SSL relay port user account

[Anonymous]

Hi
My ISP is changenig to SSL and port and user account to be used for mail relay.
I have tryed to configure scrollout to use SSL but no success.
Is there any config guide for this what to change.
I have run Scrollout for many years with no problems.

[Marius Gologan]

please add this directive in /etc/postfix/main.cf and restart postfix:
smtp_sasl_security_options = noanonymous

[Anonymous]

Hi Marius

Tryed that but getting still (lost connection with xx.xx.xx)
Where is the port (465) and user/password inserted (Smarthost or in outbound configuration).

[Anonymous]

Hi Marius

I notice if i put the smtp_sasl_security_options = noanonymous in /etc/postfix/main.cf.
After reboot it is gone (smtp_sasl_security_options =) back to basics.

[Marius Gologan]

I'm starting to think you are not estabilishing any connection at all. Might not be related to encryption.
In smart host, add [ips-server.isp-domain.com]:port-number

[Anonymous]

I have added the new address, port number,useraname passwor ipsserver.isp.xx:465
tryed in both ones but getting connection lost all time.
Is there any parameters for timeout to be set anyware, seems that it is dropping before connection finnished.

[Marius Gologan]

Set this in /etc/postfix/main.cf:
smtp_connect_timeout = nn (seconds)
/etc/init.d/postfix reload

[Anonymous]

These are the timeout set in /etc/postfix/main.cf
smtpd_tls_session_cache_timeout = ${stress?7200}${stress:3600}s
smtp_helo_timeout=1200
smtp_connect_timeout=120 (60 default)

Nov 7 18:45:25 Servername postfix/smtp[9001]: 3ntQwC3TCvz12sh: lost connection with ipssever.ispserver.xx[x.x.x.x] while receiving the initial server greeting
Nov 7 18:45:35 Servername postfix/smtp[9001]: 3ntQwC3TCvz12sh: to=x@xx.xx, relay=ipsserver.ispserver.xx.se[xx.xx.xx.xx]:465, delay=20, delays=0.02/0.38/20/0, dsn=4.4.2, status=deferred (lost connection with ipsserver.ispserver.xx.se[xx.xx.xx.xx] while receiving the initial server greeting)​

[Anonymous]

Telnet to ISP mail relay server throug port 465.

root@Servername:/etc/postfix# telnet ipsserver.ispserver.xx.se 465
Trying xx.xx.xx.xx...
Connected to ipsserver.ispserver.xx.

[Anonymous]

Tested with openssl command
-----END CERTIFICATE-----
subject=/OU=Domain Control Validated/OU=PositiveSSL Multi-Domain/CN=www.bahnhof.se
issuer=/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA
---
No client certificate CA names sent
---
SSL handshake has read 4887 bytes and written 424 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES256-GCM-SHA384
Session-ID: 76E29357C048EB536A0B957ADFC282B7AC73E845E97BD97CFC0BC763F8
Session-ID-ctx:
Master-Key: E1AD19141CCB969BE868512FC7B596DAC4B3C17600A1B18203257E7E8AA6EF5A93464C751F2BD53CEDDC26F3A
Key-Arg : None
PSK identity: None
PSK identity hint: None
SRP username: None
Start Time: 1446922424
Timeout : 300 (sec)
Verify return code: 20 (unable to get local issuer certificate)
---
220 xx.xx.xx
HELO
501 Syntax: HELO hostname
helo XXXXXX
250 xx.xx.xx

[Anonymous]

Checked this but have not found any answer, 465 unimplimented?. then connecting to 587, my IPS do not support this port number.

CLIENT wrappermode (port smtps/465) is unimplemented
Nov 7 19:10:44 Servername postfix/smtp[24440]: instead, send to (port submission/587) with STARTTLS

[Marius Gologan]

Scrollout should connect to the port mentioned in the GUI settings. It should connect to a different port:
[remote.server.com]:465

[Anonymous]

HI
I have configured this in gui as smarthost with port 465. When sendin mail it tryes to connect to port 465 unimplimented, after that tryes 587, not supported by my ISP. Then i get lost connection while reciving initial server greeting.