1 Topic by mikeg

  • mikeg
  • Member
  • Offline
  • Registered: 2015-09-25
  • Posts: 13

Topic: SMTPS (port 465 SSL)

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.2
- Linux/BSD distribution name and version: FreeBSD 10.2
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro? Yes
- Related log if you're reporting an issue:
====

I have a scada system at work that doesn't support TLS, it will do SSL however.  I'm trying to configure my server to permit SMTPS via port 465. 

Using the following "How-To"  https://docs.iredmail.org/enable.smtps.html
I've done everything there, but the server will not respond on port 465 at all.  There doesn't appear to be any firewall service running and nothing is referenced for FreeBSD in the document.

Anybody running release 0.9.2 on FreeBSD 10.x that can share their master.cf and amavisd.conf file?  Any other configurations I may have missed that are not referenced in the how-to?

telnet smtp.xxxxx.net 465
Trying x.x.x.142...
Connected to hades.xxxxx.net.
Escape character is '^]'.

telnet smtp.xxxxx.net 587
Trying x.x.x.142...
Connected to hades.xxxxx.net.
Escape character is '^]'.
220 hades.xxxxx.net ESMTP Postfix

telnet smtp.xxxxx.net 25
Trying x.x.x.142...
Connected to hades.xxxxx.net.
Escape character is '^]'.
220 hades.xxxxx.net ESMTP Postfix

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,792

Re: SMTPS (port 465 SSL)

Did you restart Postfix service?

Just added few lines to master.cf by following our tutorial should work as expected. Please show us what you changed.

3 Reply by mikeg

  • mikeg
  • Member
  • Offline
  • Registered: 2015-09-25
  • Posts: 13

Re: SMTPS (port 465 SSL)

ZhangHuangbin wrote:

Did you restart Postfix service?

Just added few lines to master.cf by following our tutorial should work as expected. Please show us what you changed.

Yep, always do a restart (not just reload) on postfix after making config changes, also look in /var/log/maillog for errors after restart, all appears normal.

This is what I added to the end of master.cf

465     inet  n       -       n       -       -       smtpd
  -o syslog_name=postfix/smtps
  -o smtpd_tls_wrappermode=yes
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  -o content_filter=smtp-amavis:[127.0.0.1]:10026

in amavisd.conf I have:

$inet_socket_port = [10024, 10026, 9998];