Re: [exim] TLS errors on SMTP (non-AUTH) connections

Top Page
Delete this message
Reply to this message
Author: Graeme Fowler
Date:  
To: exim-users
Subject: Re: [exim] TLS errors on SMTP (non-AUTH) connections
On Wed, 2007-01-31 at 11:47 -0700, Vincent Danen wrote:
> I'm a little bit stumped on this one:
>
> 2007-01-28 10:19:23 1HBDbg-00013F-1T TLS error on connection to hostgator.com [67.18.54.2]: SSL_connect timed out
> 2007-01-28 10:19:23 1HBDbg-00013F-1T TLS session failure: delivering unencrypted to hostgator.com [67.18.54.2] (not in hosts_require_tls)
> ...
> 2007-01-28 10:24:25 1HBDbg-00013F-1T == sales@??? R=dnslookup T=remote_smtp defer (110): Connection timed out: SMTP timeout while connected to hostgator.com [67.18.54.2] after MAIL FROM:<vdanen@???> SIZE=4721
>
> Why would I be getting an error like that? Is the remote host requiring
> SSL or a STARTTLS connection in order to deliver mail (this is something
> I wrote, sent to my server to relay, and now it's sitting in my queue
> with multiple errors like the above).



http://www.exim.org/exim-html-4.66/doc/html/spec_html/ch39.html#id2704587

"It is not necessary to set any options to have TLS work in the smtp
transport. If Exim is built with TLS support, and TLS is advertised by a
server, the smtp transport always tries to start a TLS session. However,
this can be prevented by setting hosts_avoid_tls (an option of the
transport) to a list of server hosts for which TLS should not be used."

# turn off TLS on SMTP sending
hosts_avoid_tls = *

# turn off TLS on SMTP sending for hostgator.com
hosts_avoid_tls = 67.18.54.2

The usual hostlist rules apply.

Graeme