Hi Christian,

Thanks for the prompt reply.

We are trying to fix the settings on the mail server for both cases.
As mentioned before, it was tested and was working fine until recently.
We have used mostly the default settings provided by Exim3 TLS.
Hence, we are now trying to guess what has gone wrong or changed.

Our guess:
Can both cases be related to the expiry of the OpenSSL cert used for
TLS?


As there are so many options in Exim, will appreciate if someone can
recommend the best practises for a secure and workable Exim
configuration.

Thanks!

/regards

-----Original Message-----
From: Christian Recktenwald [mailto:[EMAIL PROTECTED] 
Sent: June 17, 2005 5:00 PM
To: cslinx
Cc: [email protected]
Subject: Re: [exim] Exim3+ TLS


On Fri, Jun 17, 2005 at 03:20:02PM +0800, cslinx wrote:
> 
> Hi,
> 
> I've managed to setup Exim 3 successfully sometime ago but now I
> encounter the following errors when I tried to send an email to my 
> account:
> 
> <[EMAIL PROTECTED]>:
> Remote host said: 550 5.0.0 <[EMAIL PROTECTED]>... RCPT TO: 
> <[EMAIL PROTECTED]> Relaying not allowed - please use SMTP AUTH 
> [RCPT_TO]

This means your provider wants you to authenticate using SMTP auth. You
need a login and password (perhaps identical to your indial data).

>From the exim documentation:

[ http://www.exim.org/exim-html-3.30/doc/html/spec_19.html#SEC554 ]

  authenticate_hosts (smtp)

  Type: host list
  Default: unset
  
  This option is available only when Exim is built to contain support
for
  at least one of the SMTP authentication mechanisms. It provides a list
  of servers to which, provided they announce authentication support,
Exim
  will attempt to authenticate as a client when it connects. See chapter
  35 for details.

> On a separate case but using the same mail server, I also encounter
> the following error when I try sending an email using Outlook (the 
> same email is successful if I use Yahoo! Mail) :
> 
>    ----- The following addresses had permanent fatal errors -----
> <[EMAIL PROTECTED]>
>     (reason: 554 Security failure)
> 
>    ----- Transcript of session follows -----
> ... while talking to mail.xxx.com.:
> >>> STARTTLS
> <<< 454 OpenSSL/0.9.6beta currently unavailable
> >>> MAIL From:<[EMAIL PROTECTED]> SIZE=897
> <<< 554 Security failure
> 554 5.0.0 Service unavailable

You can not send TLS Mail there because the remote side is
misconfigured. 
It announces STARTTLS but then it fails.
Please talk to xxx.com about fixing this.

-- 
Christian Recktenwald      :                         :
citecs GmbH                : [EMAIL PROTECTED]
Unternehmensberatung fuer  : voice +49 711 601 2090  : Boeblinger
Strasse 189
EDV und Telekommunikation  : fax   +49 711 601 2092  : D-70199 Stuttgart

Send instant messages to your online friends http://asia.messenger.yahoo.com 


-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/

Reply via email to