SMTP authentication setup

[deoren]

On 2014-10-21 07:40, Brian wrote:
> At my company we've had a longstanding problem of not being able to
> send email from devices outside of our internal network and any
> specific IP address that we open the relay to. As it turns out, SASL
> has never been set up. I need to set up SASL ASAP but none of the
> guides I've found seem to work.

I recommend reading over these guides and doing outside research to fill 
in any blanks:

* 
https://www.linode.com/docs/email/postfix/email-with-postfix-dovecot-and-mysql
* https://workaround.org/ispmail
* http://wiki2.dovecot.org/Authentication/PasswordSchemes

They walk you through setting up SASL for Postfix which uses Dovecot for 
auth. Dovecot in turn uses a MySQL database that you put together, but 
Dovecot supports many other auth sources such as LDAP that might be more 
relevant to your setup.

It's worth mentioning (although you probably already know this) to 
double-check any recommendations you find in guides against official 
docs when it comes to security practices. For example, one guide 
recommends using the MD5 hashing algorithm (without a salt) to store 
passwords. I'm (very) far from being a security expert, but I recommend 
you research an alternative hashing scheme if you're setting up an auth 
source from scratch.