Miscellaneous first checks
Affected Component(s)
Mails are not relayed with implicit tls (465)
What happened and when does this occur?
DEFAULT_RELAY_HOST=[relay.smtp.isp.tld]:465
RELAY_HOST=relay.smtp.isp.tld
RELAY_PORT=465
RELAY_USER=MYUSERNAME
RELAY_PASSWORD=MYCOMPLICATEDPASSWORD
What did you expect to happen?
Mail should be forwarded through the relay.
How do we replicate the issue?
1. mailserver.env:
DEFAULT_RELAY_HOST=[relay.smtp.isp.tld]:465
RELAY_HOST=relay.smtp.isp.tld
RELAY_PORT=465
RELAY_USER=MYUSERNAME
RELAY_PASSWORD=MYCOMPLICATEDPASSWORD
- Will complain about
smtp_tls_wrappermode = yes and smtp_tls_security_level = encrypt.
Added the following to docker-data/dms/config/postfix-main.cf
smtp_tls_wrappermode = yes
smtp_tls_security_level = encrypt
- Sendmail from the cli works.
sendmail -F "Firstname surname" -f "[email protected]" -t [email protected]
Subject: Hello
World
- Sending from a smtp client does not.
warning: smtp_tls_wrappermode requires "smtp_tls_security_level = encrypt" (or stronger)
to=<....>, relay=none, delay=0.33, delays=0.33/0/0/0, dsn=4.3.0, status=deferred (server unavailable or unable to receive mail)
DMS version
v11.0.0
What operating system is DMS running on?
Linux
What instruction set architecture is DMS running on?
x86_64 / AMD64
What container orchestration tool are you using?
Docker Compose
docker-compose.yml
services:
mailserver:
image: docker.io/mailserver/docker-mailserver:latest
container_name: mailserver
# If the FQDN for your mail-server is only two labels (eg: example.com),
# you can assign this entirely to `hostname` and remove `domainname`.
hostname: mail
domainname: domain.tld
env_file: mailserver.env
# More information about the mail-server ports:
# https://docker-mailserver.github.io/docker-mailserver/edge/config/security/understanding-the-ports/
# To avoid conflicts with yaml base-60 float, DO NOT remove the quotation marks.
ports:
- "25:25" # SMTP (explicit TLS => STARTTLS)
- "143:143" # IMAP4 (explicit TLS => STARTTLS)
- "465:465" # ESMTP (implicit TLS)
- "587:587" # ESMTP (explicit TLS => STARTTLS)
- "993:993" # IMAP4 (implicit TLS)
volumes:
- ./docker-data/dms/mail-data/:/var/mail/
- ./docker-data/dms/mail-state/:/var/mail-state/
- ./docker-data/dms/mail-logs/:/var/log/mail/
- ./docker-data/dms/config/:/tmp/docker-mailserver/
- /etc/localtime:/etc/localtime:ro
- /etc/letsencrypt:/etc/letsencrypt:ro
restart: always
stop_grace_period: 1m
cap_add:
- NET_ADMIN
- SYS_PTRACE
Relevant log output
No response
Other relevant information
To get it to work I had to add `-o smtp_tls_wrappermode=no` to `smtp-amavis` and `127.0.0.1:10025` in master.cf.
What level of experience do you have with Docker and mail servers?
Code of conduct
Improvements to this form?
No response
Miscellaneous first checks
Affected Component(s)
Mails are not relayed with implicit tls (465)
What happened and when does this occur?
What did you expect to happen?
How do we replicate the issue?
smtp_tls_wrappermode = yesandsmtp_tls_security_level = encrypt.Added the following to
docker-data/dms/config/postfix-main.cfsendmail -F "Firstname surname" -f "[email protected]" -t [email protected]
Subject: Hello
World
DMS version
v11.0.0
What operating system is DMS running on?
Linux
What instruction set architecture is DMS running on?
x86_64 / AMD64
What container orchestration tool are you using?
Docker Compose
docker-compose.yml
Relevant log output
No response
Other relevant information
What level of experience do you have with Docker and mail servers?
Code of conduct
Improvements to this form?
No response