Re: More on Enforced TLS

3 msg	Server configuration Error
1 msg	relay_transport
1 msg	Catch-all mailbox
4 msg	Trouble with HTC S710 device and SMTPS
3 msg	psotfix server TLS failed
3 msg	failed-delivery message notifications setup
2 msg	proxy_interfaces understanding
1 msg	warning: transport virtual failure
2 msg	how to relay for most recipients and forward fo...
2 msg	Rewriting outbound addresses
2 msg	virtual mailboxes/domains and aliases
3 msg	Enforced TLS Success?
1 msg	Postfix 2.5 RC2 and snapshot release
11 msg	Problem with Postfix and LDAP (SSL / TLS)

More on Enforced TLS
\ Dennis Putnam (16 Jan 2008)
. \ (Wietse Venema) (16 Jan 2008)
. . \ Dennis Putnam (16 Jan 2008)
. . . \ (Wietse Venema) (16 Jan 2008)

3 msg	delivery reciept
4 msg	How to repeat delay_warning_time messages ?
2 msg	sender notification
5 msg	Using 'nolisting' to reduce spam
1 msg	mail priority by sender

Subject:	Re: More on Enforced TLS
Group:	Postfix-users
From:	(Wietse Venema)
Date:	16 Jan 2008

Dennis Putnam:
>
> On Jan 16, 2008, at 10:20 AM, Wietse Venema wrote:
>
> >
> > That is because the implementation was broken, as Victor mentioned
> > earlier in this thread.
>
> I recall that but I thought is was to do with SMTP vs ESMTP.

It was the exact same bug.

- With SMTP instead of ESMTP, the server sends no STARTTLS
announcement. Therefore Postfix 2.1.5 receives no STARTTLS
announcement. and forgets to enforce TLS.

- In your case, the STARTTLS announcement was sent, but the CISCO
suppressed it. Therefore Postfix 2.1.5 receives no STARTTLS
announcement. and forgets to enforce TLS.

As you see these different causes trigger the same bug.

Wietse

> > The third-party TLS patch will not be
> > updated. Instead, I suggest that you use a more recent version of
> > Postfix.
>
> I'll pass that suggestion along to Apple. :-) Unfortunately we can't
> really modify what Apple provides (not my rules) neither can we
> upgrade to Leopard at this time. In technical lingo its called being
> between a rock and a hard place. :-)
>
> >
> > Wietse
>
>
>