TLS issues when receiving mails.

ardi_80_ironport · ‎11-05-2009

HI

I have the following problem. I have activated TLS both for incoming and outgoing mails. Email sent from our domain to outside recipients works fine with TLS header. The problem is with incoming mails. Mails sent to our domain are received with no TLS header. Could it be the certificate that is not trusted? How can i verify it? Could it be the firewall that may be dropping incoming TLS connection?

Andrew Wurster · ‎11-06-2009

that's a good possibility. check out my article on how cisco firewalls' ESMTP inspection or fixup will ruin many advanced smtp operations:
http://tinyurl.com/lrr3or

once you've ruled out the firewall, you can also double check your config steps for inbound TLS negotiation:
http://tinyurl.com/g2noq

you'll need to locate the mail_logs or an injection debug log for these connections to see what's happening:
http://tinyurl.com/gcoof

thanks!

andrew

ardi_80_ironport · ‎11-09-2009

Thanks,

Very helpful. It was the firewall inspections policy.