Comments on: Set-up SSL encrypted connection in Postfix, Dovecot and Apache

By: Kade

Kade — Thu, 11 May 2017 05:54:13 +0000

Thanks for providing a terrific tutorial series!

By: JPD

JPD — Sat, 20 Dec 2014 21:37:16 +0000

In reply to JPD. I tried to regenerate a new certificate and it works fine now. Thanks for this tutorial! :)

By: kikou

kikou — Sat, 20 Dec 2014 20:00:50 +0000

In reply to admin.

it work’s.. i have uncommented smtp inet… in main.cf in addition of submission inet… thank you.

By: admin

admin — Sat, 20 Dec 2014 11:58:22 +0000

In reply to kikou. relay denied or access denied usually means that your mail server is misconfigured. please re-check that your configuration is consistent and valid for your setup.

By: kikou

kikou — Sat, 20 Dec 2014 11:51:57 +0000

In reply to admin.

Yes, Thank you..
I see messages like this : “relay denied” and also “client host rejected: access denied”

By: JPD

JPD — Sat, 20 Dec 2014 03:17:40 +0000

Hi,

I am having problems with SMTP with SSL. I’m trying to connect my email from my own domain to my Outlook personal email but I could not do it without errors.

Outlook: There’s a problem connecting to the SMTP mail server.

Here’s the log:
Dec 20 11:08:39 vpn01 postfix/smtpd[3156]: lost connection after CONNECT from unknown[65.55.41.7]
Dec 20 11:08:39 vpn01 postfix/smtpd[3156]: disconnect from unknown[65.55.41.7]
Dec 20 11:08:39 vpn01 postfix/smtpd[3156]: connect from unknown[65.55.41.7]
Dec 20 11:08:39 vpn01 postfix/smtpd[3156]: setting up TLS connection from unknown[65.55.41.7]
Dec 20 11:08:39 vpn01 postfix/smtpd[3156]: unknown[65.55.41.7]: TLS cipher list “ALL:!EXPORT:!LOW:+RC4:@STRENGTH”
Dec 20 11:08:39 vpn01 postfix/smtpd[3156]: SSL_accept:before/accept initialization
Dec 20 11:08:39 vpn01 postfix/smtpd[3156]: read from 7F629C886490 [7F629C8C2840] (11 bytes => -1 (0xFFFFFFFFFFFFFFFF))
Dec 20 11:08:41 vpn01 postfix/smtpd[3156]: SSL_accept error from unknown[65.55.41.7]: -1
Dec 20 11:08:41 vpn01 postfix/smtpd[3156]: lost connection after CONNECT from unknown[65.55.41.7]
Dec 20 11:08:41 vpn01 postfix/smtpd[3156]: disconnect from unknown[65.55.41.7]

Here’s my netstat:
root@vpn01 ~]# netstat -tlunp
Active Internet connections Proto Recv-Q Send-Q Local Address tcp 0 0 0.0.0.0:465 tcp 0 0 0.0.0.0:22 tcp 0 0 0.0.0.0:25 tcp 0 0 0.0.0.0:993 tcp 0 0 0.0.0.0:995 tcp 0 0 0.0.0.0:587 tcp 0 0 0.0.0.0:110 tcp 0 0 0.0.0.0:143 tcp 0 0 0.0.0.0:111 tcp 0 0 :::22 tcp 0 0 :::993 tcp 0 0 :::995 tcp 0 0 :::110 tcp 0 0 :::143 tcp 0 0 :::111 tcp 0 0 :::80 udp 0 0 0.0.0.0:703 udp 0 0 0.0.0.0:111 udp 0 0 0.0.0.0:1194 udp 0 0 :::703 udp 0 0 :::111 [root@vpn01 ~]# (only servers)
Foreign Address State PID/Program name
0.0.0.0:* LISTEN 3147/master
0.0.0.0:* LISTEN 1020/sshd
0.0.0.0:* LISTEN 3147/master
0.0.0.0:* LISTEN 3045/dovecot
0.0.0.0:* LISTEN 3045/dovecot
0.0.0.0:* LISTEN 3147/master
0.0.0.0:* LISTEN 3045/dovecot
0.0.0.0:* LISTEN 3045/dovecot
0.0.0.0:* LISTEN 952/rpcbind
:::* LISTEN 1020/sshd
:::* LISTEN 3045/dovecot
:::* LISTEN 3045/dovecot
:::* LISTEN 3045/dovecot
:::* LISTEN 3045/dovecot
:::* LISTEN 952/rpcbind
:::* LISTEN 1131/httpd
0.0.0.0:* 952/rpcbind
0.0.0.0:* 952/rpcbind
0.0.0.0:* 978/openvpn
:::* 952/rpcbind
:::* 952/rpcbind

Connecting without SSL works fine though.

I’m not really sure what’s wrong with this. :(

Thanks,
JP

By: admin

admin — Fri, 19 Dec 2014 15:24:10 +0000

In reply to kikou. The easiest way to troubleshoot is to check your mail server's log files and see why emails to external domains are not getting sent.

By: kikou

kikou — Fri, 19 Dec 2014 09:09:14 +0000

Thank you, yes I have already added this settings in my config but not work : i can send to local domain only.. but I am not using “smtps inet” but “submission inet” .