I noticed that I am no longer able to send email via Postfix with
STARTTLS enabled on my server. I have not changed anything on my
Postfix server over the weekend. I only changed my Firewall appliance
but everything appears to be in order. I don't understand why Postfix
can't send emails any more via STARTTLS. I have attempted to 'Telnet'
into my server and I don't see STARTTLS in EHLO command nor do
Thunderbird / Evolution clients so I think it's an issue on Postfix's
end.
car...@tiger:~$ telnet 192.168.0.200 25
Trying 192.168.0.200...
Connected to 192.168.0.200.
Escape character is '^]'.
220 ******************************
EHLO carlos.iamghost.com
250-mail.iamghost.com
250-PIPELINING
250-SIZE 10240000
250-VRFY
250-ETRN
250-XXXXXXXA
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN
I disabled TLS on my client end and was able to send a message
perfectly but when TLS is enabled on the client end for SMTP, it fails
and tells me:
"Sending mesage failed.
Unable to connect to SMTP server 192.168.0.200 via STARTTLS since it
doesn't offer STARTTLS in EHLO response. Please verify your settings
and try again."
I am really clueless as to why this stopped working. I am running
Postfix 2.7.0-1 and it has been perfect until now. No changes have
been made that I can recall. The logs /var/log/mail.log show me
nothing when I try to send a message. The logs only show my IMAP
connection to the server. Nothing when I try and send.
Below is my output of Postconf -n:
alias_database = $alias_maps
alias_maps = hash:/etc/postfix/aliases
bounce_queue_lifetime = 1d
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/lib/postfix
debug_peer_level = 2
delay_warning_time = 4h
home_mailbox = mail/
html_directory = no
inet_interfaces = all
inet_protocols = ipv4
mail_owner = postfix
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
mydestination = $myhostname, $mydomain, mail.$mydomain
mydomain = iamghost.com
myhostname = mail.iamghost.com
mynetworks = $config_directory/mynetworks
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = no
recipient_delimiter = +
relayhost =
sample_directory = /etc/postfix/sample
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtp_helo_timeout = 60s
smtp_tls_session_cache_database = btree:/var/lib/postfix/smtp_scache
smtpd_recipient_restrictions =
permit_sasl_authenticated, permit_mynetworks,
reject_unauth_destination, reject_non_fqdn_recipient,
reject_unknown_recipient_domain, reject_non_fqdn_helo_hostname,
reject_invalid_helo_hostname, reject_rbl_client zen.spamhaus.org,
reject_rbl_client bl.spamcop.net, check_policy_service
inet:127.0.0.1:10030
smtpd_sasl_auth_enable = yes
smtpd_sasl_path = /var/run/dovecot/auth-client
smtpd_sasl_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_sender_restrictions = permit_sasl_authenticated, permit_mynetworks
smtpd_tls_cert_file = /etc/ssl/certs/mail.crt
smtpd_tls_key_file = /etc/ssl/private/mail.key
smtpd_tls_loglevel = 1
smtpd_tls_session_cache_database = btree:/var/lib/postfix/smtpd_scache
smtpd_use_tls = yes
unknown_local_recipient_reject_code = 450's
I appreciate any and all assistance!
-Carlos
