On 18 May 2011, at 22:17, Heiko Schlittermann wrote:
>
> It seems, that you configured your Exim to use tls_on_connect on port
> 587, that's what most clients do not expect.
>
> Port 25: SMTP with our without STLS
> Port 465: SMTPS
> Port 587: SMTP with our without STLS
> (should be used for mail submmission)
Hmm, port 587 should really expect STLS, given that it's supposed to require password negotiation. I know the MSA RFCs permit IP based trust mechanisms, but they really should be restricted to clients on a private local network that are not TLS capable.
--
Ian Eiloart
Postmaster, University of Sussex
+44 (0) 1273 87-3148