3

CentOS 5.x | Sendmail

Hi Guys,

I have sendmail setup to perform opportunistic TLS but would like to never use TLS when sending to a specific domain. Is there an entry I can add to /etc/mail/access to tell the server not to use it (regardless of whether or not the receiving MTA advertises support)?

M

5
  • Just out of curiosity, why?
    – Chris S
    Jul 12, 2010 at 20:33
  • 1
    One reason: There exists broekn/misconfigured mail servers (for instance, iqc3.math.uwaterloo.ca) that will reject mail coming in on the SMTPS port. (different MikeyB, BTW)
    – MikeyB
    Jul 12, 2010 at 20:38
  • TLS doesn't operate on the SMTPS (SSL) port, but I suppose it would be possible to configure a server such that encrypted sessions need to authenticate; which yours is obviously not looking to do. Good call on the "misconfigured server".
    – Chris S
    Jul 12, 2010 at 22:33
  • Rigid change management structure. =)
    – Mike B
    Jul 13, 2010 at 20:25
  • 1
    Thinkoed there - still rather annoyed at their misconfiguration :)
    – MikeyB
    Jul 14, 2010 at 13:28

1 Answer 1

8

In the /etc/mail/access file, add the line:

Try_TLS:broken.server   NO
2
  • Thanks. This is exactly what I needed. Good name btw ;-)
    – Mike B
    Jul 13, 2010 at 20:28
  • 2
    Go Team Mike B! :D
    – MikeyB
    Jun 27, 2014 at 20:07

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .