Hi,
I have an issue when using Stunnel. Can somebody help me?
I have a module on my network that sends non-SSL e-mail but my ISP (Sympatico.ca) is accepting only SSL communication.
This is my stunnel.conf file:
cert = stunnel.pem
protocol = smtp
; Some performance tunings
socket = l:TCP_NODELAY=1
socket = r:TCP_NODELAY=1
; Some debugging stuff useful for troubleshooting
debug = 7
output = stunnel.log
; Use it for client mode
client = yes
; Service-level configuration
[smtp]
accept=192.168.1.17:25
connect = smtphm.sympatico.ca:25
And this is my log:
2011.12.13 19:55:06 LOG7[2468:1644]: Service smtp accepted FD=316 from 192.168.1.200:12149
2011.12.13 19:55:06 LOG7[2468:1644]: Creating a new thread
2011.12.13 19:55:06 LOG7[2468:1644]: New thread created
2011.12.13 19:55:06 LOG7[2468:2684]: Service smtp started
2011.12.13 19:55:06 LOG5[2468:2684]: Service smtp accepted connection from 192.168.1.200:12149
2011.12.13 19:55:06 LOG6[2468:2684]: connect_blocking: connecting 65.55.172.251:25
2011.12.13 19:55:06 LOG7[2468:2684]: connect_blocking: s_poll_wait 65.55.172.251:25: waiting 10 seconds
2011.12.13 19:55:06 LOG5[2468:2684]: connect_blocking: connected 65.55.172.251:25
2011.12.13 19:55:06 LOG5[2468:2684]: Service smtp connected remote server from 192.168.1.17:3013
2011.12.13 19:55:06 LOG7[2468:2684]: Remote FD=392 initialized
2011.12.13 19:55:06 LOG6[2468:2684]: Client-mode smtp protocol negotiations started
2011.12.13 19:55:06 LOG7[2468:2684]: <- 220 BLU0-SMTP6.phx.gbl Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Tue, 13 Dec 2011 16:55:06 -0800
2011.12.13 19:55:06 LOG7[2468:2684]: -> 220 BLU0-SMTP6.phx.gbl Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Tue, 13 Dec 2011 16:55:06 -0800
2011.12.13 19:55:06 LOG7[2468:2684]: -> EHLO localhost
2011.12.13 19:55:06 LOG7[2468:2684]: <- 250-BLU0-SMTP6.phx.gbl Hello [65.94.163.170]
2011.12.13 19:55:06 LOG7[2468:2684]: <- 250-TURN
2011.12.13 19:55:06 LOG7[2468:2684]: <- 250-SIZE 41943040
2011.12.13 19:55:06 LOG7[2468:2684]: <- 250-ETRN
2011.12.13 19:55:06 LOG7[2468:2684]: <- 250-PIPELINING
2011.12.13 19:55:06 LOG7[2468:2684]: <- 250-DSN
2011.12.13 19:55:06 LOG7[2468:2684]: <- 250-ENHANCEDSTATUSCODES
2011.12.13 19:55:06 LOG7[2468:2684]: <- 250-8bitmime
2011.12.13 19:55:06 LOG7[2468:2684]: <- 250-BINARYMIME
2011.12.13 19:55:06 LOG7[2468:2684]: <- 250-CHUNKING
2011.12.13 19:55:06 LOG7[2468:2684]: <- 250-VRFY
2011.12.13 19:55:06 LOG7[2468:2684]: <- 250-TLS
2011.12.13 19:55:06 LOG7[2468:2684]: <- 250-STARTTLS
2011.12.13 19:55:06 LOG7[2468:2684]: <- 250 OK
2011.12.13 19:55:06 LOG7[2468:2684]: -> STARTTLS
2011.12.13 19:55:06 LOG7[2468:2684]: <- 220 2.0.0 SMTP server ready
2011.12.13 19:55:06 LOG6[2468:2684]: Client-mode smtp protocol negotiations succeeded
2011.12.13 19:55:06 LOG7[2468:2684]: SSL state (connect): before/connect initialization
2011.12.13 19:55:06 LOG7[2468:2684]: SSL state (connect): SSLv3 write client hello A
2011.12.13 19:55:06 LOG7[2468:2684]: SSL state (connect): SSLv3 read server hello A
2011.12.13 19:55:06 LOG7[2468:2684]: SSL state (connect): SSLv3 read server certificate A
2011.12.13 19:55:06 LOG7[2468:2684]: SSL state (connect): SSLv3 read server done A
2011.12.13 19:55:06 LOG7[2468:2684]: SSL state (connect): SSLv3 write client key exchange A
2011.12.13 19:55:06 LOG7[2468:2684]: SSL state (connect): SSLv3 write change cipher spec A
2011.12.13 19:55:06 LOG7[2468:2684]: SSL state (connect): SSLv3 write finished A
2011.12.13 19:55:06 LOG7[2468:2684]: SSL state (connect): SSLv3 flush data
2011.12.13 19:55:07 LOG7[2468:2684]: SSL state (connect): SSLv3 read finished A
2011.12.13 19:55:07 LOG7[2468:2684]: 1 items in the session cache
2011.12.13 19:55:07 LOG7[2468:2684]: 86477 client connects (SSL_connect())
2011.12.13 19:55:07 LOG7[2468:2684]: 86477 client connects that finished
2011.12.13 19:55:07 LOG7[2468:2684]: 0 client renegotiations requested
2011.12.13 19:55:07 LOG7[2468:2684]: 0 server connects (SSL_accept())
2011.12.13 19:55:07 LOG7[2468:2684]: 0 server connects that finished
2011.12.13 19:55:07 LOG7[2468:2684]: 0 server renegotiations requested
2011.12.13 19:55:07 LOG7[2468:2684]: 0 session cache hits
2011.12.13 19:55:07 LOG7[2468:2684]: 0 external session cache hits
2011.12.13 19:55:07 LOG7[2468:2684]: 0 session cache misses
2011.12.13 19:55:07 LOG7[2468:2684]: 0 session cache timeouts
2011.12.13 19:55:07 LOG6[2468:2684]: SSL connected: new session negotiated
2011.12.13 19:55:07 LOG6[2468:2684]: Negotiated ciphers: DES-CBC3-SHA SSLv3 Kx=RSA Au=RSA Enc=3DES(168) Mac=SHA1
2011.12.13 19:55:07 LOG6[2468:2684]: Compression: null, expansion: null
2011.12.13 19:55:07 LOG7[2468:2684]: SSL alert (write): fatal: protocol version
2011.12.13 19:55:07 LOG3[2468:2684]: SSL_read: 1408F10B: error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
2011.12.13 19:55:07 LOG5[2468:2684]: Connection reset: 19 bytes sent to SSL, 219 bytes sent to socket
2011.12.13 19:55:07 LOG7[2468:2684]: Service smtp finished (0 left)
2011.12.13 19:55:07 LOG7[2468:2684]: str_stats: 16 block(s), 353 data byte(s), 544 control byte(s)
What am I doing wrong?
Thanks
Rene