Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

TLS works for SMTP but not SSL

Status
Not open for further replies.

hpg4815

IS-IT--Management
Apr 10, 2007
2
US
Loving postfix using TLS and SMTP auth for all remote users sendmail from outside the network, but wanted to provide the SSL option for those clients that don't support SSL. Not understanding why I don't get any error logs when connecting with my client using posrt 465, 993, 995 for their respective protocols. Not sure where the problem resides.

using postfix, cyrus_imap, on a freebsd 6.2 machine

main.cf:
#SMTP CONFIGURATION INFORMATION
broken_sasl_auth_clients = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain =

smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks
smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, reject_unauth_pipelining, reject_unknown
_recipient_domain

#TLS CONFIGURATION INFORMATION
smtp_use_tls = yes
smtpd_use_tls = yes
smtpd_tls_auth_only = yes
smtp_tls_note_starttls_offer = yes
smtpd_tls_key_file = /var/imap/key.pem
smtpd_tls_cert_file = /var/imap/cert.pem
smtpd_tls_CAfile = /var/imap/cacert.pem
smtpd_tls_loglevel = 2
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom

master.cf:
smtps inet n - n - - smtpd
# -o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject


/etc/services:
smtps 465/tcp #smtp protocol over TLS/SSL (was ssmtp)

From a different machine in my network i get the following:

telenet <machine name> 993
Trying <ip address>...
Connected to <machine name>.
Escape character is '^]'.

telnet <machine name> 465
Trying <ip address>...
Connected to <machine name>.
Escape character is '^]'.
220 <machine name> ESMTP Postfix


word has it I shouldn't be using port 465?

using thunderbird, it connects but no errors and no error logs on the machine even with log leve up to 4

Self signed cert

No restriction on my TCP/IP wrappers while testing

Thanks in advance
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top