Re: [stunnel-users] How use certificates with stunnel -- Newbie question
Shatadal wrote: I guess there's a client=yes here.
# IMAP service, listens on localhost:1200 [myisp-imaps] accept=localhost:1200 connect=myisp.com:993
Ok. IMAPS port is 993.
# SMTP service, listens on localhost:260 [myisp-smtps] accept=localhost:260 connect=myisp.com:25
You either need to switch from SMTP to SSMTP: [myisp-ssmtp] accept=localhost:260 connect=myisp.com:465 or enable SMTP SSL protocol negotiation: [myisp-smtp-ssl] accept=localhost:260 connect=myisp.com:25 protocol=smtp (whatever is supported by your ISP) Best regards, Mike
mtrojnar@mirt wrote:
Shatadal wrote:
I guess there's a client=yes here.
# IMAP service, listens on localhost:1200 [myisp-imaps] accept=localhost:1200 connect=myisp.com:993
Ok. IMAPS port is 993.
# SMTP service, listens on localhost:260 [myisp-smtps] accept=localhost:260 connect=myisp.com:25
You either need to switch from SMTP to SSMTP:
[myisp-ssmtp] accept=localhost:260 connect=myisp.com:465
or enable SMTP SSL protocol negotiation:
[myisp-smtp-ssl] accept=localhost:260 connect=myisp.com:25 protocol=smtp
(whatever is supported by your ISP)
I tried your second suggestion (myisp has port 465 disabled) but it did not work. I was checking the traffic over my firewall and stunnel did connect to myisp.com using smtp but the e-mail client (mozilla thunderbird) was taking ages to send the e-mail and finally gave the following error: Sending of message failed. The message could not be sent because connection to SMTP server localhost failed. The server may be unavailable or is refusing SMTP connections. Please verify that your SMTP server setting is correct and try again, or else contact your network administrator. I guess it is an issue with the certificate from myisp which I had mentioned in my original post.
Best regards, Mike
Thanks, Shatadal. --- avast! Antivirus: Outbound message clean. Virus Database (VPS): 0448-1, 11/26/2004 Tested on: 11/27/2004 4:41:55 AM avast! - copyright (c) 2000-2004 ALWIL Software. http://www.avast.com
Shatadal wrote:
I tried your second suggestion (myisp has port 465 disabled) but it did not work.
Are you *sure* your ISP supports encrypted SMTP? Does it work with any other client? Best regards, Mike
mtrojnar@mirt wrote:
Shatadal wrote:
I tried your second suggestion (myisp has port 465 disabled) but it did not work.
Are you *sure* your ISP supports encrypted SMTP? Does it work with any other client?
I think I have solved my problem. It was being caused by my mail scanner Alwil Avast. Once I stopped the mail scanning module stunnel is being able to send my e-mail except for a small problem. Though my e-mail client (thunderbird)is able to send the message it gives an error: The current command did not succeed. The mail server responded: APPEND failed: Error finishing scratch file: No space left on device. This is probably nothing to do with stunnel, but if you could explain it to me, it would be very helpful. The stunnel log is: 2004.11.28 05:12:15 LOG5[2140:2284]: myisp-smtps-ssl connected from 127.0.0.1:4528 2004.11.28 05:12:15 LOG5[2140:2284]: Negotiations for smtp (client side) started 2004.11.28 05:12:20 LOG5[2140:2284]: Protocol negotiation succeeded 2004.11.28 05:12:21 LOG3[2140:2284]: SSL_read (ERROR_SYSCALL): Connection reset by peer (WSAECONNRESET) (10054) 2004.11.28 05:12:21 LOG5[2140:2284]: Connection reset: 703 bytes sent to SSL, 541 bytes sent to socket
Best regards, Mike
Thanks for the help, Shatadal. --- avast! Antivirus: Outbound message clean. Virus Database (VPS): 0448-1, 11/26/2004 Tested on: 11/28/2004 5:21:08 AM avast! - copyright (c) 2000-2004 ALWIL Software. http://www.avast.com
participants (2)
-
mtrojnar＠mirt -
Shatadal