1 Topic by Gherkin

  • Gherkin
  • Member
  • Offline
  • Registered: 2014-07-22
  • Posts: 4

Topic: Force IredMail to use smtp with ssl (no starttls / tls)

==== Required information ====
- iRedMail version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Linux/BSD distribution name and version:
- Related log if you're reporting an issue:
======== Required information ====
- iRedMail version: UptoDate
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Linux/BSD distribution name and version: Debian
- Related log if you're reporting an issue: -
====

Hello there,

I've just started using Iredmail and it works fine for Outlook with Smtp + Starttls

But now I'd like to combine it with a Request system software that can not handle tls at all.
I'd like to stick to smtp but with ssl, is there any way to force Iredmail to allow this?

What would the options be instead of: "Port 587; SMTP; Starttls; Normal password"?

The Mailserver is going to be local only so security really isn't that important.

greetings,
Gherkin

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,094

Re: Force IredMail to use smtp with ssl (no starttls / tls)

Check this tutorial:

- How to enable SMTPS (port 465):
  http://www.iredmail.org/wiki/index.php? … able.SMTPS

3 Reply by Gherkin

  • Gherkin
  • Member
  • Offline
  • Registered: 2014-07-22
  • Posts: 4

Re: Force IredMail to use smtp with ssl (no starttls / tls)

Tried hard but couldn't get it to work, could be post be outdated?

Anyway, switched over to Port 25 vor simple SMTP, but now I'm getting an Error:

com.sun.mail.smtp.SMTPAddressFailedException: 553 5.7.1 <email@mail.com>: Sender address rejected: not logged in
at com.sun.mail.smtp.SMTPTransport.rcptTp(SMTPTransport.java:1047)

Anyone got an idea what I could work on to solve this?

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,094

Re: Force IredMail to use smtp with ssl (no starttls / tls)

Gherkin wrote:

Tried hard but couldn't get it to work, could be post be outdated?

It still works.

Gherkin wrote:

Sender address rejected: not logged in

Please enable SMTP authentication in your smtp client.

5 Reply by Gherkin

  • Gherkin
  • Member
  • Offline
  • Registered: 2014-07-22
  • Posts: 4

Re: Force IredMail to use smtp with ssl (no starttls / tls)

ZhangHuangbin wrote:

Please enable SMTP authentication in your smtp client.

My Clients outgoing mailbox ist configured as follows:

Email Server Type: SMTP
Email Server Requires SSL : No
Email Server Name/IP: 192.168.xxx.xxx
Email Server Port: 25
Email Server User: testuser@mail.com
Email Server Password: ; Password

the connecting works but as soon as I try to send via said "testuser@mail.com" to another user on any mailserver I get the already stated error.

There's nothing in the logs exept this error in mail.log.

thank you for your kind help Zhang!

6 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,094

Re: Force IredMail to use smtp with ssl (no starttls / tls)

With iRedMail-0.8.7, we have 'smtpd_tls_auth_only=yes' in Postfix (main.cf), so all users are forced to use secure connection (either SSL or TLS) for smtp service. You can try to set it to 'no' and try again.

WARNING: It's not recommended to connect to server with a non-secure connection.

7 Reply by Gherkin

  • Gherkin
  • Member
  • Offline
  • Registered: 2014-07-22
  • Posts: 4

Re: Force IredMail to use smtp with ssl (no starttls / tls)

I agree, but this server runs in an all VM environment without access to the web.

I got it to work with this method:
http://www.iredmail.org/wiki/index.php? … entication

It's not perfect but at least I can use it for my testing.