[BlueOnyx:25476] Re: TLS on 5210R

[Larry Smith]

Colin,

 Hmmm, I don't see where the phpmailer is starting 
tls.  There are lots of entries about issues with phpmailer
and SSL / TLS.  Have you tested your server with any
other client / software?

-- 
Larry Smith
lesmith at ecsis.net

On Thu June 16 2022 07:54, Colin Jack wrote:
> Hi Larry,
>
> CLIENT -> SERVER: EHLO questionnaire.london.co.uk
> SERVER -> CLIENT: 250-relay1.mainline.co.uk Hello [192.168.10.254], pleased
> to meet you 250-ENHANCEDSTATUSCODES
> 250-PIPELINING
> 250-8BITMIME
> 250-SIZE 31457280
> 250-DSN
> 250-AUTH LOGIN PLAIN
> 250-STARTTLS
> 250-DELIVERBY
> 250 HELP
> CLIENT -> SERVER: STARTTLS
> SERVER -> CLIENT: 220 2.0.0 Ready to start TLS
> SMTP Error: Could not connect to SMTP host.CLIENT -> SERVER: QUIT
> SERVER -> CLIENT: SMTP ERROR: QUIT command failed: SMTP connect() failed.
>
> Just says server disconnected. This is with a client using PHPMailer.
> Clients using network scanners to email scans for example just get a fail.
>
> If I disable TLS in PHPMailer above then it works.
>
> Colin
>
> -----Original Message-----
> From: Larry Smith <lesmith at ecsis.net>
> Organisation: ECSIS
> Date: Thursday, 16 June 2022 at 14:32
> To: "blueonyx at mail.blueonyx.it" <blueonyx at mail.blueonyx.it>
> Cc: Colin Jack <colin at mainline.co.uk>
> Subject: Re: [BlueOnyx:25474] TLS on 5210R
>
>     Colin,
>
>       You say unable to send, what error is the client
>     getting when attempting to send a message and
>     what are the associated log entries from the server.
>
>     --
>     Larry Smith
>     lesmith at ecsis.net
>
>     On Thu June 16 2022 06:59, Colin Jack wrote:
>     > Good afternoon,
>     >
>     > I have recently moved one of my mail relay servers from 5209R to
>     > 5210R. Now any clients using TLS are unable to send mail. Disabling
>     > TLS fixes the problem.
>     >
>     > We have a valid LE cert on the server.
>     >
>     > What have I missed?
>     >
>     > Clients are using SMTPAuth and submission port 587 for mail.
>     >
>     > Thanks
>     >
>     > Colin