On Tue, Aug 13, 2013 at 07:57:47PM +0100, higuita wrote:
> I have a small mail server, with ipv6 and i relay the email to
> my ISP mail server. Their mail server have now ipv6, yet every
> time my postfix tries to connect to their server it gives timeout:
>
> Aug 13 12:51:27 paquete postfix/smtp[25083]: SSL_connect error to
> smtp.sapo.pt[2001:8a0:2104:ff:212:55:154:44]:25: Connection timed out
Works fine for me. You should look for problems at the network layer:
http://www.postfix.org/DEBUG_README.html#sniffer
My test is with Postfix 2.11-20130710:
$ posttls-finger -C "[smtp.sapo.pt]"
posttls-finger: Connected to smtp.sapo.pt[2001:8a0:2104:ff:212:55:154:44]:25
posttls-finger: < 220 SAPO.pt PTMailServer mta12 ESMTP SPF1
posttls-finger: > EHLO amnesiac
posttls-finger: < 250-SAPO.pt PTMailServer mta12
posttls-finger: < 250-AUTH LOGIN PLAIN
posttls-finger: < 250-AUTH=LOGIN PLAIN
posttls-finger: < 250-PIPELINING
posttls-finger: < 250-STARTTLS
posttls-finger: < 250-SIZE 31457280
posttls-finger: < 250 8BITMIME
posttls-finger: > STARTTLS
posttls-finger: < 220 ready for tls
posttls-finger: smtp.sapo.pt[2001:8a0:2104:ff:212:55:154:44]:25 Matched
CommonName smtp.sapo.pt
posttls-finger: certificate verification failed for
smtp.sapo.pt[2001:8a0:2104:ff:212:55:154:44]:25: untrusted issuer /C=US/O=GTE
Corporation/OU=GTE CyberTrust Solutions, Inc./CN=GTE CyberTrust Global Root
posttls-finger: smtp.sapo.pt[2001:8a0:2104:ff:212:55:154:44]:25:
subject_CN=smtp.sapo.pt, issuer_CN=MULTICERT-CA 02,
fingerprint=59:A7:0E:AE:D8:28:6D:DB:86:9B:AB:11:FA:CB:0D:66:2E:28:5C:AD,
pkey_fingerprint=41:B5:39:21:0C:F7:23:31:BE:9A:4B:80:19:11:39:92:7F:58:FD:79
posttls-finger: Untrusted TLS connection established to
smtp.sapo.pt[2001:8a0:2104:ff:212:55:154:44]:25: unknown with cipher AES256-SHA
(256/256 bits)
posttls-finger: > EHLO amnesiac
posttls-finger: < 250-SAPO.pt PTMailServer mta12
posttls-finger: < 250-AUTH LOGIN PLAIN
posttls-finger: < 250-AUTH=LOGIN PLAIN
posttls-finger: < 250-PIPELINING
posttls-finger: < 250-SIZE 31457280
posttls-finger: < 250 8BITMIME
---
Certificate chain
0 subject: /C=PT/O=MULTICERT-CA/OU=CERTIPOR - RA/OU=Corporate/OU=PT
Comunicacoes SA/OU=Web Server/CN=smtp.sapo.pt
issuer: /C=pt/O=MULTICERT-CA/CN=MULTICERT-CA 02
cert digest=59:A7:0E:AE:D8:28:6D:DB:86:9B:AB:11:FA:CB:0D:66:2E:28:5C:AD
pkey digest=41:B5:39:21:0C:F7:23:31:BE:9A:4B:80:19:11:39:92:7F:58:FD:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
1 subject: /C=pt/O=MULTICERT-CA/CN=MULTICERT-CA 02
issuer: /C=US/O=GTE Corporation/OU=GTE CyberTrust Solutions, Inc./CN=GTE
CyberTrust Global Root
cert digest=53:5D:39:37:99:6D:D0:FA:D0:8A:CC:B1:D9:AE:89:80:C1:B1:41:67
pkey digest=B3:50:59:16:4D:32:4A:F2:00:86:02:03:46:91:C9:C9:B6:D6:27:D2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
2 subject: /C=US/O=GTE Corporation/OU=GTE CyberTrust Solutions, Inc./CN=GTE
CyberTrust Global Root
issuer: /C=US/O=GTE Corporation/OU=GTE CyberTrust Solutions, Inc./CN=GTE
CyberTrust Global Root
cert digest=97:81:79:50:D8:1C:96:70:CC:34:D8:09:CF:79:44:31:36:7E:F4:74
pkey digest=59:79:12:DE:61:75:D6:6F:C4:23:B7:77:13:74:C7:96:DE:6F:88:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
posttls-finger: > QUIT
posttls-finger: < 221 SAPO.pt PTMailServer mta12
--
Viktor.
