Hi all V2 users,

I'm just investigating some trubble using 'DoTLS' = 'do TLS' and 
'sendEHLO' = 1. Here is a short explanation what ASSP should do.

If both, the server and the client doing '250 STARTTLS' and 'STARTTLS' - 
there should be no problem.
If the client uses 'EHLO' but not requests 'STARTTLS', ASSP will do this 
to the server, if the server has replied '250 STARTTLS' - this should be 
also no problem.

But normaly, if the client sends only a 'HELO' and not a 'EHLO' the server 
will never answer with a '250 STARTTLS' and no connection will ever go in 
to TLS.
For this reason it is possible to set 'sendEHLO' to 1. If ASSP gets a 
'HELO' from the client, a 'EHLO' will be sent to the server and ASSP will 
go in to a queued mode
to supress the answer of the EHLO command (because the client wants only a 
answer to a HELO).
If ASSP finds the end of the EHLO-answer and the answer contains '250 
STARTTLS' , the command STARTTLS is sent to the server and if the reply is 
'220 OK' the EHLO is sent again to the server. Now ASSP waits for the end 
of the second EHLO answer and sends the 250 OK to the client. From now 
ASSP will do the Proxystuff like any time.
This all is working fine on my systems, but I think some other clients or 
servers are doing other SMTP stuff like expected - and so it could be 
possible that some replys will be
scrambled by ASSP.

S 220 ready -> ASSP ->C
C HELO -> ASSP  EHLO ->S
S 250-...
S 250-STARTTLS
S 250 .... ->ASSP  STARTTLS->S
S 220 ready ->ASSP  (switch the server connection to SSL) EHLO->S
S 250-...
S 250 .... ->ASSP  250 OK ->C
C MAIL FROM..  -> ASSP -> C
....

The other case is, if the client uses EHLO, gets back a 250-STARTTLS but 
does not send STARTTLS. Then ASSP will inject the STARTTLS to the server.

S 220 ready -> ASSP ->C
C EHLO -> ASSP  EHLO ->S
S 250-...
S 250-STARTTLS
S 250 .... ->ASSP  -> C
C MAIL FROM.. -> ASSP (keep the MAIL FROM) STARTTLS ->S
S 220 ready ->ASSP  (switch the server connection to SSL) EHLO->S
S 250-...
S 250 .... -> ASSP (original) MAIL FROM -> S
S 250 .... -> ASSP -> C
...

If you have trubble using this features, I want you to try the following:

Install version 2.0.0_15.06

Set 'debug' or if better set 'debugIP' as needed. If possible, do the 
failing stuff for one single mail and please send me the debug file.

Thank you!

Thomas 



DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************

------------------------------------------------------------------------------
Apps built with the Adobe(R) Flex(R) framework and Flex Builder(TM) are
powering Web 2.0 with engaging, cross-platform capabilities. Quickly and
easily build your RIAs with Flex Builder, the Eclipse(TM)based development
software that enables intelligent coding and step-through debugging.
Download the free 60 day trial. http://p.sf.net/sfu/www-adobe-com
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to