“TLS is required, but was not offered by host alt4.gmail-smtp-in.l.google.com[64.233.186.27]â€
Clash Royale CLAN TAG#URR8PPP
up vote
0
down vote
favorite
1
Sending emails using TLS not working. Without its working. Copy of tls_policy_file (if I change gmail to secure it gives TLS is requied error):
cat /etc/postfix/tls_policy
gmail.com may
Copy of main.cf
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
disable_dns_lookups = no
html_directory = no
inet_interfaces = all
inet_protocols = ipv4
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
maximal_backoff_time = 14400s
maximal_queue_lifetime = 1d
milter_default_action = accept
minimal_backoff_time = 3600s
mydestination = $myhostname, localhost.$mydomain, localhost
mydomain = abc.com
mynetworks = 10.5.78.0/24, 127.0.0.0/8
myorigin = $myhostname
newaliases_path = /usr/bin/newaliases.postfix
non_smtpd_milters = $smtpd_milters
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES
sample_directory = /usr/share/doc/postfix-2.6.6/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtp_pix_workarounds = delay_dotcrlf
smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
smtp_tls_policy_maps = hash:/etc/postfix/tls_policy
smtpd_client_restrictions = check_client_access hash:/etc/postfix/access
smtpd_milters = inet:127.0.0.1:8891
smtpd_starttls_timeout = 300s
smtpd_tls_CAfile = /etc/pki/tls/certs/abc-int-cert.crt
smtpd_tls_cert_file = /etc/pki/tls/certs/abc.com.crt
smtpd_tls_key_file = /etc/pki/tls/private/abc.com.key
smtpd_tls_loglevel = 1
smtpd_tls_mandatory_ciphers = high
smtpd_tls_mandatory_exclude_ciphers = aNULL, MD5
smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550
postfix smtp
edited Sep 21 '16 at 19:38
Braiam
22.6k1971132
asked Sep 21 '16 at 17:45
Sag
11
add a comment |Â
up vote
0
down vote
favorite
1
Sending emails using TLS not working. Without its working. Copy of tls_policy_file (if I change gmail to secure it gives TLS is requied error):
cat /etc/postfix/tls_policy
gmail.com may
Copy of main.cf
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
disable_dns_lookups = no
html_directory = no
inet_interfaces = all
inet_protocols = ipv4
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
maximal_backoff_time = 14400s
maximal_queue_lifetime = 1d
milter_default_action = accept
minimal_backoff_time = 3600s
mydestination = $myhostname, localhost.$mydomain, localhost
mydomain = abc.com
mynetworks = 10.5.78.0/24, 127.0.0.0/8
myorigin = $myhostname
newaliases_path = /usr/bin/newaliases.postfix
non_smtpd_milters = $smtpd_milters
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES
sample_directory = /usr/share/doc/postfix-2.6.6/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtp_pix_workarounds = delay_dotcrlf
smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
smtp_tls_policy_maps = hash:/etc/postfix/tls_policy
smtpd_client_restrictions = check_client_access hash:/etc/postfix/access
smtpd_milters = inet:127.0.0.1:8891
smtpd_starttls_timeout = 300s
smtpd_tls_CAfile = /etc/pki/tls/certs/abc-int-cert.crt
smtpd_tls_cert_file = /etc/pki/tls/certs/abc.com.crt
smtpd_tls_key_file = /etc/pki/tls/private/abc.com.key
smtpd_tls_loglevel = 1
smtpd_tls_mandatory_ciphers = high
smtpd_tls_mandatory_exclude_ciphers = aNULL, MD5
smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550
postfix smtp
edited Sep 21 '16 at 19:38
Braiam
22.6k1971132
asked Sep 21 '16 at 17:45
Sag
11
Does it work if you useverifyinstead ofsecure?
– tarleb
Sep 21 '16 at 18:24
add a comment |Â
up vote
0
down vote
favorite
1
up vote
0
down vote
favorite
1
1
Sending emails using TLS not working. Without its working. Copy of tls_policy_file (if I change gmail to secure it gives TLS is requied error):
cat /etc/postfix/tls_policy
gmail.com may
Copy of main.cf
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
disable_dns_lookups = no
html_directory = no
inet_interfaces = all
inet_protocols = ipv4
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
maximal_backoff_time = 14400s
maximal_queue_lifetime = 1d
milter_default_action = accept
minimal_backoff_time = 3600s
mydestination = $myhostname, localhost.$mydomain, localhost
mydomain = abc.com
mynetworks = 10.5.78.0/24, 127.0.0.0/8
myorigin = $myhostname
newaliases_path = /usr/bin/newaliases.postfix
non_smtpd_milters = $smtpd_milters
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES
sample_directory = /usr/share/doc/postfix-2.6.6/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtp_pix_workarounds = delay_dotcrlf
smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
smtp_tls_policy_maps = hash:/etc/postfix/tls_policy
smtpd_client_restrictions = check_client_access hash:/etc/postfix/access
smtpd_milters = inet:127.0.0.1:8891
smtpd_starttls_timeout = 300s
smtpd_tls_CAfile = /etc/pki/tls/certs/abc-int-cert.crt
smtpd_tls_cert_file = /etc/pki/tls/certs/abc.com.crt
smtpd_tls_key_file = /etc/pki/tls/private/abc.com.key
smtpd_tls_loglevel = 1
smtpd_tls_mandatory_ciphers = high
smtpd_tls_mandatory_exclude_ciphers = aNULL, MD5
smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550
postfix smtp
edited Sep 21 '16 at 19:38
Braiam
22.6k1971132
asked Sep 21 '16 at 17:45
Sag
11
Sending emails using TLS not working. Without its working. Copy of tls_policy_file (if I change gmail to secure it gives TLS is requied error):
cat /etc/postfix/tls_policy
gmail.com may
Copy of main.cf
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
disable_dns_lookups = no
html_directory = no
inet_interfaces = all
inet_protocols = ipv4
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
maximal_backoff_time = 14400s
maximal_queue_lifetime = 1d
milter_default_action = accept
minimal_backoff_time = 3600s
mydestination = $myhostname, localhost.$mydomain, localhost
mydomain = abc.com
mynetworks = 10.5.78.0/24, 127.0.0.0/8
myorigin = $myhostname
newaliases_path = /usr/bin/newaliases.postfix
non_smtpd_milters = $smtpd_milters
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES
sample_directory = /usr/share/doc/postfix-2.6.6/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtp_pix_workarounds = delay_dotcrlf
smtp_tls_CAfile = /etc/pki/tls/certs/ca-bundle.crt
smtp_tls_policy_maps = hash:/etc/postfix/tls_policy
smtpd_client_restrictions = check_client_access hash:/etc/postfix/access
smtpd_milters = inet:127.0.0.1:8891
smtpd_starttls_timeout = 300s
smtpd_tls_CAfile = /etc/pki/tls/certs/abc-int-cert.crt
smtpd_tls_cert_file = /etc/pki/tls/certs/abc.com.crt
smtpd_tls_key_file = /etc/pki/tls/private/abc.com.key
smtpd_tls_loglevel = 1
smtpd_tls_mandatory_ciphers = high
smtpd_tls_mandatory_exclude_ciphers = aNULL, MD5
smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550
postfix smtp
postfix smtp
edited Sep 21 '16 at 19:38
Braiam
22.6k1971132
asked Sep 21 '16 at 17:45
Sag
11
edited Sep 21 '16 at 19:38
Braiam
22.6k1971132
asked Sep 21 '16 at 17:45
Sag
11
edited Sep 21 '16 at 19:38
Braiam
22.6k1971132
edited Sep 21 '16 at 19:38
Braiam
22.6k1971132
edited Sep 21 '16 at 19:38
Braiam
22.6k1971132
22.6k1971132
asked Sep 21 '16 at 17:45
Sag
11
asked Sep 21 '16 at 17:45
Sag
11
asked Sep 21 '16 at 17:45
Sag
11
11
Does it work if you useverifyinstead ofsecure?
– tarleb
Sep 21 '16 at 18:24
add a comment |Â
Does it work if you useverifyinstead ofsecure?
– tarleb
Sep 21 '16 at 18:24
Does it work if you use
verify instead of secure?– tarleb
Sep 21 '16 at 18:24
Does it work if you use
verify instead of secure?– tarleb
Sep 21 '16 at 18:24
add a comment |Â
1 Answer
1
active
oldest
votes
up vote
0
down vote
If you are using the secure policy, and since Gmail machines use certificates signed for mx.google.com, you should set the match attribute to an appropriate value:
gmail.com secure match=mx.google.com:.mx.google.com
.gmail.com secure match=mx.google.com:.mx.google.com
See the documentation for the smtp_tls_verify_cert_match and smtp_tls_secure_cert_match parameters for details.
answered Sep 21 '16 at 18:39
tarleb
1,477519
add a comment |Â
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
0
down vote
If you are using the secure policy, and since Gmail machines use certificates signed for mx.google.com, you should set the match attribute to an appropriate value:
gmail.com secure match=mx.google.com:.mx.google.com
.gmail.com secure match=mx.google.com:.mx.google.com
See the documentation for the smtp_tls_verify_cert_match and smtp_tls_secure_cert_match parameters for details.
answered Sep 21 '16 at 18:39
tarleb
1,477519
add a comment |Â
up vote
0
down vote
If you are using the secure policy, and since Gmail machines use certificates signed for mx.google.com, you should set the match attribute to an appropriate value:
gmail.com secure match=mx.google.com:.mx.google.com
.gmail.com secure match=mx.google.com:.mx.google.com
See the documentation for the smtp_tls_verify_cert_match and smtp_tls_secure_cert_match parameters for details.
answered Sep 21 '16 at 18:39
tarleb
1,477519
add a comment |Â
up vote
0
down vote
up vote
0
down vote
If you are using the secure policy, and since Gmail machines use certificates signed for mx.google.com, you should set the match attribute to an appropriate value:
gmail.com secure match=mx.google.com:.mx.google.com
.gmail.com secure match=mx.google.com:.mx.google.com
See the documentation for the smtp_tls_verify_cert_match and smtp_tls_secure_cert_match parameters for details.
answered Sep 21 '16 at 18:39
tarleb
1,477519
If you are using the secure policy, and since Gmail machines use certificates signed for mx.google.com, you should set the match attribute to an appropriate value:
gmail.com secure match=mx.google.com:.mx.google.com
.gmail.com secure match=mx.google.com:.mx.google.com
See the documentation for the smtp_tls_verify_cert_match and smtp_tls_secure_cert_match parameters for details.
answered Sep 21 '16 at 18:39
tarleb
1,477519
answered Sep 21 '16 at 18:39
tarleb
1,477519
answered Sep 21 '16 at 18:39
tarleb
1,477519
answered Sep 21 '16 at 18:39
tarleb
1,477519
1,477519
add a comment |Â
add a comment |Â
Â
draft saved
draft discarded
Â
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f311401%2ftls-is-required-but-was-not-offered-by-host-alt4-gmail-smtp-in-l-google-com64%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Does it work if you use
verifyinstead ofsecure?– tarleb
Sep 21 '16 at 18:24