CentOS - Nov 2008 - Sendmail - STARTTLS not appear on one client

Hi,

I have Sendmail configured to use STARTTLS for authentication. On all
internet connections and computers (that I have tested) works
connection over encrypted SMTP flawlessly. Today I was setting up mail
client on PC of my customer and standardily checked boxes, that I want
to use SSL for POP3 and SMTP. Next I wanted to check configuration (by
sending email from this mailbox to this mailbox) but it does not work.

So I have opened telnet, connected via port 25 and writed "ehlo
hostname" and then finded out, that there is missing STARTTLS. Is
possible, that some bad configuration on client side (firewall,
etc...) can cause this error including that this function is missing
in printout of ehlo? POP3S working good.
>From Sendmail log (/var/log/maillog):
Nov 28 19:31:23 server sendmail[11163]: xxx:
xxxxx.jizmorava.adsl-llu.static.bluetone.cz [85.207.xxx.211] did not
issue MAIL/EXPN/VRFY/ETRN during connection to MTA


Thank you very much

happymaster23 wrote:
> So I have opened telnet, connected via port 25 and writed "ehlo
> hostname" and then finded out, that there is missing STARTTLS. Is
> possible, that some bad configuration on client side (firewall,
> etc...) can cause this error including that this function is missing
> in printout of ehlo? 
Please *do not* show any configuration files when asking questions on a
mailing list. The bug hunters here will be unhappy if they get any hints on
what could be wrong in your setup.
> POP3S working good.
Yes, but that has nothing to do with sendmail. 
> >From Sendmail log (/var/log/maillog):
> 
> Nov 28 19:31:23 server sendmail[11163]: xxx:
> xxxxx.jizmorava.adsl-llu.static.bluetone.cz [85.207.xxx.211] did not
> issue MAIL/EXPN/VRFY/ETRN during connection to MTA
That doesn't have to do anything with the issue either.

Ralph
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 194 bytes
Desc: not available
URL:
<http://lists.centos.org/pipermail/centos/attachments/20081130/c3aa0dbd/attachment-0003.sig>

On Fri, Nov 28, 2008 at 11:30 PM, happymaster23 <happymaster23 at
gmail.com> wrote:
> Hi,
>
> I have Sendmail configured to use STARTTLS for authentication. On all
> internet connections and computers (that I have tested) works
> connection over encrypted SMTP flawlessly. Today I was setting up mail
> client on PC of my customer and standardily checked boxes, that I want
> to use SSL for POP3 and SMTP. Next I wanted to check configuration (by
> sending email from this mailbox to this mailbox) but it does not work.
>
> So I have opened telnet, connected via port 25 and writed "ehlo
> hostname" and then finded out, that there is missing STARTTLS. Is
> possible, that some bad configuration on client side (firewall,
> etc...) can cause this error including that this function is missing
> in printout of ehlo? POP3S working good.
>
Hi,

I have seen this kind of problem (STARTTLS not available for a single
client but working for everyone else) when the client is behind a
CISCO firewall with the FIXUP SMTP configuration option enabled.
Disable it using "no fixup protocol smtp 25" on the firewall and try
again.

Regards,

Radu