Comments on: Configuring Postfix for TLS

By: Nick Gully

Nick Gully — Thu, 10 Apr 2008 05:10:26 +0000

Thanks for the great postfix instructions, this also works on Debian boxes.

The other item users may need to do is uncomment the line starting with #submission in the postfix master.cf file.

To get postfix listening on a secure port.
http://www.wrightthisway.com/Articles/cat_postfix.html

By: JFC

JFC — Mon, 25 Feb 2008 01:30:32 +0000

I am having a problem where the STARTTLS won’t even show up in the EHLO list. I’ve followed all your instructions from top to bottom, and still I don’t get the STARTTLS option…

I am stuck… Any ideas?

By: austin

austin — Thu, 18 Jan 2007 18:53:18 +0000

I am gettin the same error as Daniel in Apple Mail.

Jan 18 10:47:20 skooby postfix/smtpd[7581]: SSL_accept error from xxx.xxx.com[xx.xx.xx.xx]: -1
Jan 18 10:47:20 skooby postfix/smtpd[7581]: lost connection after STARTTLS from xxx.xxx.com[xx.xx.xx.xx]

IMAP works fine, but cant seem to connect to send mail. Any ideas?

-austin

By: Daniel Fasel

Daniel Fasel — Wed, 19 Jul 2006 20:19:58 +0000

Hi Richard,

I set up now the ISP on an Intel Mac. It work fine but:

When I use TLS in the smtp configuration to send a mail from the Mail.app in Mac and from Outlook on a Win machine everthing work fine, but when I use Thunderbird I can not use the TLS encryption. I always got an SSL accept error -1 in the mail log. Do you have any ideas what this can be??

Thanks

Dani

By: Dennis

Dennis — Sat, 15 Apr 2006 04:53:38 +0000

I have spent endless hours and can’t get the telnet to port 25 to work. I get the same error.

telnet: connect to address 192.168.0.3: Connection refused
telnet: Unable to connect to remote host

network utility port scan only shows port 80 open in the server. I have tried the Apple firewall, Flying Butress, sbin/service and can’t get past the error. any suggestion would be appreciated.

Thanks,
Dennis

By: Tim

Tim — Mon, 06 Feb 2006 18:10:45 +0000

Hey — getting an error when I try to test in the console stating it cannot find /etc/srvtab — and the SMTP session returns a response of failure do to internal error. While checking — I found that message means that tls is configured to use kerberos… fairly sure I followed the steps… seend this? The smtpd.conf file was created which should have told it what types of auth to accept correct? Do we somehow need to not include kerberos on the compile? Thanks! Great site!

Richard5: The problem is solved, Tim needed to recreate his certificate and add a line he forgot to the configuration file.