Re: [Fetchmail-users] help with gmx and starttls

[Stefan L. <S....@gm...>]

Am Samstag, 20. September 2014, 19:33:19 schrieb Matthias Andree:
> Am 20.09.2014 um 16:34 schrieb Stefan Liebl:
> > I'm just setting up my new server since my old one broke down. I'm stuck
> > at  getting fetchmail to work. I'm getting the following messages in the
> > logfile:
> > 
> > fetchmail[5376]: reading message xx...@gm...@pop.gmx.net:1 of 69 (3255
> > octets) (log message incomplete)
> > fetchmail[5376]: SMTP error: 530 5.7.0 Must issue a STARTTLS command first
> 
> The problem is not the inbound path, but the outbound path ("SMTP").
> 
> Your MTA does not accept mail from localhost through an unencrypted
> connection.  You might consider permitting non-TLS through the loopback
> interface, if someone can sniff that, he can do anything else on your
> computer as well.
> 
> Fetchmail does not currently support TLS-wrapped or STARTTLS on the SMTP
> side.

Thanks, so I could find the bug. In /etc/postfix/main.cf I had a typo in the 
parameter
smtp_tls_sercrity_level = may
it has to be
smtpd_tls_security_level = may

So now it work as desiried. Would have been nice, if postfix had given an error 
message.

Stefan