Re: [exim] STARTTLS before EHLO?

2006-02-08 Thread Matthew Byng-Maddick
On Wed, Feb 08, 2006 at 10:50:00AM +0800, W B Hacker wrote: Dean Brooks wrote: Bill Hacker wrote: 'Legacy', perhaps, but not 'non-standard' w/r our use of those two ports. Using it on 587 is non-standard The IANA registration has not specified port 587 for any particular protocol, smtp or

Re: [exim] STARTTLS before EHLO?

2006-02-08 Thread W B Hacker
Matthew Byng-Maddick wrote: On Wed, Feb 08, 2006 at 10:50:00AM +0800, W B Hacker wrote: *SNIP* I know, let's all advocate overriding sane client defaults in everything we reply to. I mean, that wouldn't be confusing for new posters or people asking questions, would it? Given that most

Re: [exim] STARTTLS before EHLO?

2006-02-08 Thread Giuliano Gavazzi
On 8 Feb 2006, at 03:50, W B Hacker wrote: urd465/tcpURL Rendesvous Directory for SSM do they mean rendezvous? (and shouldn't it be bonjour anyway?) g -- ## List details at http://www.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use

[exim] STARTTLS before EHLO?

2006-02-07 Thread Heiko Schlittermann
Hello, should exim support receiving a STARTTLS *before* receiving an EHLO? openssl s_client -connect ssl.schlittermann.de:25 -starttls smtp ends with error: T 212.80.235.130:25 - 10.10.10.6:1411 [AP] 220 pu.schlittermann.de ESMTP Exim 4.60 Tue, 07 Feb 2006 11:39:48 +0100..

Re: [exim] STARTTLS before EHLO?

2006-02-07 Thread Nigel Metheringham
On Tue, 2006-02-07 at 11:43 +0100, Heiko Schlittermann wrote: Hello, should exim support receiving a STARTTLS *before* receiving an EHLO? No. STARTTLS is a ESMTP feature. Exim starts in SMTP mode and only offers ESMTP features if the client requests them by using a EHLO start, at which

Re: [exim] STARTTLS before EHLO?

2006-02-07 Thread Jakob Hirsch
Heiko Schlittermann wrote: should exim support receiving a STARTTLS *before* receiving an EHLO? no. Well, it wouldn't hurt (just like allowing AUTH before EHLO), but why? No proper client would do it. openssl s_client -connect ssl.schlittermann.de:25 -starttls smtp 503 STARTTLS

Re: [exim] STARTTLS before EHLO?

2006-02-07 Thread Marc Sherman
W B Hacker wrote: It does do so. That is the 'legacy' ssl mode AKA 'tls_on_connect' Bill, please be more careful about answering questions with incorrect information. tls_on_connect does not involve sending the STARTTLS command _at_all_. The connection is SSL-encrypted from the moment

Re: [exim] STARTTLS before EHLO?

2006-02-07 Thread Heiko Schlittermann
Jakob Hirsch [EMAIL PROTECTED] (Di 07 Feb 2006 13:28:36 CET): Heiko Schlittermann wrote: should exim support receiving a STARTTLS *before* receiving an EHLO? no. Well, it wouldn't hurt (just like allowing AUTH before EHLO), but why? No proper client would do it. Hey - I didn't ask for

Re: [exim] STARTTLS before EHLO?

2006-02-07 Thread Jakob Hirsch
Heiko Schlittermann wrote: OpenSSL 0.9.7e 25 Oct 2004 OpenSSL 0.9.8a 11 Oct 2005 both do not send 'EHLO'. (Debian) Looking at the sources, they put it into 0.9.7 starting with the f version, but not in 0.9.8/8a (for whatever reason). The change is trivial, it does not even check if

Re: [exim] STARTTLS before EHLO?

2006-02-07 Thread Dean Brooks
On Wed, Feb 08, 2006 at 04:44:57AM +0800, W B Hacker wrote: Marc Sherman wrote: This has come up before; if you're going to recommend to random list posters that they configure 587 for tls_on_connect, please warn them explicitly that your configuration is very non-standard. 'Legacy',

Re: [exim] STARTTLS before EHLO?

2006-02-07 Thread W B Hacker
Dean Brooks wrote: On Wed, Feb 08, 2006 at 04:44:57AM +0800, W B Hacker wrote: Marc Sherman wrote: This has come up before; if you're going to recommend to random list posters that they configure 587 for tls_on_connect, please warn them explicitly that your configuration is very