<div dir="ltr"><div><div>Hi,<br><br></div>The problem was because you used port 465 (SSL) instead of 587 (STARTTLS). It doesn't seem that 1&1 smtp supports connection on port 465.<br><br></div>Flo<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, May 15, 2018 at 12:16 PM, Alix Janeth Jerez <span dir="ltr"><<a href="mailto:alixj@hotmail.com" target="_blank">alixj@hotmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Hi Flo:</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Thanks for replying.</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
With gmail account it works ok. </div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
I setted 1and1 mail account in outlook client with the parameters <a href="http://smtp.1and1.es" target="_blank">smtp.1and1.es</a> port 587 and I can send and receive emails.</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Thanks a lot.</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Best regards,</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<hr style="display:inline-block;width:98%">
<div id="m_8540764756137404635divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" color="#000000" face="Calibri, sans-serif"><b>De:</b> Flo Rance <<a href="mailto:trourance@gmail.com" target="_blank">trourance@gmail.com</a>><br>
<b>Enviado:</b> martes, 15 de mayo de 2018 10:04<br>
<b>Para:</b> Alix Janeth Jerez<br>
<b>Cc:</b> <a href="mailto:stunnel-users@stunnel.org" target="_blank">stunnel-users@stunnel.org</a><br>
<b>Asunto:</b> Re: [stunnel-users] Error with negotiation OK</font>
<div> </div>
</div><div><div class="h5">
<div>
<div dir="ltr">
<div>
<div>
<div>Hi,<br>
<br>
</div>
IMO, this problem has nothing to do with stunnel.<br>
<br>
</div>
There are plenty of issues reported on the web, most of them related to Outlook.</div>
<div><br>
</div>
<div>Does it happen with all email addresses or a specific one ?</div>
<div><br>
</div>
Flo<br>
</div>
<div class="m_8540764756137404635x_gmail_extra"><br>
<div class="m_8540764756137404635x_gmail_quote">On Tue, May 15, 2018 at 9:56 AM, Alix Janeth Jerez <span dir="ltr">
<<a href="mailto:alixj@hotmail.com" target="_blank">alixj@hotmail.com</a>></span> wrote:<br>
<blockquote class="m_8540764756137404635x_gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
Hi</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
I am using lastest stunnel version. </div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
When i try to send an email, i get:</div>
<div style="font-family:Calibri,Helvetica,sans-serif;font-size:12pt;color:rgb(0,0,0)">
<br>
</div>
<font size="2"><span style="font-size:11pt">
<div class="m_8540764756137404635x_m_-4408617104924563179PlainText"><b>"error permanente de SMTP: 503 Bad sequence of commands".</b><br>
<br>
This is the trace generated when I try to send an email.<br>
</div>
<div class="m_8540764756137404635x_m_-4408617104924563179PlainText"><br>
<span style="font-size:8pt"> 2018.05.14 12:59:08 LOG5[main]: Reading configuration from file stunnel.conf</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:08 LOG5[main]: UTF-8 byte order mark not detected</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:08 LOG5[main]: FIPS mode disabled</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:08 LOG5[main]: Configuration successful</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:08 LOG7[main]: Binding service [pseudo-ssmtp]</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:08 LOG7[main]: Listening file descriptor created (FD=568)</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:08 LOG7[main]: Option SO_EXCLUSIVEADDRUSE set on accept socket</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:08 LOG7[main]: Service [pseudo-ssmtp] (FD=568) bound to
<a href="http://172.31.41.84:116" target="_blank">172.31.41.84:116</a></span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:08 LOG7[main]: Signal pipe is empty</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG7[main]: Found 1 ready file descriptor(s)</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG7[main]: FD=324 ifds=r-x ofds=r--</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG7[main]: Dispatching signals from the signal pipe</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG7[main]: Processing SIGNAL_RELOAD_CONFIG</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG7[main]: Running on Windows 6.1</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG5[main]: Reading configuration from file stunnel.conf</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG5[main]: UTF-8 byte order mark not detected</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG5[main]: FIPS mode disabled</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG7[main]: Compression disabled</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG7[main]: Snagged 64 random bytes from C:/.rnd</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG7[main]: Wrote 1024 new random bytes to C:/.rnd</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG7[main]: PRNG seeded successfully</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG6[main]: Initializing service [pseudo-ssmtp]</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG7[main]: Ciphers: HIGH:!DH:!aNULL:!SSLv2</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG7[main]: TLS options: 0x03000004 (+0x03000000, 0x00000000)</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG6[main]: Loading certificate from file: stunnel.pem</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG6[main]: Certificate loaded from file: stunnel.pem</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG6[main]: Loading private key from file: stunnel.pem</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG6[main]: Private key loaded from file: stunnel.pem</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG7[main]: Private key check succeeded</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG5[main]: Configuration successful</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG7[main]: Unbinding service [pseudo-ssmtp]</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG7[main]: Service [pseudo-ssmtp] closed (FD=568)</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG7[main]: Service [pseudo-ssmtp] closed</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG7[main]: Binding service [pseudo-ssmtp]</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG7[main]: Listening file descriptor created (FD=568)</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG7[main]: Option SO_EXCLUSIVEADDRUSE set on accept socket</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG7[main]: Service [pseudo-ssmtp] (FD=568) bound to
<a href="http://172.31.41.84:116" target="_blank">172.31.41.84:116</a></span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:22 LOG7[main]: Signal pipe is empty</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:34 LOG7[main]: Found 1 ready file descriptor(s)</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:34 LOG7[main]: FD=324 ifds=r-x ofds=---</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:34 LOG7[main]: Service [pseudo-ssmtp] accepted (FD=584) from
<a href="http://172.31.41.84:53557" target="_blank">172.31.41.84:53557</a></span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:34 LOG7[main]: Creating a new thread</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:34 LOG7[main]: New thread created</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:34 LOG7[37]: Service [pseudo-ssmtp] started</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:34 LOG7[37]: Option TCP_NODELAY set on local socket</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:34 LOG5[37]: Service [pseudo-ssmtp] accepted connection from
<a href="http://172.31.41.84:53557" target="_blank">172.31.41.84:53557</a></span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:34 LOG6[37]: failover: round-robin, starting at entry #1</span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:34 LOG6[37]: s_connect: connecting <a href="http://212.227.15.158:465" target="_blank">
212.227.15.158:465</a></span><br>
<span style="font-size:8pt"> 2018.05.14 12:59:34 LOG7[37]: s_connect: s_poll_wait
<a href="http://212.227.15.158:465" target="_blank">212.227.15.158:465</a>: waiting 10 seconds</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG5[37]: s_connect: connected <a href="http://212.227.15.158:465" target="_blank">
212.227.15.158:465</a></span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG5[37]: Service [pseudo-ssmtp] connected remote server from
<a href="http://172.31.41.84:53558" target="_blank">172.31.41.84:53558</a></span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG7[37]: Option TCP_NODELAY set on remote socket</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG7[37]: Remote descriptor (FD=552) initialized</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG6[37]: SNI: sending servername:
<a href="http://smtp.1and1.es" target="_blank">smtp.1and1.es</a></span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG6[37]: Peer certificate required</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG7[37]: TLS state (connect): before/connect initialization</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG7[37]: TLS state (connect): SSLv2/v3 write client hello A</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG7[37]: TLS state (connect): SSLv3 read server hello A</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG7[37]: Verification started at depth=2: C=US, O="thawte, Inc.", OU=Certification Services Division, OU="(c) 2006 thawte, Inc. - For authorized use only", CN=thawte Primary Root CA</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG7[37]: CERT: Pre-verification succeeded</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG7[37]: OCSP: Ignoring root certificate</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG6[37]: Certificate accepted at depth=2: C=US, O="thawte, Inc.", OU=Certification Services Division, OU="(c) 2006 thawte, Inc. - For authorized use only", CN=thawte Primary Root CA</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG7[37]: Verification started at depth=1: C=US, O="thawte, Inc.", CN=thawte SSL CA - G2</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG7[37]: CERT: Pre-verification succeeded</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG5[37]: OCSP: Connecting the AIA responder "</span><a href="http://t2.symcb.com" target="_blank"><span style="font-size:8pt">http://t2.symcb.com</span></a><span style="font-size:8pt">"</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG6[37]: s_connect: connecting <a href="http://23.5.251.27:80" target="_blank">
23.5.251.27:80</a></span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG7[37]: s_connect: s_poll_wait <a href="http://23.5.251.27:80" target="_blank">
23.5.251.27:80</a>: waiting 10 seconds</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG5[37]: s_connect: connected <a href="http://23.5.251.27:80" target="_blank">
23.5.251.27:80</a></span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG7[37]: OCSP: Connected <a href="http://t2.symcb.com:80" target="_blank">
t2.symcb.com:80</a></span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG7[37]: OCSP: Response received</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG6[37]: OCSP: Status: good</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG6[37]: OCSP: This update: May 13 18:15:02 2018 GMT</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG6[37]: OCSP: Next update: May 20 18:15:02 2018 GMT</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG5[37]: OCSP: Certificate accepted</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG6[37]: Certificate accepted at depth=1: C=US,
</span><span style="font-size:8pt">O="thawte, Inc.", CN=thawte SSL CA - G2</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG7[37]: Verification started at depth=0: C=DE, ST=Rheinland-Pfalz, L=Montabaur, O=1&1 Internet SE, CN=<a href="http://smtp.1and1.es" target="_blank">smtp.1and1.es</a></span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG7[37]: CERT: Pre-verification succeeded</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG6[37]: CERT: Host name "<a href="http://smtp.1and1.es" target="_blank">smtp.1and1.es</a>" matched with "<a href="http://smtp.1and1.es" target="_blank">smtp.1and1.es</a>"</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG5[37]: OCSP: Connecting the AIA responder "</span><a href="http://tj.symcd.com" target="_blank"><span style="font-size:8pt">http://tj.symcd.com</span></a><span style="font-size:8pt">"</span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG6[37]: s_connect: connecting <a href="http://23.5.251.27:80" target="_blank">
23.5.251.27:80</a></span><br>
<span style="font-size:8pt">2018.05.14 12:59:34 LOG7[37]: s_connect: s_poll_wait <a href="http://23.5.251.27:80" target="_blank">
23.5.251.27:80</a>: waiting 10 seconds</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG5[37]: s_connect: connected <a href="http://23.5.251.27:80" target="_blank">
23.5.251.27:80</a></span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG7[37]: OCSP: Connected <a href="http://tj.symcd.com:80" target="_blank">
tj.symcd.com:80</a></span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG7[37]: OCSP: Response received</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG6[37]: OCSP: Status: good</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG6[37]: OCSP: This update: May 14 01:38:59 2018 GMT</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG6[37]: OCSP: Next update: May 21 01:38:59 2018 GMT</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG5[37]: OCSP: Certificate accepted</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG5[37]: Certificate accepted at depth=0: C=DE, ST=Rheinland-Pfalz, L=Montabaur, O=1&1 Internet SE, CN=<a href="http://smtp.1and1.es" target="_blank">smtp.1and1.es</a></span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG7[37]: TLS state (connect): SSLv3 read server certificate A</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG7[37]: TLS state (connect): SSLv3 read server key exchange A</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG6[37]: Client certificate not requested</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG7[37]: TLS state (connect): SSLv3 read server done A</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG7[37]: TLS state (connect): SSLv3 write client key exchange A</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG7[37]: TLS state (connect): SSLv3 write change cipher spec A</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG7[37]: TLS state (connect): SSLv3 write finished A</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG7[37]: TLS state (connect): SSLv3 flush data</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG7[37]: TLS state (connect): SSLv3 read finished A</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG7[37]: 1 client connect(s) requested</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG7[37]: 1 client connect(s) succeeded</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG7[37]: 0 client renegotiation(s) requested</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG7[37]: 0 session reuse(s)</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG6[37]: TLS connected: new session negotiated</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG7[37]: Peer certificate was cached (5543 bytes)</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG6[37]: Negotiated TLSv1.2 ciphersuite ECDHE-RSA-AES256-GCM-SHA384 (256-bit encryption)</span><br>
<span style="font-size:8pt">2018.05.14 12:59:35 LOG7[37]: Compression: null, expansion: null</span><br>
<span style="font-size:8pt">2018.05.14 12:59:53 LOG3[36]: transfer: s_poll_wait: TIMEOUTclose exceeded: closing</span><br>
<span style="font-size:8pt">2018.05.14 12:59:53 LOG5[36]: Connection closed: 15 byte(s) sent to TLS, 166 byte(s) sent to socket</span><br>
<br>
</div>
<div class="m_8540764756137404635x_m_-4408617104924563179PlainText">I can't find the error.</div>
<div class="m_8540764756137404635x_m_-4408617104924563179PlainText"><br>
</div>
<div class="m_8540764756137404635x_m_-4408617104924563179PlainText">Thanks in advance for your help.</div>
<div class="m_8540764756137404635x_m_-4408617104924563179PlainText"><br>
</div>
<div class="m_8540764756137404635x_m_-4408617104924563179PlainText"><br>
</div>
<div class="m_8540764756137404635x_m_-4408617104924563179PlainText">Best regards,</div>
<div class="m_8540764756137404635x_m_-4408617104924563179PlainText"><br>
</div>
<div class="m_8540764756137404635x_m_-4408617104924563179PlainText">Alix</div>
</span></font></div>
<br>
______________________________<wbr>_________________<br>
stunnel-users mailing list<br>
<a href="mailto:stunnel-users@stunnel.org" target="_blank">stunnel-users@stunnel.org</a><br>
<a href="https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users" rel="noreferrer" target="_blank">https://www.stunnel.org/cgi-bi<wbr>n/mailman/listinfo/stunnel-use<wbr>rs</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div></div></div>
</blockquote></div><br></div>