Page 1 of 1

Can not send mails to an TLS SMTP server

Posted: Tue Aug 18, 2009 8:14 am
by itettex
Hi,

we are using scalix so far without any big issues. :D

Today it happened the first time that we could not send out a mail. Investigating at the logfiles it turned out that the mailserver is requesting a TLS encryption which our server fails (sendmail). I looked at the internet (and Scalix pages) but mostly it is discussed how to set up the local (Scalix) server to encrypt mails form a user and not how to set up sendmail in case of relay.

The following happened:

Code: Select all

Aug 18 11:24:43 server1 sendmail[31396]: n7I9OIiu031396: from=<xyz@ettex.de>, size=12502, class=0, nrcpts=1, msgid=<H0000068000127a2.1250587457.server1.ettex.de@MHS>, proto=ESMTP, daemon=MTA, relay=localhost [127.0.0.1]
Aug 18 11:25:04 server1 sendmail[31464]: STARTTLS=client, relay=mail.netplace.com., version=TLSv1/SSLv3, verify=FAIL, cipher=DES-CBC3-SHA, bits=168/168
Aug 18 11:25:06 server1 sendmail[31464]: n7I9OIiu031396: to=<xyz@triangle-venture.com>, delay=00:00:23, xdelay=00:00:18, mailer=esmtp, pri=132502, relay=mail.netplace.com. [213.183.0.7], dsn=5.0.0, stat=Service unavailable
Aug 18 11:25:06 server1 sendmail[31464]: n7I9OIiu031396: n7I9P6iu031464: DSN: Service unavailable
Aug 18 11:25:06 server1 sendmail[31464]: n7I9P6iu031464: to=<xyz@ettex.de>, delay=00:00:00, xdelay=00:00:00, mailer=scalix_mime, pri=30000, relay=server1, dsn=2.0.0, stat=Sent (Ok)


I looked around and found the following info on the sendmail webpages: http://www.sendmail.org/~ca/email/auth.html. However this is nor really solving my issue (I believe) as this is only a setup if you always use the same ISP.

Any ideas where to look at or what to do to overcome this limitation?...

Thanks!

Re: Can not send mails to an TLS SMTP server

Posted: Fri Mar 05, 2010 1:43 am
by PaulHerron
If you Google "Sendmail and Starttls" you'll find some excellent guides for setting up sendmail to dispatch messages using TLS. The sendmail.org site offers a tutorial at: http://www.sendmail.org/~ca/email/starttls.html

Basically, all you need to do is create certs and tell sendmail where to find them. Sendmail does the rest by default.

Good luck!