-2

I built my mailserver on a vserver after the ISPmail tutorial (https://workaround.org/ispmail/wheezy) (which is awesome). The only remaining problem is that it does not seem to use TLS with outgoing mail according to websites such as https://ssl-tools.net/mails and other checking tools. My actual problems is that I do not know where to search for more revealing logs because mail.log is not very helpful in this case (when sending out a mail offering starttls and it just does not get accepted).

What does work: sending and receiving mail with various clients, using the cert from startssl for webserver HTTPS, DNS + reverse DNS, IPv6.

What could be a problem: the servers hostname is xy. I have domain.de and xy.domain.de in the cert while xy.domain.de does not exist in DNS. (Domain reseller giving me only the SLD and sells the feature "subdomains" only in the "build your shiny webserver" kit). But domain.de points to the server IP and vice versa.

  • 2
    What is output of postconf smtp_tls_security_level? – Marki555 Jun 18 '15 at 19:28
1

thanks marki555

smtp_tls_security_level must be set to "may" or higher. somehow I had configured smtpd_tls_security_level.

now works as expected.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.