Re: Postfix + AUTH/TLS + Outlook/OE problem



Adrian Gonzalez wrote:
> Hello
>
> I'm seeing some very strange behavior with Outlook 2003 and Outlook
> Express trying to send mail using TLS/SMTP Auth with Postfix 2.3 and
> FreeBSD 6.1-STABLE
>
> It seems like Outlook/OE don't like the SSL handshake for some
> reason. They connect to the server, issue STARTTLS, and disconnect
> during the handshake, giving an "Error Number: 0x800CCC0B". I've
> tried both STARTTLS and using 'wrapper mode' on port 465 with the
> same results.

Which version of Outlook Express were you using? Outlook Express 6 doesn't support STARTTLS, only wrapper-mode. OE6 also also has a broken SASL implementation (set broken_sasl_auth_clients=yes). Yay for Microsoft!

Have you modified your cipher settings in postfix? FYR, Outlook XP/2003 and Outlook Express 6 prefer 128-bit RC4-MD5 and do not support AES, whereas Thunderbird supports and prefers AES256-SHA.

On my own mail server, I can send email using all four clients through STARTTLS+SASL (Outlook and Thunderbird) or SMTPS+SASL (OE). The server is FreeBSD RELENG_6_1 with the stock OpenSSL and postfix 2.3.1 with default tls_*_cipherlist settings.

Be happy to compare configs off-list, postconf -n and the like.

P.S. You may want to retry this question on postfix-users. You'll have better luck if you're willing to wade through the usual "ditch MS" rude commentary.

P.P.S. Please configure your mail client to wrap lines.

--
Darren Pilgrim
_______________________________________________
freebsd-isp@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-isp
To unsubscribe, send any mail to "freebsd-isp-unsubscribe@xxxxxxxxxxx"



Relevant Pages

  • Re: Outlook Express send error 554 recipient rejected by server
    ... When I try to send a message with Outlook Express 6, ... rejected by the server. ... They do respond on port 587, though, so you ... use STARTTLS on any port other than port 25. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: MS Outlook and SSL?
    ... MS Outlook supports STARTTLS over IMAP? ... that the server supports STARTTLS? ...
    (comp.mail.imap)
  • Re: Postfix + AUTH/TLS + Outlook/OE problem
    ... >> I'm seeing some very strange behavior with Outlook 2003 and Outlook ... There are cases when the STARTTLS ... I believe it just causes postfix to 'advertise' AUTH in the ... I suspect OE might not like what the server is offering, ...
    (freebsd-isp)
  • Re: Cant Send mail using Netscape
    ... the server. ... Netscape says it is an Outlook Express problem, ... anyone else having trouble sending mail in Outlook Express with a Netscape ... As long as you don't get an error over STARTTLS, ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • MS Outlook and SSL?
    ... MS Outlook supports STARTTLS over IMAP? ... automatically if the IMAP server sends the right header saying ... that the server supports STARTTLS? ...
    (comp.mail.imap)