TLS errors ?

[Remuz]

Hi,

I recently started using VetaCP for my self-hosted email. Just recently I installed my own certificate for my domain, It all ran fine for a while. But a few days ago I started to have delivery problems for all domains within vesta.

I'm getting the following error from Google:

Code: Select all

Delivery to the following recipient failed permanently:

     [email protected]

Technical details of permanent failure: 
Google tried to deliver your message, but it was rejected by the server for the recipient domain domain.tld by mail.domain.tld. [x.x.x.x].

The error that the other server returned was:
454 TLS currently unavailable

And thunderbird is giving me this error when trying to send mail.

Code: Select all

Sending of message failed.
An error occurred sending mail: Unable to establish a secure link with SMTP server mail.domain.tld using STARTTLS since it doesn't advertise that feature. Switch off STARTTLS for that server or contact your service provider.

But using telnet I'm seeing this:

Code: Select all

root@Mail~ # telnet mail.domain.tld 25
Trying x.x.x.x ...
Connected to mail.domain.tld.
Escape character is '^]'.
220 mail.domain.tld ESMTP Exim 4.80 Fri, 27 Feb 2015 10:17:04 -0500
ehlo google.com
250-mail.domain.tld Hello google.com [x.x.x.x]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-AUTH PLAIN LOGIN
250-STARTTLS
250 HELP

If you need any information to help diagnose this, feel free to ask away. I'm completely lost on how to fix this.

[drMacFaulty]

Hi,

I recently started using VetaCP for my self-hosted email. Just recently I installed my own certificate for my domain, It all ran fine for a while. But a few days ago I started to have delivery problems for all domains within vesta.

I'm getting the following error from Google:

Code: Select all

Delivery to the following recipient failed permanently:

     [email protected]

Technical details of permanent failure: 
Google tried to deliver your message, but it was rejected by the server for the recipient domain domain.tld by mail.domain.tld. [x.x.x.x].

The error that the other server returned was:
454 TLS currently unavailable

And thunderbird is giving me this error when trying to send mail.

Code: Select all

Sending of message failed.
An error occurred sending mail: Unable to establish a secure link with SMTP server mail.domain.tld using STARTTLS since it doesn't advertise that feature. Switch off STARTTLS for that server or contact your service provider.

But using telnet I'm seeing this:

Code: Select all

root@Mail~ # telnet mail.domain.tld 25
Trying x.x.x.x ...
Connected to mail.domain.tld.
Escape character is '^]'.
220 mail.domain.tld ESMTP Exim 4.80 Fri, 27 Feb 2015 10:17:04 -0500
ehlo google.com
250-mail.domain.tld Hello google.com [x.x.x.x]
250-SIZE 52428800
250-8BITMIME
250-PIPELINING
250-AUTH PLAIN LOGIN
250-STARTTLS
250 HELP

If you need any information to help diagnose this, feel free to ask away. I'm completely lost on how to fix this.

Can you post mail logs in debug mode? From Exim as well as from Dovecot.

Thanks!

[Remuz]

Can you post mail logs in debug mode? From Exim as well as from Dovecot.

Thanks!

Excuse my ignorance, but how would I go about that?

[skurudo]

Remuz, see in /var/log

[Remuz]

Remuz, see in /var/log

I'm aware that's where the logs are. But I don't see any that appear to be debug logs.

Or am I just being dumb?

[drMacFaulty]

Remuz, see in /var/log

I'm aware that's where the logs are. But I don't see any that appear to be debug logs.

Or am I just being dumb?

Just enable debug mode in exim and dovecot and send a mail. Then post exim and dovecot log here ;)