Automatic email relay agent?

[Hongwei Li]

> Am Mi, den 30.11.2005 schrieb Hongwei Li um 21:32:
>
>> Hongwei
>
> Pleas read a howto for enabling SMTP AUTH running Sendmail, i.e.
> following
>
> http://www.joreybump.com/code/howto/smtpauth.html
>
> Just note that the location of the TLS certificates changes with FC4
> release. So if you offer STARTTLS to secure insecure AUTH mechanisms
> LOGIN and PLAIN (Outlook and OE can't use secure MD5 mechanisms) - which
> is highly recommended to be secured - make sure you define the propers
> paths.
>
> Alexander
>

My system is fc3 linux, using sendmail-8.13.1-2 as email server.
I followed the steps on that web page:

# cd /usr/share/ssl/certs/
# make sendmail.pem
... (I put our server's fully qualified domain name for the Common Name prompt)

# chkconfig saslauthd on
# service saslauthd restart

# cd /etc/mail/
# vi sendmail.mc
(changes:

define(`confAUTH_OPTIONS', `A p y')dnl

TRUST_AUTH_MECH(`LOGIN PLAIN')dnl
define(`confAUTH_MECHANISMS', `LOGIN PLAIN')dnl

define(`confCACERT_PATH',`/usr/share/ssl/certs')
define(`confCACERT',`/usr/share/ssl/certs/ca-bundle.crt')
define(`confSERVER_CERT',`/usr/share/ssl/certs/sendmail.pem')
define(`confSERVER_KEY',`/usr/share/ssl/certs/sendmail.pem')

define(`confLOG_LEVEL', `14')dnl
)

# m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf
# service sendmail restart

Then, I set a guest Outlook account by checking the boxes under Advanced
Setting page:

Incoming server (POP3) -- This server requires an encrypted connection (SSL)
-- the port changes from 110 to 995

Outgoing server (SMTP) -- This server requires an encrypted connection (SSL)
-- the port number remains as 25

When I check the incoming emails, it shows the message about server
certificate.  I click Yes to continue, then it received all incoming emails.
However, when I try to send email out, I first see the message:
"An encrypted email connection has been detected...."  I click OK, but failed
sending email out.  The error message is:

... error (0x800CCC7D): "Your outgoing (SMTP) server does not support
SSL-encrypted connection....

The system maillog shows:
...
Dec  1 10:07:52 morpheus sendmail[26574]: jB1G7ogu026574: Milter accept: message
Dec  1 10:07:52 morpheus sendmail[26578]: jB1G7pt6026578: [128.252.85.103] did
not issue MAIL/EXPN/VRFY/ETRN during connectio
n to MTA
Dec  1 10:07:52 morpheus sendmail[26602]: NOQUEUE: connect from [128.252.85.103]
Dec  1 10:07:52 morpheus sendmail[26602]: AUTH: available mech=CRAM-MD5
DIGEST-MD5, allowed mech=LOGIN PLAIN
Dec  1 10:07:52 morpheus sendmail[26602]: jB1G7q7s026602: Milter (greylist):
init success to negotiate
Dec  1 10:07:52 morpheus sendmail[26602]: jB1G7q7s026602: Milter: connect to
filtersDec  1 10:07:52 morpheus sendmail[26602]: jB1G7q7s026602:
milter=greylist, action=connect, continue
Dec  1 10:07:52 morpheus sendmail[26602]: jB1G7q7s026602: [128.252.85.103] did
not issue MAIL/EXPN/VRFY/ETRN during connectio
n to MTA
Dec  1 10:07:52 morpheus sendmail[26605]: NOQUEUE: connect from [128.252.85.103]
Dec  1 10:07:52 morpheus sendmail[26605]: AUTH: available mech=CRAM-MD5
DIGEST-MD5, allowed mech=LOGIN PLAIN
Dec  1 10:07:52 morpheus sendmail[26605]: jB1G7qFh026605: Milter (greylist):
init success to negotiate
Dec  1 10:07:52 morpheus sendmail[26605]: jB1G7qFh026605: Milter: connect to
filtersDec  1 10:07:52 morpheus sendmail[26605]: jB1G7qFh026605:
milter=greylist, action=connect, continue
Dec  1 10:07:52 morpheus sendmail[26605]: jB1G7qFh026605: [128.252.85.103] did
not issue MAIL/EXPN/VRFY/ETRN during connectio
n to MTA
...

Did I miss something?  Thanks for all help!

Hongwei