Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

CentOS 5.x | Sendmail

Hi Guys,

I have sendmail setup to perform opportunistic TLS but would like to never use TLS when sending to a specific domain. Is there an entry I can add to /etc/mail/access to tell the server not to use it (regardless of whether or not the receiving MTA advertises support)?


share|improve this question
Just out of curiosity, why? – Chris S Jul 12 '10 at 20:33
One reason: There exists broekn/misconfigured mail servers (for instance, that will reject mail coming in on the SMTPS port. (different MikeyB, BTW) – MikeyB Jul 12 '10 at 20:38
TLS doesn't operate on the SMTPS (SSL) port, but I suppose it would be possible to configure a server such that encrypted sessions need to authenticate; which yours is obviously not looking to do. Good call on the "misconfigured server". – Chris S Jul 12 '10 at 22:33
Rigid change management structure. =) – Mike B Jul 13 '10 at 20:25
Thinkoed there - still rather annoyed at their misconfiguration :) – MikeyB Jul 14 '10 at 13:28
up vote 4 down vote accepted

In the /etc/mail/access file, add the line:

Try_TLS:broken.server   NO
share|improve this answer
Thanks. This is exactly what I needed. Good name btw ;-) – Mike B Jul 13 '10 at 20:28
Go Team Mike B! :D – MikeyB Jun 27 '14 at 20:07

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.