Missing checkbox for permit_sasl_authenticated for PostFix SMTP Client Restrictions dialog

Dear Virtualmin Team,

In the SMTP Client Restrictions settings view there needs to be a new checkbox labelled 'Allow SASL authenticated clients' that is checked by default on new installations. The new default should also include the parameter permit_sasl_authenticated to the smtpd_client_restrictions directive in /etc/postfix/main.cf.

This issue was discovered due to a user reporting being unable to send email even if authenticated. The user is accessing the Webmin server remotely in Hong Kong using a shared IP, presumably from a hotel or public wifi. The IP used by the user's client was previously reported to Barracuda's RBL. Consequently Postfix prevents the mail from being sent even though the user is authenticated.

To remedy this issue a system administrator needs to edit main.cf and manually add permit_sasl_authenticated to the smtpd_client_restrictions directive. There is no way to remedy issue this using the SMTP Client Restrictions dialog. This should be the default since likely anyone may want to check and send mail using Internet from a public place even if the IPs of the public place have been placed on a RBL.

So the directive now looks something like the following (yes, many RBLs):

smtpd_client_restrictions = permit_inet_interfaces permit_sasl_authenticated reject_rhsbl_client bl.spamcop.net reject_rbl_client bl.spamcop.net reject_rbl_client cbl.abuseat.org reject_rhsbl_client cbl.abuseat.org reject_rbl_client ix.dnsbl.manitu.net reject_rbl_client dnsbl-2.uceprotect.net reject_rhsbl_client ix.dnsbl.manitu.net reject_rhsbl_client dnsbl-2.uceprotect.net reject_rbl_client bogons.cymru.com reject_rhsbl_client bogons.cymru.com reject_rbl_client dnsbl.inps.de reject_rhsbl_client dnsbl.inps.de reject_rbl_client spam.dnsbl.anonmails.de reject_rhsbl_client spam.dnsbl.anonmails.de reject_rbl_client db.wpbl.info reject_rhsbl_client db.wpbl.info reject_rbl_client b.barracudacentral.org reject_rhsbl_client b.barracudacentral.org reject_rbl_client db.wpbl.info

Status: 
Closed (fixed)

Comments

Thanks - I'll add support for this in the next Webmin release.

Status: Active » Fixed
Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.