-2

I built my mailserver on a vserver after the ISPmail tutorial (https://workaround.org/ispmail/wheezy) (which is awesome). The only remaining problem is that it does not seem to use TLS with outgoing mail according to websites such as https://ssl-tools.net/mails and other checking tools. My actual problems is that I do not know where to search for more revealing logs because mail.log is not very helpful in this case (when sending out a mail offering starttls and it just does not get accepted).

What does work: sending and receiving mail with various clients, using the cert from startssl for webserver HTTPS, DNS + reverse DNS, IPv6.

What could be a problem: the servers hostname is xy. I have domain.de and xy.domain.de in the cert while xy.domain.de does not exist in DNS. (Domain reseller giving me only the SLD and sells the feature "subdomains" only in the "build your shiny webserver" kit). But domain.de points to the server IP and vice versa.

1
  • 2
    What is output of postconf smtp_tls_security_level?
    – Marki555
    Jun 18, 2015 at 19:28

1 Answer 1

1

thanks marki555

smtp_tls_security_level must be set to "may" or higher. somehow I had configured smtpd_tls_security_level.

now works as expected.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .