Re: [exim] Problem with TLS connection

Top Page
Delete this message
Reply to this message
Author: Ian Eiloart
Date:  
To: Heiko Schlittermann
CC: <exim-users@exim.org>
Subject: Re: [exim] Problem with TLS connection

On 18 May 2011, at 22:17, Heiko Schlittermann wrote:

>
> It seems, that you configured your Exim to use tls_on_connect on port
> 587, that's what most clients do not expect.
>
>    Port  25:    SMTP with our without STLS
>    Port 465:    SMTPS
>    Port 587:    SMTP with our without STLS 
>                 (should be used for mail submmission)


Hmm, port 587 should really expect STLS, given that it's supposed to require password negotiation. I know the MSA RFCs permit IP based trust mechanisms, but they really should be restricted to clients on a private local network that are not TLS capable.

--
Ian Eiloart
Postmaster, University of Sussex
+44 (0) 1273 87-3148