Koozali.org: home of the SME Server

SMTP Relay Issue (again)

Andy Berry

SMTP Relay Issue (again)
« on: October 26, 2002, 04:43:00 AM »
Hi.
I'm running SME 5.5, and have read, I think, all the posts about SMTP relaying, and allowing my users to send mail through this SMTP server over the internet.
I have installed the secure SMTP, POP, and IMAP patches.
Right after I applied these updates, I was able to send exactly one email through the server via Secure SMTP on port 465. Now, my Netscape messenger just sits there with the progress bar going.  
When I try to send via regular ol' SMTP on port 25, I get the rcpthosts message and cannot send.  
I have tried adding my home IP address to the Local Network section of Server Manager, and also added 0.0.0.0.  Still no joy.

Interestingly, I can connect from home using Outlook and port 25 without issue.  Netscape Messenger (the client of choice) is giving me problems.

Any ideas?

Thanks.

-Andy

Nathan Fowler

Re: SMTP Relay Issue (again)
« Reply #1 on: October 26, 2002, 05:44:23 AM »
If you're 5.5, then your using SSL.  Did you import or create a .p12 personal certificate and import it into the trust root certificates store?  Crapscape Mail may be giving you headaches because the certificate isn't signed.

Andy Berry

Re: SMTP Relay Issue (again)
« Reply #2 on: October 26, 2002, 08:12:31 AM »
Gak! No... I guess I missed that part.
I'm having problems creating a new cert though...

#openssl req -newkey rsa:1024 -out cetr.pem
#openssl pkcs12 -export -in cetr.pem -out file.p12 -name "Andy Cert"
Gives me:
Error loading private key
2314:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:662:Expecting: ANY PRIVATE KEY

Obviously, I'm missing something here.  What did I do wrong?
I'm trying to generate a new key.

-A

Andy Berry

Re: SMTP Relay Issue (again)
« Reply #3 on: October 26, 2002, 09:40:13 AM »
Well, I finally imported a .p12 certificate made from my  securemail.cert in /usr/share/ssl/certs, but Netscape still spins whenI try to send mail.

Nathan Fowler

Re: SMTP Relay Issue (again)
« Reply #4 on: October 26, 2002, 08:01:24 PM »
You are using the same settings for Outlook in Nutscrape right?

SMTP 465
POP 995

Using SSL, server requires login.  You put in your login/pass for the SMTP server and POP3 server?

Andy Berry

Re: SMTP Relay Issue (again)
« Reply #5 on: October 26, 2002, 10:41:28 PM »
Actually, no.  Outlook works like a champ using ports 25 and 110, using POP3 values for SMTP login.
In Nutscrape, I can collect on 110 without a problem.  Sending on 25 gives me the rcpthosts error, and sending on 465 gives me a progress bar that just keeps going and going.
To be honest, I can't recall whether I tried using both secure ports in Netscape (995 and 465).  Should that make a difference?  I'm on the local LAN right now, so Ican't test just yet.
And why can Outlook collect and send on the nonsecure ports?
M$ subversion?

Thanks again.

-A

Andy Berry

Re: SMTP Relay Issue (again)
« Reply #6 on: October 27, 2002, 08:11:20 AM »
Back outside the LAN now, and I find that Netscape collects on 995, accepts the certificate and all (although for some reason, with the POP settings on SSL and 995 I can't delete messages from my inbox), but still won't send on 465.
Again, outlook works on all 4 ports.

-A

Bill Talcott

Re: SMTP Relay Issue (again)
« Reply #7 on: October 28, 2002, 05:08:15 PM »
What version of Netscape are you using?

Andy Berry

Re: SMTP Relay Issue (again)
« Reply #8 on: October 28, 2002, 05:20:35 PM »
7.0Bill Talcott wrote:
>
> What version of Netscape are you using?

Bill Talcott

Re: SMTP Relay Issue (again)
« Reply #9 on: October 28, 2002, 08:09:21 PM »
Hmmmmm, using SSL with SME 5.0, I get a message saying that Mozilla can't connect to the SMTP server when I have "Always use SSL" checked. As soon as I switch it to "When available" it goes through. Perhaps an SSL bug in Netscape/Mozilla? It appears that the two ends don't like each other anyway... Since you got it work before, perhaps go through all the advanced account settings, and check trusts in the Cert Manager (if NS7 has those like Mozilla does).