LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 01-14-2005, 03:24 AM   #1
fhd
LQ Newbie
 
Registered: Jan 2005
Posts: 22

Rep: Reputation: 15
sendmail: encryption too weak 0 less than 128


Hi, my sendmail seems to avoid receiving mails unencrypted, and that actually makes me lose a lot of mails I need.

This is an example from my logfiles: (I changed the IPs and hostnames to examples)
Code:
Jan  9 05:56:09 paron-02 sm-mta[14974]: j094u8su014974: ruleset=check_mail, arg1=<info@example.net>, relay
=xyz.example.com [111.111.111.111], reject=403 4.7.0 encryption too weak 0 less than 128
Jan  9 05:56:09 paron-02 sm-mta[14974]: j094u8su014974: from=<info@example.net>, size=3249, class=0, nrcpt
s=0, proto=ESMTP, daemon=MTA, relay=xyz.example.com [111.111.111.111]
Where in sendmail.mc is this controlled? I don't think access.db is involved, that's why I don't post it.
Here's my sendmail.mc:
Code:
divert(0)dnl
include(`/usr/share/sendmail-cf/m4/cf.m4')dnl
VERSIONID(`$Id: sendmail-procmail.mc,v 1.2 2004/12/07 01:59:31 g2boojum Exp $')dnl
OSTYPE(linux)dnl
DOMAIN(generic)dnl

define(`confAUTH_MECHANISMS', `DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
TRUST_AUTH_MECH(`DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
define(`confCACERT_PATH', `/etc/mail/certs')dnl
define(`confCACERT', `/etc/mail/certs/cacert.pem')dnl
define(`confSERVER_CERT', `/etc/mail/certs/sendmail.pem')dnl
define(`confSERVER_KEY', `/etc/mail/certs/sendmail.pem')dnl
define(`confCLIENT_CERT', `/etc/mail/certs/sendmail.pem')dnl
define(`confCLIENT_KEY', `/etc/mail/certs/sendmail.pem')dnl
define(`confAUTH_OPTIONS', `A p y')dnl

FEATURE(`smrsh',`/usr/sbin/smrsh')dnl
FEATURE(`local_lmtp',`/usr/sbin/mail.local')dnl
FEATURE(`local_procmail')dnl
FEATURE(`access_db',`hash -T<TMPF> -o /etc/mail/access.db')dnl
MAILER(local)dnl
MAILER(smtp)dnl
MAILER(procmail)dnl
MASQUERADE_AS(`example.org')dnl
Well, I cannot find the line I have to change reading the sendmail configuration guide, so I'm asking here; tia

Edit:
Forgot to mention; when I fetch mail using fetchmail, I get the same Error (SMTP Error 403) "encryption too weak 0 less than 128" , no matter if I fetch mail from my own server or from a public ISP.

Last edited by fhd; 01-14-2005 at 03:28 AM.
 
Old 01-29-2005, 06:30 PM   #2
fearofcarpet
Member
 
Registered: Nov 2003
Location: Los Angeles
Distribution: Gentoo, FC4, FreeBSD
Posts: 34

Rep: Reputation: 15
If you have anything like this:

TLS_Clt: ENCR:128
TLS_Srv: ENCR:128
TLS_Rcpt: ENCR:128

in your /etc/mail/access file, it will require 128 bit TLS encryption for Client/Server connections.
 
Old 01-29-2005, 09:29 PM   #3
fhd
LQ Newbie
 
Registered: Jan 2005
Posts: 22

Original Poster
Rep: Reputation: 15
thx, this fixed it, I deleted this line and now everything is ok.

But what about fetchmail? Is fetchmail affected by my /etc/mail/access.db too?

And how can I configure sendmail to use encryption only if present on client side?
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Allow weak password chandru.in Linux - Security 7 08-12-2005 07:54 AM
128 bit encryption SSL in Apache jbeiter Linux - Security 2 11-03-2004 09:58 PM
128 bit encryption cyrilvictor Linux - Security 1 11-02-2004 09:18 AM
128 bit encryption cyrilvictor Linux - Security 4 11-02-2004 07:16 AM
Mandrake 9.0 Wireless Works without encryption.. does not with encryption topcat Linux - Wireless Networking 3 05-04-2003 08:47 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 12:12 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration