On 2013-12-28 1:31 PM, Viktor Dukhovni <postfix-us...@dukhovni.org> wrote:
On Sat, Dec 28, 2013 at 01:10:55PM -0500, Charles Marcus wrote:

vacation.pl is, obviously, a perl script, so is using perl's
Mail::Sender module.
I think vacation.pl should be using sendmail(1) rather than SMTP
to inject auto-response messages.  The documentation for Mail::Sender
v0.8.22 includes:

     TLS_allowed

        If set to a true value Mail::Sender attempts to use LTS
        (SSL encrypted connection) whenever the server supports it
        and you have IO::Socket::SSL and Net::SSLeay.

        The default value of ths option is TRUE! This means that
        if Mail::Server can send the data encrypted, it will.

If TLS_allowed insists on authentication, then having it on by
default is rather unwise.  You may be able to unset this, but better
yet, use local submission rather than SMTP for vacation re-injection.

Thanks Victor, but apparently this is actually a bug in Mail::Sender that only revealed itself when they changed the TLS default to true in 0.8.22.

https://rt.cpan.org/Public/Bug/Display.html?id=85438

I've temporarily disabled TLS in vacation.pl until it is fixed...

Reply via email to