Koozali.org: home of the SME Server

Obsolete Releases => SME 7.x Contribs => Topic started by: schlagg on January 25, 2009, 07:30:09 PM

Title: Disabling SSMTP Certificate Validation
Post by: schlagg on January 25, 2009, 07:30:09 PM

Hi,

i've some troubles since my SME certificate regenerate,

so i'm looking for a way to disable the SSL connexion to SSMTP protocol

i want to use my SME as an external SMTP server without the request of a certificate, but only using login/password authentification

Thanks,

bye ..

Title: Re: Disabling SSMTP Certificate Validation
Post by: cactus on January 25, 2009, 07:49:13 PM

Quote from: schlagg on January 25, 2009, 07:30:09 PM

Hi,

i've some troubles since my SME certificate regenerate,

so i'm looking for a way to disable the SSL connexion to SSMTP protocol

i want to use my SME as an external SMTP server without the request of a certificate, but only using login/password authentification

Thanks,

bye ..

Then you should use SMTP, drawback will be that traffic is not encrypted and that username and password travel over the line in plain text.

Title: Re: Disabling SSMTP Certificate Validation
Post by: schlagg on January 25, 2009, 09:59:51 PM

Quote from: cactus on January 25, 2009, 07:49:13 PM

Then you should use SMTP, drawback will be that traffic is not encrypted and that username and password travel over the line in plain text.

hi

thanks for your answers

how can i use smtp?
in the server-manager, in Athentification SMTP i can only choose 'Use Only SSMTP (secure) private and public access'
if i choose 'Not activated', then i cannot use the SMTP server on an external network

is there a method for what i want?

EDIT
i found how the disable SSL for IMAP and POP but none for SMTP  :???:


Thanks again  ,
bye

Title: Re: Disabling SSMTP Certificate Validation
Post by: yythoss on January 25, 2009, 10:54:16 PM

You can enable smtpd in the Server-Manager with this command:

Code: [Select]

db configuration setprop smtpd access public
/sbin/e-smith/signal-event email-update

yythoss

Title: Re: Disabling SSMTP Certificate Validation
Post by: schlagg on January 25, 2009, 11:02:35 PM

Quote from: yythoss on January 25, 2009, 10:54:16 PM

You can enable smtpd in the Server-Manager with this command:

Code: [Select]

db configuration setprop smtpd access public
/sbin/e-smith/signal-event email-update

yythoss

hi, thanks to you

i did the command, but found nothing in the server-manager
where do i found the smtpd configuration?

bye

Title: Re: Disabling SSMTP Certificate Validation
Post by: yythoss on January 25, 2009, 11:12:45 PM

You find it in the server-manager:

configuration/email

and then the third menu.

What you want to do. It is very danger to open the port 25.

Title: Re: Disabling SSMTP Certificate Validation
Post by: schlagg on January 25, 2009, 11:23:15 PM

thanks again,

but i checked and nothing wad changed
in configuration/mail, i've :

- change mail access
** pop3 and pop3s
** imap and imaps
** https

- filters

- mail reception
** mail recovery : standar (smtp) or ETRN or Multipoint
** smtp authentification : disabled or SMTP over SSL


now its configured with standard mail recovery and smtph auth disabled, and client always needs to use SSL

i know its dangerous, but i've some application which needs this and until i fix another problem, i need to disable SMTP SSL

thanks again

Title: Re: Disabling SSMTP Certificate Validation
Post by: yythoss on January 25, 2009, 11:29:41 PM

You need:

Code: [Select]

Enable SMTP and SSMTP over SSL
whst show this command on your server:

Code: [Select]

db configuration show smtpd

Title: Re: Disabling SSMTP Certificate Validation
Post by: schlagg on January 25, 2009, 11:47:35 PM

this :

Code: [Select]

db configuration show smtpd
smtpd=service
    Authentication=disabled
    Instances=40
    InstancesPerIP=5
    MaximumDateOffset=0
    PatternsScan=enabled
    Proxy=disabled
    TCPPort=25
    TCPProxyPort=25
    VirusScan=enabled
    access=public
    status=enabled
    tnef2mime=enabled


Quote

You need:

Code: [Select]
Enable SMTP and SSMTP over SSL

don't have this option, only SSMTP

Title: Re: Disabling SSMTP Certificate Validation
Post by: yythoss on January 25, 2009, 11:54:26 PM

Look at my config:

smtpd=service
    Authentication=enabled
    Instances=40
    InstancesPerIP=5
    MaximumDateOffset=0
    PatternsScan=disabled
    Proxy=enabled
    TCPPort=25
    TCPProxyPort=25
    VirusScan=enabled
    access=public
    status=enabled
    tnef2mime=enabled


You can enable the fields with this command:


db configuration setprop smtpd FIELDNAME VALUE

Then don't forget

signal-event post-upgrade
signal-event reboot


If you have a router on your Network, you must open and forward the port 25 to your sme server!

Title: Re: Disabling SSMTP Certificate Validation
Post by: schlagg on January 26, 2009, 11:53:39 AM

Hi

thanks very much

now it work, SMTP for external network is enabled ....


bye ;)