Re: [exim] remote MX does not support STARTTLS

2020-09-23 Thread Cyborg via Exim-users
Am 23.09.20 um 19:36 schrieb Mike Tubby via Exim-users: > >> My only guess is to try disabling CHUNKING or PRDR advertisement, to see >> if one of those is confusing them. > > Disable chunking, enable TLS v1.1 and are you using RSA or ECC > certificates at your end? > > IF it's one, it's  PRDR . I

Re: [exim] remote MX does not support STARTTLS

2020-09-23 Thread Christian Eyrich via Exim-users
Am 23.09.2020 um 19:36 schrieb Mike Tubby via Exim-users: On 23/09/2020 18:16, Jeremy Harris via Exim-users wrote: On 23/09/2020 16:59, Bill Cole via Exim-users wrote: 1. You don't allow any TLS versions below 1.2. While that may seem to be a safety measure, it actually can cause problems becau

Re: [exim] remote MX does not support STARTTLS

2020-09-23 Thread Christian Eyrich via Exim-users
Am 23.09.2020 um 19:16 schrieb Jeremy Harris via Exim-users: My only guess is to try disabling CHUNKING or PRDR advertisement, to see if one of those is confusing them. Ok, tried that now, but didn’t help. Regards, Christian -- ## List details at https://lists.exim.org/mailman/listinfo/exim

Re: [exim] remote MX does not support STARTTLS

2020-09-23 Thread Jeremy Harris via Exim-users
On 23/09/2020 18:49, Bill Cole via Exim-users wrote: >>     22 212.227.15.19 → 94.16.119.13 TCP 66 41705 → 25 [FIN, ACK] >> Seq=20 Ack=228 Win=64128 Len=0 TSval=3976249530 TSecr=307582370 > > Why is your server setting the FIN flag on that packet? That's GMX's FIN. -- Cheers, Jeremy -- ## Li

Re: [exim] remote MX does not support STARTTLS

2020-09-23 Thread Christian Eyrich via Exim-users
Am 23.09.2020 um 17:59 schrieb Bill Cole via Exim-users: Hi Bill, No. Your server seems to support TLS v1.3 and v1.2 just fine. Generally I’d be happy to read. But in this case it’s a bit disappointing. Yes. There are 2 issues that *may* be causing trouble: 1. You don't allow any TLS versio

Re: [exim] remote MX does not support STARTTLS

2020-09-23 Thread Bill Cole via Exim-users
After Jeremy pointed out that they didn't even try STARTTLS, I looked closer and noticed something odd... On 22 Sep 2020, at 12:10, Christian Eyrich via Exim-users wrote: Thing is that my mail server does support STARTTLS and also advertises this which I verify in the Exim debug log and was a

Re: [exim] remote MX does not support STARTTLS

2020-09-23 Thread Mike Tubby via Exim-users
On 23/09/2020 18:16, Jeremy Harris via Exim-users wrote: On 23/09/2020 16:59, Bill Cole via Exim-users wrote: 1. You don't allow any TLS versions below 1.2. While that may seem to be a safety measure, it actually can cause problems because a client that does not support v1.2 or v1.3 can only

Re: [exim] remote MX does not support STARTTLS

2020-09-23 Thread Jeremy Harris via Exim-users
On 23/09/2020 16:59, Bill Cole via Exim-users wrote: > 1. You don't allow any TLS versions below 1.2. While that may seem to be > a safety measure, it actually can cause problems because a client that > does not support v1.2 or v1.3 can only resort to sending in clear text. > > 2. Your server is s

Re: [exim] remote MX does not support STARTTLS

2020-09-23 Thread Bill Cole via Exim-users
On 22 Sep 2020, at 12:10, Christian Eyrich via Exim-users wrote: Hi, a few weeks ago the GMX mail servers stopped sending mails to my server. The GMX mailer daemon writes: A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The

Re: [exim] remote MX does not support STARTTLS

2020-09-23 Thread Jeremy Harris via Exim-users
On 23/09/2020 14:23, Andrew C Aitchison via Exim-users wrote: > I note http://www.postfix.org/BDAT_README.html#downsides IMHO there is some bogus advice there. If Postfix's "reject_unauth_pipelining" is not working aright then you can't trust it to work right, barring some CHUNKING-specific bug t

Re: [exim] remote MX does not support STARTTLS

2020-09-23 Thread Andrew C Aitchison via Exim-users
On Tue, 22 Sep 2020, Christian Eyrich via Exim-users wrote: Hi, a few weeks ago the GMX mail servers stopped sending mails to my server. The GMX mailer daemon writes: A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following

Re: [exim] remote MX does not support STARTTLS

2020-09-23 Thread Jeremy Harris via Exim-users
On 22/09/2020 17:10, Christian Eyrich via Exim-users wrote: >     20 212.227.15.19 → 94.16.119.13 SMTP 85 C: EHLO mout.gmx.net >     21 94.16.119.13 → 212.227.15.19 SMTP 224 S: 250-mail.eyrich-net.org: > Hello mout.gmx.net [212.227.15.19] | 250-SIZE 52428800 | 250-8BITMIME | > 250-PIPELINING | 250-

[exim] remote MX does not support STARTTLS

2020-09-23 Thread Christian Eyrich via Exim-users
Hi, a few weeks ago the GMX mail servers stopped sending mails to my server. The GMX mailer daemon writes: A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: christ...@eyrich-net.org: r