Am Mi, den 30.11.2005 schrieb Hongwei Li um 21:32:
> Hongwei
Pleas read a howto for enabling SMTP AUTH running Sendmail, i.e.
following
http://www.joreybump.com/code/howto/smtpauth.html
Just note that the location of the TLS certificates changes with FC4
release. So if you offer STARTTLS to secure insecure AUTH mechanisms
LOGIN and PLAIN (Outlook and OE can't use secure MD5 mechanisms) - which
is highly recommended to be secured - make sure you define the propers
paths.
Alexander
My system is fc3 linux, using sendmail-8.13.1-2 as email server.
I followed the steps on that web page:
# cd /usr/share/ssl/certs/
# make sendmail.pem
... (I put our server's fully qualified domain name for the Common Name prompt)
# chkconfig saslauthd on
# service saslauthd restart
# cd /etc/mail/
# vi sendmail.mc
(changes:
define(`confAUTH_OPTIONS', `A p y')dnl
TRUST_AUTH_MECH(`LOGIN PLAIN')dnl
define(`confAUTH_MECHANISMS', `LOGIN PLAIN')dnl
define(`confCACERT_PATH',`/usr/share/ssl/certs')
define(`confCACERT',`/usr/share/ssl/certs/ca-bundle.crt')
define(`confSERVER_CERT',`/usr/share/ssl/certs/sendmail.pem')
define(`confSERVER_KEY',`/usr/share/ssl/certs/sendmail.pem')
define(`confLOG_LEVEL', `14')dnl
)
# m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf
# service sendmail restart
Then, I set a guest Outlook account by checking the boxes under Advanced
Setting page:
Incoming server (POP3) -- This server requires an encrypted connection (SSL)
-- the port changes from 110 to 995
Outgoing server (SMTP) -- This server requires an encrypted connection (SSL)
-- the port number remains as 25
When I check the incoming emails, it shows the message about server
certificate. I click Yes to continue, then it received all incoming emails.
However, when I try to send email out, I first see the message:
"An encrypted email connection has been detected...." I click OK, but failed
sending email out. The error message is:
... error (0x800CCC7D): "Your outgoing (SMTP) server does not support
SSL-encrypted connection....
The system maillog shows:
...
Dec 1 10:07:52 morpheus sendmail[26574]: jB1G7ogu026574: Milter accept: message
Dec 1 10:07:52 morpheus sendmail[26578]: jB1G7pt6026578: [128.252.85.103] did
not issue MAIL/EXPN/VRFY/ETRN during connectio
n to MTA
Dec 1 10:07:52 morpheus sendmail[26602]: NOQUEUE: connect from [128.252.85.103]
Dec 1 10:07:52 morpheus sendmail[26602]: AUTH: available mech=CRAM-MD5
DIGEST-MD5, allowed mech=LOGIN PLAIN
Dec 1 10:07:52 morpheus sendmail[26602]: jB1G7q7s026602: Milter (greylist):
init success to negotiate
Dec 1 10:07:52 morpheus sendmail[26602]: jB1G7q7s026602: Milter: connect to
filtersDec 1 10:07:52 morpheus sendmail[26602]: jB1G7q7s026602:
milter=greylist, action=connect, continue
Dec 1 10:07:52 morpheus sendmail[26602]: jB1G7q7s026602: [128.252.85.103] did
not issue MAIL/EXPN/VRFY/ETRN during connectio
n to MTA
Dec 1 10:07:52 morpheus sendmail[26605]: NOQUEUE: connect from [128.252.85.103]
Dec 1 10:07:52 morpheus sendmail[26605]: AUTH: available mech=CRAM-MD5
DIGEST-MD5, allowed mech=LOGIN PLAIN
Dec 1 10:07:52 morpheus sendmail[26605]: jB1G7qFh026605: Milter (greylist):
init success to negotiate
Dec 1 10:07:52 morpheus sendmail[26605]: jB1G7qFh026605: Milter: connect to
filtersDec 1 10:07:52 morpheus sendmail[26605]: jB1G7qFh026605:
milter=greylist, action=connect, continue
Dec 1 10:07:52 morpheus sendmail[26605]: jB1G7qFh026605: [128.252.85.103] did
not issue MAIL/EXPN/VRFY/ETRN during connectio
n to MTA
...
Did I miss something? Thanks for all help!
Hongwei