, delay=41825, delays=41803/21/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)
Jan 15 10:04:26 mail postfix/qmgr[28545]: 46A145F73A: to=, relay=none, delay=32496, delays=32475/21/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)
Jan 15 10:04:26 mail postfix/qmgr[28545]: 40C8E5F701: to=, relay=none, delay=29910, delays=29889/21/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)
Jan 15 10:04:26 mail postfix/qmgr[28545]: 423D75F6FB: to=, relay=none, delay=34118, delays=34097/21/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)
Jan 15 10:04:26 mail postfix/qmgr[28545]: 48DEF5F70E: to=, relay=none, delay=33036, delays=33015/21/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)
Jan 15 10:04:26 mail postfix/qmgr[28545]: 4E8E85F6EC: to=, relay=none, delay=34952, delays=34930/21/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)
Jan 15 10:04:26 mail postfix/qmgr[28545]: 5D4215F6BE: to=, relay=none, delay=33428, delays=33406/21/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)
Jan 15 10:04:26 mail postfix/qmgr[28545]: 6BC1C5F799: to=, relay=none, delay=15303, delays=15281/21/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)
Jan 15 10:04:26 mail postfix/qmgr[28545]: 630185F633: to=, relay=none, delay=31324, delays=31302/21/0/0, dsn=4.3.0, status=deferred (mail transport unavailable)
Jan 15 10:04:26 mail postfix/qmgr[28545]: 7E5745F5AF

mail:~ # su - zimbra
zimbra@mail:~> postconf -n
alias_maps = hash:/etc/aliases
broken_sasl_auth_clients = yes
command_directory = /opt/zimbra/postfix-2.4.3.3z/sbin
config_directory = /opt/zimbra/postfix-2.4.3.3z/conf
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /opt/zimbra/postfix-2.4.3.3z/libexec
disable_dns_lookups = no
header_checks = pcre:/opt/zimbra/conf/postfix_header_checks
mailbox_size_limit = 0
mailq_path = /opt/zimbra/postfix-2.4.3.3z/sbin/mailq
manpage_directory = /opt/zimbra/postfix-2.4.3.3z/man
message_size_limit = 10240000
mydestination = localhost
myhostname = mail.epione.org
mynetworks = 127.0.0.0/8 192.168.1.0/24
newaliases_path = /opt/zimbra/postfix-2.4.3.3z/sbin/newaliases
queue_directory = /opt/zimbra/postfix-2.4.3.3z/spool
recipient_delimiter =
relayhost = smtp.att.yahoo.com:465
sender_canonical_maps = ldap:/opt/zimbra/conf/ldap-scm.cf
sendmail_path = /opt/zimbra/postfix-2.4.3.3z/sbin/sendmail
smtp_cname_overrides_servername = no
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/opt/zimbra/conf/relay_password
smtpd_client_restrictions = reject_unauth_pipelining
smtpd_data_restrictions = reject_unauth_pipelining
smtpd_helo_required = yes
smtpd_recipient_restrictions = reject_non_fqdn_recipient, permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, reject_unlisted_recipient, reject_invalid_hostname, reject_non_fqdn_sender, permit
smtpd_reject_unlisted_recipient = no
smtpd_sasl_auth_enable = yes
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /opt/zimbra/conf/smtpd.crt
smtpd_tls_key_file = /opt/zimbra/conf/smtpd.key
smtpd_tls_loglevel = 1
smtpd_use_tls = yes
transport_maps = ldap:/opt/zimbra/conf/ldap-transport.cf
virtual_alias_domains = ldap:/opt/zimbra/conf/ldap-vad.cf
virtual_alias_maps = ldap:/opt/zimbra/conf/ldap-vam.cf
virtual_mailbox_domains = ldap:/opt/zimbra/conf/ldap-vmd.cf
virtual_mailbox_maps = ldap:/opt/zimbra/conf/ldap-vmm.cf
virtual_transport = error
zimbra@mail:~>

[ericrost]

Howdy, I'll create my own thread to get this known as well as updating the wiki, but specifically AT&T Yahoo DSL (consumer at the very least) doesn't implement TLS properly on the advertised port (465) if you use port 587 it works properly as per the wiki.

Hope this saves someone the six hours it took me to dig up on an ubuntu forum unrelated post.

postfix, SSL and AT&T [Archive] - Ubuntu Forums

Specifically the post by mterlouw on August 19th, 2007, 04:47 AM.

This is confirmed to work with Zimbra on my consumer dsl connection per the wiki page:

Outgoing SMTP Authentication - Zimbra :: Wiki