Can't connect to imap?

[viraladmin]

Using webmail works just fine.

I can receive email from my mail client.

I can't send outgoing mail and I am baffled as to why.

It always returns error that STARTTLS is not advertised.

Username: [email protected]
IMAP hostname: 'afpayday.com'
IMAP port: 143
IMAP security: STARTTLS
IMAP auth method: Normal password
SMTP hostname: 'afpayday.com'
SMTP port: 587
SMTP security: STARTTLS
SMTP auth method: Normal password
Webmail URL: http://198.23.213.66/webmail/

I have tried configuring SMTP in my client using mail.afpayday.com on port 587
I have tried configuring SMTP in my client using afpayday.com on port 587
I have tried configuring SMTP in my client using 98.23.213.66 on port 587

All three tell me STARTTLS is not advertised and to disable STARTTLS in my client settings - bu know STARTTLS should be working. So what am I doing wrong?

DNS records show:
mail._domain...TXT "v=DKIM1; k=rsa; p=long_string_of_characters"
_domainkeyTXT "t=y; o=~;"
_dmarcTXT "v=DMARC1; p=none"
@ TXT "v=spf1 a mx ip4:198.23.213.66 ~all"
@ MX 10 mail.afpayday.com.
imap A 198.23.213.66
pop A 198.23.213.66
smtp A 198.23.213.66
mail A 198.23.213.66
@ A 198.23.213.66

[viraladmin]

I am also finding no one can send me emails, the message returned is:

The response from the remote server was:
454 TLS currently unavailable

yet according to vesta TLS is enabled.

firwall shows:
ACCEPTTCP/ SMTP25,465,587,25250.0.0.0/0


exim config shows:
tls_advertise_hosts = *
tls_certificate = /usr/local/vesta/ssl/certificate.crt
tls_privatekey = /usr/local/vesta/ssl/certificate.key

daemon_smtp_ports = 25 : 465 : 587 : 2525
tls_on_connect_ports = 465

So why is everything saying TLS is not running?

[viraladmin]

As is generally the case with vestacp I ended up solving it myself. Thanks for all the replies.

[zimmer]

Can you share your solution in case if someone will have the same issue?

Thx.