up vote 2 down vote favorite
share [g+] share [fb]

CentOS 5.x | Sendmail

Hi Guys,

I have sendmail setup to perform opportunistic TLS but would like to never use TLS when sending to a specific domain. Is there an entry I can add to /etc/mail/access to tell the server not to use it (regardless of whether or not the receiving MTA advertises support)?

M

link|improve this question
75% accept rate
Just out of curiosity, why? – Chris S♦ Jul 12 '10 at 20:33
1  
One reason: There exists broekn/misconfigured mail servers (for instance, iqc3.math.uwaterloo.ca) that will reject mail coming in on the SMTPS port. (different MikeyB, BTW) – MikeyB Jul 12 '10 at 20:38
TLS doesn't operate on the SMTPS (SSL) port, but I suppose it would be possible to configure a server such that encrypted sessions need to authenticate; which yours is obviously not looking to do. Good call on the "misconfigured server". – Chris S♦ Jul 12 '10 at 22:33
Rigid change management structure. =) – Mike B Jul 13 '10 at 20:25
Thinkoed there - still rather annoyed at their misconfiguration :) – MikeyB Jul 14 '10 at 13:28
feedback

1 Answer

up vote 1 down vote accepted

In the /etc/mail/access file, add the line:

Try_TLS:broken.server   NO
link|improve this answer
Thanks. This is exactly what I needed. Good name btw ;-) – Mike B Jul 13 '10 at 20:28
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.