Mailx

ssl3 mailx和反彈

  • January 4, 2015

我已經設置了一些電子郵件伺服器(帶有 tsl3 的後綴),並且我已經達到了從中刪除 ssl2 的目標,但是 Thunderbird 工作得很好,mailx 沒有。我做了

echo prova|mail -S smtp-use-starttls user@domain

並且所有郵件都被退回

said: 530 5.7.0 Must issue a STARTTLS command first (in reply to MAIL FROM command))
I use this configuration
master.cf

smtp      inet  n       -       n       -       -       smtpd
   -o smtpd_sasl_auth_enable=yes
   -o smtpd_enforce_tls=yes
   -o smtpd_client_restrictions=permit_sasl_authenticated,permit_mynetworks,reject

main.cf

smtpd_sender_restrictions =
   permit_sasl_authenticated,
   permit_mynetworks,
   reject_non_fqdn_sender,
   reject_sender_login_mismatch,
   reject_authenticated_sender_login_mismatch,
   reject_unauthenticated_sender_login_mismatch,
   reject

# TLS parameters
smtp_use_tls=yes
smtpd_use_tls=yes
smtpd_tls_received_header = yes
smtp_tls_note_starttls_offer = yes
smtpd_tls_auth_only = no
smtpd_tls_CAfile = /etc/ssl/certs/domain.local.crt
smtpd_tls_cert_file=/etc/ssl/certs/slackware.domain.local.crt
smtpd_tls_key_file=/etc/ssl/private/slackware.domain.local.key
smtpd_tls_mandatory_ciphers = high
smtpd_tls_mandatory_exclude_ciphers = aNULL, MD5
smtpd_tls_mandatory_protocols = SSLv3

Thunderbird 好的,但是 mailx 不行,我試試

mail -S smtp-use-starttls

當然郵件是用ssl連結的。

找到解決方案

在 main.cf 上

smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
smtpd_tls_protocols = !SSLv2, !SSLv3
smtp_tls_mandatory_protocols = !SSLv2, !SSLv3
smtp_tls_protocols = !SSLv2, !SSLv3

在 master.cf 上

smtp      inet  n       -       n       -       -       smtpd
   -o smtpd_sasl_auth_enable=yes
   -o smtpd_client_restrictions=permit_sasl_authenticated,permit_mynetworks,reject

Ssl3 和 2 已禁用並收到郵件

引用自:https://unix.stackexchange.com/questions/167394