iRedMail — Weird problem with TLS

Re: Weird problem with TLS

null@example.com (dittman) — Fri, 29 Mar 2024 16:26:33 +0000

ZhangHuangbin wrote:

dittman wrote:
but if I use the LAN the connection drops after CONNECT or STARTTLS depending on whether I'm using 587 or 465.
Do you use private IP address as smtp server address?

Yes.

Re: Weird problem with TLS

null@example.com (ZhangHuangbin) — Fri, 29 Mar 2024 02:38:43 +0000

dittman wrote:

but if I use the LAN the connection drops after CONNECT or STARTTLS depending on whether I'm using 587 or 465.

Do you use private IP address as smtp server address?

Re: Weird problem with TLS

null@example.com (dittman) — Tue, 27 Feb 2024 03:17:42 +0000

ZhangHuangbin wrote:

Try to use "fullchain.pem" instead of "cert.pem" offered by Let's Encrypt in Postfix/Dovecot/Nginx.

I changed from cert.pem to fullchain.pem in Postfix and Dovecot and it didn't help. The UDM SE and Pro can't send on the LAN but can on the WAN.

Re: Weird problem with TLS

null@example.com (ZhangHuangbin) — Mon, 26 Feb 2024 02:16:35 +0000

Try to use "fullchain.pem" instead of "cert.pem" offered by Let's Encrypt in Postfix/Dovecot/Nginx.

Weird problem with TLS

null@example.com (dittman) — Tue, 20 Feb 2024 00:11:24 +0000

The Unifi UDMP/UDMSE has a problematic email client. Some people just disable STARTTLS on it which works but I've been playing and found that if I configure one to send to my iRedMail server from the WAN it works but if I use the LAN the connection drops after CONNECT or STARTTLS depending on whether I'm using 587 or 465.

My cert is valid (from Let's Encrypt) and non-UDMP/UDMSE systems can send on the LAN just fine using STARTTLS.

So my question is a general one on iRedMail which is does the cert handling change on whether it comes in from a network on mynetworks or not?