From: nevot (r.nevotgmail.com)
Date: Thu Feb 02 2006 - 02:11:11 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

You may have a Cisco PIX between the ends?

2006/1/30, Garrison Hoffman <garrisoncodefix.net>:
>
> I have set up postfix with smtp-auth, recently one user has complained
> that Thunderbird fails with:
>
> "Sending of message failed. An error occurred sending mail: Unable to
> connect to SMTP server cobalt.codefix.net via STARTTLS since it doesn't
> offer STARTTLS In EHLO response. Please verify that your Mail/News
> account settings are correct and try again."
>
> When I netcat/telnet to port 25 I see:
>
> 250-PIPELINING
> 250-SIZE 10240000
> 250-ETRN
> 250-STARTTLS
> 250 8BITMIME
>
> Whereas he sees:
>
> 250-PIPELINING
> 250-SIZE 10240000
> 250-ETRN
> 250-XXXXXXXA
> 250 8BITMIME
>
> I saw nothing in smtpd.c that indicates "250-XXXXXXXA" to be a valid
> postfix response, so my thinking is that perhaps some proxy or other
> network filter on his end is interfering.
>
> Can anyone shed some light on this?
>
> There are no warnings in my maillog other than "address not listed for
> hostname"
>
> # postconf -n|grep tls
> smtpd_tls_auth_only = yes
> smtpd_tls_cert_file = /etc/courier-imap/imapd.pem
> smtpd_tls_loglevel = 0
> smtpd_tls_received_header = yes
> smtpd_tls_session_cache_timeout = 3600s
> smtpd_use_tls = yes
> tls_random_source = dev:/dev/urandom
>
> --
> __________________________________________________________________
> Garrison Hoffman Codefix Consulting 1.718.210.3445
> garrisoncodefix.net http://codefix.net/ 1.866.456.0584
>

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]