OK thanks for all the help on this last posting.

I am now up and running on the most current Test version  ASSP version 
2.1.2(11337)
I was stuck on an old version due to not having a more current version of Perl 
and finally had time to upgrade.

I notice that incoming SSL TLS is marked in the headers but out going does not 
show that it was actually done over SSL/TLS.
And yes the destination I am using is setup and running on TLS.
Question is is there a way to tell that out bound mail was sent using TLS?

Thanks,
Daniel Du Vall


From: Daniel K. Du Vall
Sent: Wednesday, November 30, 2011 5:21 PM
To: ASSP development mailing list ([email protected])
Subject: TLS on V2 (Was told i need to post here)


I know it has probably been asked over and over but I just setup ASSP V2 to do 
TLS and it is in the (do TLS) mode.



I have certificate from startcom in place when I send an email from an external 
Exchange 2010 server to the internal ASSP/postfix mail server I get this in the 
header.

X-Assp-Message/IP-Score:          -10 (SSL/TLS-connection-OK)

I assume this states that the ASSP V2 is doing TLS on inbound mail.



But see no indication that the ASSP/postfix mail server is sending in TLS:



Exchange normal shows this if TLS is used:

Received: from mail.1peter4-10.org (173.8.247.229) by mail.cimonline.org

(192.168.254.10) with Microsoft SMTP Server (TLS) id 14.1.355.2; Wed, 30 Nov

2011 15:03:56 -0700



But this is what the ASSP/postfix does when sending to same Exchange server:

Received: from mail.quadtrax.com (173.8.247.229) by mail.cimonline.org

(192.168.254.10) with Microsoft SMTP Server id 14.1.355.2; Wed, 30 Nov 2011

14:38:47 -0700

Received: from [172.31.254.30] (unknown [172.31.254.23])          (using TLSv1 
with

cipher DHE-RSA-AES256-SHA (256/256 bits))      (No client certificate requested)

                by Arizona.quadtrax.com (Quadtrax) with ESMTP id 66676318060    
         for

<[email protected]<mailto:[email protected]>>; Wed, 30 Nov 2011 
14:38:31 -0700 (MST)

Received: from [172.31.254.30] ([172.31.254.30] helo=[172.31.254.30]) by

                ASSP.nospam with ESMTP (2.0.2); 30 Nov 2011 14:40:04 -0700

Message-ID: 
<[email protected]<mailto:[email protected]>>

Date: Wed, 30 Nov 2011 14:40:04 -0700

From: Sysadmin <[email protected]<mailto:[email protected]>>

User-Agent: Mozilla/5.0 (Windows NT 6.0; rv:8.0) Gecko/20111105 Thunderbird/8.0

MIME-Version: 1.0

To: <[email protected]<mailto:[email protected]>>

Subject: on

Content-Type: text/plain; charset="ISO-8859-1"; format=flowed

Content-Transfer-Encoding: 7bit

Return-Path: 
[email protected]<mailto:[email protected]>

X-MS-Exchange-Organization-AuthSource: CIMV01.cimonline.org

X-MS-Exchange-Organization-AuthAs: Anonymous

X-MS-Exchange-Organization-PRD: quadtrax.com

X-MS-Exchange-Organization-SenderIdResult: Pass

Received-SPF: Pass (CIMV01.cimonline.org: domain of 
[email protected]<mailto:[email protected]>  designates 173.8.247.229 
as permitted sender) receiver=CIMV01.cimonline.org;  client-ip=173.8.247.229; 
helo=mail.quadtrax.com;

X-MS-Exchange-Organization-SCL: 4

X-MS-Exchange-Organization-PCL: 2

X-MS-Exchange-Organization-Antispam-Report:

DV:3.3.5705.600;SID:SenderIDStatus Pass;OrigIP:173.8.247.229



Is ASSP V2 able to do send and receive TLS?

Or am I trying to do something that is not possible?



Thanks for putting up with my question and straightening me out in advance.

Daniel Du Vall







------------------------------------------------------------------------------

All the data continuously generated in your IT infrastructure contains a 
definitive record of customers, application performance, security threats, 
fraudulent activity, and more. Splunk takes this data and makes sense of it. IT 
sense. And common sense.

http://p.sf.net/sfu/splunk-novd2d

_______________________________________________

Assp-user mailing list

[email protected]<mailto:[email protected]>

https://lists.sourceforge.net/lists/listinfo/assp-user

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure 
contains a definitive record of customers, application performance, 
security threats, fraudulent activity, and more. Splunk takes this 
data and makes sense of it. IT sense. And common sense.
http://p.sf.net/sfu/splunk-novd2d
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to