Hello,
with postfix 2.9.6-2 I'm using smtp_tls_security_level = may.

No problems with it, but sending mails to some Exchange servers I see this
error:
*lost connection with mail.domain.com <http://mail.domain.com>[...] while
sending MAIL FROM*

If I try to send a mail from bash using:
openssl s_client -starttls smtp -connect mail.domain.com:25 -crlf

I see:
*...*
*New, TLSv1/SSLv3, Cipher is DES-CBC3-SHA*
*Server public key is 1024 bit*
*Secure Renegotiation IS NOT supported*
*...*
*helo..*
*mail from..*
and I get disconnected with:

*140371681683112:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version
number:s3_pkt.c:337:*

If I try with
*openssl s_client -starttls smtp -connect mail.domain.com:25
<http://mail.domain.com:25> -crlf -no_tls1*

It works correctly.

Could you help me with the problem?
If it happens just with some Exchange servers it seems a problem of their
servers.. but is there some way to avoid it? Is there a way to tell postfix
to avoid tls1 if delivery fails?

Thanks!
Andrea

Reply via email to