[BUGS] SSL Sendmail

[Jerahmy Pocott]

On 19/01/2008, at 8:58 AM, Edwin Groothuis wrote:

> On Fri, Jan 18, 2008 at 08:33:54PM +1100, Jerahmy Pocott wrote:
>>> I connected with telnet and issued 'starttls' and it says "454 4.3.3
>>> TLS not available after start".
>>
>> Never mind, I see now that you need to issue starttls BEFORE ehlo..
>
> Are you sure?
>
>
> How can you start it when you don't know if it is capable?

That's a good point..

But it's working now.. I don't remember what I did.. Perhaps I had  
forgotten to copy my .cf over the top of the existing one or restart  
sendmail, as starttls wasn't coming up in the supported options after  
ehlo.. So I had forgotten to do something..

While I'm on the topic, my server is allowing relay based on AUTH,  
which seems to override any other relay settings if they pass. How can  
you restrict the domains that an AUTHed client is allowed to send from?