John Baker wrote:
We have a few people using programs (mostly MS crap) that insist on
older versions of SSL rather than tls.
Internally this works okay but externally ssl gets bounced by my grey
listing. This seems to indicate that it is not actually authenticating
right but allowing it to pass internally because its on the network and
the port is open.
"legacy" SSL makes me think of the long-deprecated "smtps"
wrapper mode SSL on port 465 that some MS products (still)
seem to prefer rather than using STARTTLS on a standard port.
Do you have the smtps port enabled in postfix and your firewall?
Do your logs show these clients using SSL/TLS and attempting
authentication? Use "smtpd_tls_loglevel = 1" in main.cf.
--
Noel Jones
