Dnia 13.12.2023 o godz. 09:15:52 Bill Cole via Postfix-users pisze:
> 
> No AUTH offered. Which is fine, because one should not offer AUTH
> over an unencrypted session. However, your printer saw that and
> instead of using STARTTLS, it hung up. That's bad. It should have
> used STARTTLS to get a useful session.

I'd bet the printer does not support TLS.

> TLS. If you cannot use TLS, you should either get a modern printer
> or don't ask your printer to email you. You certainly COULD work
> around that by compromising the security of your MTA, but why?

The user in question probably doesn't use the printer without having a
computer turned on? :)

Then the possible solution is to install stunnel on the user's computer,
point the printer to the local IP of user's computer (other parameters
unchanged), and make stunnel forward the connection (encrypted) to port 465
(not 587, as 465 is TLS-wrapped submission and 587 is STARTTLS) on your mail
server.
-- 
Regards,
   Jaroslaw Rafa
   r...@rafa.eu.org
--
"In a million years, when kids go to school, they're gonna know: once there
was a Hushpuppy, and she lived with her daddy in the Bathtub."
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to