HELP: TLS Configuration

[felixpahl]

Hi all,

I have OpenEMM 6.2 windows version installed.
Sending Emails via my ISP works fine. I have a problem, when using the smart relay host:

It seems my mail-provider does not support TLS. I do see the following message in my semu-log:

[13.01.2011 09:00:37] 364 DEBUG/11f0Tbc0600000001: New entry C:\OpenEMM\var\spool\ADMIN\qf11f0Tbc0600000001 from external source
[13.01.2011 09:00:37] 364 DEBUG/11f0Tbc0600000001: Entry is ready to send, current trycount is 33
[13.01.2011 09:00:37] 364 DEBUG/11f0Tbc0600000002: New entry C:\OpenEMM\var\spool\ADMIN\qf11f0Tbc0600000002 from external source
[13.01.2011 09:00:37] 364 DEBUG/11f0Tbc0600000002: Entry is ready to send, current trycount is 33
[13.01.2011 09:00:38] 364 WARNING/11f0Tbc0600000001: Retry as sent to mail.mydomain.com failed 400: "('STARTTLS extension not supported by server.',)"
[13.01.2011 09:00:38] 364 DEBUG/11f0Tbc0600000001: Skip incomplete bounce None/None/"('STARTTLS extension not supported by server.',)"
[13.01.2011 09:00:38] 364 DEBUG/11f0Tbc0600000001: Updated qfile C:\OpenEMM\var\spool\ADMIN\qf11f0Tbc0600000001
[13.01.2011 09:00:38] 364 INFO/11f0Tbc0600000001: Softbounce 400: ('STARTTLS extension not supported by server.',)


My mail-provider is telling me, that I need to disable TLS support. Is there a way I could do this?

Thanks for your help.

Best,
Felix

[maschoff]

Quick & dirty hack: Remove line "smtp.starttls ()" from file semu.py in /home/openemm/bin/scripts.

[felixpahl]

Hi maschoff,

thanks a lot for your quick reply.
I removed the line, but now I do get the following errors:

[14.01.2011 12:47:46] 404 WARNING/7acTc21900000001: Retry as sent to mail.mycompany.com failed 400: "('SMTP AUTH extension not supported by server.',)"
[14.01.2011 12:47:46] 404 DEBUG/7acTc21900000001: Skip incomplete bounce None/None/"('SMTP AUTH extension not supported by server.',)"
[14.01.2011 12:47:46] 404 DEBUG/7acTc21900000001: Updated qfile C:\OpenEMM\var\spool\ADMIN\qf7acTc21900000001
[14.01.2011 12:47:46] 404 INFO/7acTc21900000001: Softbounce 400: ('SMTP AUTH extension not supported by server.',)

This is strange now, as the server does require authentication.
I tried this previously by sending emails via telnet connection.

Any idea?

Best,
Felix

[felixpahl]

Hi Maschoff,

I found the problem here.

Since I removed the just the starttls from the file semu.py, there is still the 2nd EHLO being sent.
I also remove the EHLO (after the starttls) and now the relay work fine.

Solution:

Remove both lines from semu.py (after "if auth:"):
smtp.starttls ()
smtp.ehlo ()

Best,
Felix

[Civilian]

Start-up tutorial :
www.clearchain.com/blog/posts/setting-u ... er-freebsd
Also:
munin-monitoring.org/wiki/MuninTLSSetup

[maschoff]

Thanks for your feedback! I will include the TLS issue in the next release of the OpenEMM Install Guide.