Re: [exim] smarthost relay problems

Rob Brenart wrote:
>
> exim4 as TLS/SSL client
> ------
> Both exim4-daemon-heavy and exim4-daemon-light support TLS/SSL using the
> GnuTLS library and exim will use TLS *automatically* as client if the
> server exim connects to offers it. You can stop reading now if you are
> not setting up a mailserver which needs to offer TLS for incoming
> connections.

That's referring to standard TLS, which is served on port 25 (or 567 for
message submission), and negotiated post-connection. tls_on_connect,
which Outlook and Thunderbird refer to as "SSL", is a non-standard hack
invented by Microsoft and traditionally served on port 465. Exim
supports tls_on_connect as a server only, but not as a client.

You should file a debian bug to have that documentation clarified.

- Marc