JavaMail SMTP TLS attempt gives SSLHandshakeException on Domino mail server

Javamail TLS smtp (port 25) delivery attempts results in SSLHandshakeException on Domino mail server.
They are however successful on SendMail and Exchange servers.
Privately signed certificates from all three had been added to the keystore.
Thunderbird client is able to send TLS mail successfully through the Domino Server. Additionally the MD5 hash of the cert on IE prompt during Thunderbird delivery matches against the Domino's cert already in keystore.
JavaMail's smtp debug hangs at :
250 Ready to start TLS
EHLO [client name]
Appreciate any feedback..

OK, I think I've found a clue.
When 10.6 server was released, there was an Apple article to fix some log messages that were occurring. Here is an excerpt:
*The Mail Server mail.log may contain encryption warnings after upgrading to Mac OS X Server v10.6.
*For example, warnings such as these may appear in the mail.log:
* warning: no entropy source specified with parameter tlsrandomsource
* warning: encryption keys etc. may be predictable
*For improved encryption in Mac OS X Server v10.6, and to avoid this issue, open Terminal and execute this *command:
*sudo postconf -e tlsrandomsource=/dev/urandom
I've found that if you comment out this line in main.cf:
tlsrandomsource = /dev/urandom (at the very end of the file for me)
then TLS will start up OK. It will display the warning messages in the apple article above, but it starts up and handles TLS !!
Next step is to figure out what broke in the random source and fix the encryption warnings. Anyone want to take a stab at this?

Similar Messages

Smtp log entry, bounces, or does the mail server send bounce backscatter?

Today, I received two bounces from mail I did not send, and they reference a subdomain of a virtual domain on my machine that doesn't exist...
server is set up with domain: server.domain.com
web and mail services are available for virtual domain: service.com
So, I got what I at first thought were phishing bounces, but then when I looked in my mail logs today, I found my first ever SMTP log entries:
Feb 16 07:33:42 server.domain.com postfix/smtpd[----]: warning: hostname #.#.#.#.reverse.someone.net does not resolve to address #.#.#.#: nodename nor servname provided, or not known
I have four of those at various times this morning.
I've checked the mail logs and seen that there are connection attempts, particularly people trying plain text. I have used mxtoolbox and a few other relay checkers to be sure there is not an open smtp relay. none.
I have one site on the service.com and it has its own malware checking (wordpress install). It reports that it is clean and feeling good.
The default sites are unaccessible without http authentication.
Do those SMTP log entires mean someone has gained access? or was my server trying to process backscatter spam? I'm lost on how this could happen.

What do the bounce messages say? Was the mail rejected by a remote server? If so, which one? What are some of the other log entries in the mail log? Does MX Toolbox say your email server is or is not an open relay? Are the IP addresses in your log post an internal or external address? Someone might be using your domain to send spam email but they may not be using your email server and when the messages bounce they get returned to your server.

Domino Mail Server on AIX integrate with Portal

Now My Mail Server is Domino Server.
It on AIX System.
I want integrate with SAP Portal.
But SAP Ticketverifier only work on Win System.
How Can I do?

You can integrate the portal with DMS/CMS by using the DMS connector or DMS repository manager. The DMS repository manager can be dowloaded from sap service marketplace.
Also take a look at:
http://help.sap.com/saphelp_erp2005/helpdata/en/da/e40d3dbd82fe2fe10000000a114084/frameset.htm
There are however some restriction regarding versions.
You could also try to set up a webdav repository manager.
Good luck
Regards
Rasmus
Please do not forget the reward points )

How to bypass proxy when trying to send a mail using javamail smtp

Hi,
I am trying to make a servlet send a mail using javamail smtp protocol on port 25 but i m not able to send getting an exception, i suspect proxy is blocking, so any idea anyone how bypass a proxy.

And if it does turn out that there's a proxy server blocking access to your target SMTP server, the best way to deal with that is to discuss the issue with the person responsible for your network configuration.

Database mail is not sending mail through SMTP TLS

Hello,
I have strange issue with SQL 2012 and Database mail. For some reason server refusing to send email over SMTP TLS. The only error reported to log is below which is completely useless (shame on you Microsoft for that).
I verified that there
1. No networking issues between server and SMTP relay host (Installed Windows Mail and sent mail through it)
2. That account and password is right (verification same as above)
3. That mail engine itself is working (verified through plain SMTP relay through local box itself)
I made a network capture of the process as well and it showing SQL server making initial TLS connection successfully to SMTP relay box and then never sending any data over established TCP connection and eventually timinig out after 60s with no data being
sent).
Any ideas?
Date 1/4/2015 2:03:33 AM
Log Database Mail (Database Mail Log)
Log ID 268
Process ID 223804
Mail Item ID 125
Last Modified 1/4/2015 2:03:33 AM
Last Modified By sa
Message
The mail could not be sent to the recipients because of the mail server failure. (Sending Mail using Account 2 (2015-01-04T02:03:33). Exception Message: Cannot send mails to mail server. (Failure sending mail.).

I looked at both locations mentioned and there is nothing there to tell exactly what is the problem. Again I see on network capture that connection IS established, just no data is being sent.
Relay is done through AWS relay server so there is not an issue on their side. Again I tested this scenario via Windows Mail client installed directly on SQL server, so any issues on the other side (like connectivity, timeouts, AV interferences are ruled
out since Windows Mail works).
Email error log supposed to have details about failure in last brackets, the one which in my case contains fuzzy "Failure to send mail". It supposed to say "unable to establish connection", "timeout expired" etc if there were
any issues on the other side. I have found a lot of reports of those issues on this forum where issue is explicitly stated in error message. In my case there is ZERO information about the issue. Mark Russinovich has excellent presentations where he talks about
useless error messages and this is certainly one of them.
Failure sending mail.

RE: Using JavaMail with JSP when access relay is denied on smtp mail server

Could someone please let me know how to get around the problem of sending an automatic email from a JSP when access relay is denied by the smtp mail server. Could it be that the username and password just needs to be added somewhere???
Any thoughts on how to solve this problem would be greatly appreciated.
Thank you!

I know what you are talking about because I setup no relay on my mail server. I understand why you need to supply a username and password because if the server doesn't allow relay, then you must supply a username and password. Doing it by IP address wouldn't work because you have to know the IP address of all people accessing that page. I am in the same boat as you and once I find out the answer, you'll be the first to know. There is one quick workaround. Get your Net Admin to create a user specifically for the page you plan to send from. Get him to allow relaying for that one user. That worked on my setup and like I said, I'm setup the same way you are. Thanks, J

How can Send Email From JSP to all Mail server.it gives error

I try this code in netbean 5.But it will give the Error.
The code:
<%@page import="java.util.*"%>
<%@page import="javax.mail.*"%>
<%@page import="javax.mail.internet.*"%>
<%
Properties props = System.getProperties();
props.put("mail.smtp.host", "smtp.gmail.com" );
props.put("mail.smtp.port", "465" );
Session s = Session.getInstance(props, null);
MimeMessage message = new MimeMessage(s);
String From = request.getParameter("sender");
InternetAddress from = new InternetAddress(From);
message.setFrom(from);
String Tos = request.getParameter("reciever");
InternetAddress to = new InternetAddress(Tos);
message.addRecipient(Message.RecipientType.TO, to);
String sub =request.getParameter("subject");
message.setSubject(sub);
String mgs =request.getParameter("message");
message.setText(mgs);
Transport.send(message);
%>
<html>

A Message has been sent. 
Check your inbox.


Click here to send another!

</html>
Error is :
javax.servlet.ServletException: Could not connect to SMTP host: smtp.gmail.com, port: 465
 org.apache.jasper.runtime.PageContextImpl.doHandlePageException(PageContextImpl.java:848)
 org.apache.jasper.runtime.PageContextImpl.handlePageException(PageContextImpl.java:781)
 org.apache.jsp.MailBeema_jsp._jspService(MailBeema_jsp.java:88)
 org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:97)
 javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
 org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:322)
 org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:291)
 org.apache.jasper.servlet.JspServlet.service(JspServlet.java:241)
 javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
 org.netbeans.modules.web.monitor.server.MonitorFilter.doFilter(MonitorFilter.java:362)
root cause
javax.mail.MessagingException: Could not connect to SMTP host: smtp.gmail.com, port: 465;
nested exception is:
 java.net.ConnectException: Connection timed out: connect
 com.sun.mail.smtp.SMTPTransport.openServer(SMTPTransport.java:1282)
 com.sun.mail.smtp.SMTPTransport.protocolConnect(SMTPTransport.java:370)
 javax.mail.Service.connect(Service.java:275)
 javax.mail.Service.connect(Service.java:156)
 javax.mail.Service.connect(Service.java:105)
 javax.mail.Transport.send0(Transport.java:168)
 javax.mail.Transport.send(Transport.java:98)
 org.apache.jsp.MailBeema_jsp._jspService(MailBeema_jsp.java:68)
 org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:97)
 javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
 org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:322)
 org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:291)
 org.apache.jasper.servlet.JspServlet.service(JspServlet.java:241)
 javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
 org.netbeans.modules.web.monitor.server.MonitorFilter.doFilter(MonitorFilter.java:362)

javax.mail.MessagingException: Could not connect to SMTP host: smtp.gmail.com, port: 465;
nested exception is:
java.net.ConnectException: Connection timed out: connectFairly self-explaining, isn't it? That host cannot be connected.
Either check the correctness of the hostname/port, or check your network settings (firewall, router, etc).

Mail: Proper way to adjust IMAP/SMTP mail server entries?

Please forgive, but I am still on 10.4 (Tiger) with an iCloud mail account. I believe this is still a widely applicable and helpful question!
IMAP (Incoming Mail Server):
     MINE IS STILL:      mail.me.com (Currently still working fine)
     Advised/required:     imap.mail.me.com
SMTP (Outgoing mail server):
     MINE IS STILL:          smtp.me.com (Currently still working fine)
     Advised/required:      smtp.mail.me.com
QUESTION 1: To have the server entries set properly, can I simply make textual changes in the Incoming/Outgoing server name fields for my IMAP iCloud mail account (via insert of word "mail" in server names; change is not shown here)...
...or should one DELETE IMAP ACCOUNT (as I have commonly read!) and recreate with all new correct settings? If it is advisable to Delete the account, why wouldn't just making the quick server name adjustments be sufficient?
Also, I need some fears assuaged:
- "Deleting an IMAP mail account" in Mail has no risk/danger of losing/deleting all of your Sent and Received Inbox/Sentbox contents, correct? When you recreate an Account, all of your mail held on server is still fully safe and accessible, yes?
ISSUE TWO:
I like to use both my "me.com" and "mac.com" email addresses.
Under "Edit (Outgoing) Server List," I still have a secondary older entry "smtp.mac.com" listed.
QUESTION 2: Is the following statement of my understanding accurate?
"Deletion of the smtp.mac.com outgoing server is completely acceptable and would not prohibit sending of email under mac.com email address because the "mac.com" email address is an alias for the me.com address and ALL mail (whether sent with mac.com or me.com email address) goes out through the ME.COM server."
Is that correct. If not, kindly advise!
I really appreciate the help.
I am not a beginning Mac user and find that the complete configuration intricacies of Apple Mail (I know that's the old name) are one thing that users are never really guided to master and comprehend.
Many thanks in advance!
Bill from Maryland

These are the settings recomended by Apple.
IMAP (Incoming Mail Server) information:
Server name: imap.mail.me.com
SSL Required: Yes
Port: 993
Username: [email protected] (use your @me.com address from your iCloud account)
Password: Your iCloud password
SMTP (outgoing mail server) information:
Server name: smtp.mail.me.com
SSL Required: Yes
Port: 587
SMTP Authentication Required: Yes
Username: [email protected] (use your @me.com address from your iCloud account)
Password: Your iCloud password
Note: If you receive errors using SSL, try using TLS instead.

Smtp relay on osx 10.9.5 and server 3.2.2

What we have
We have a mac mini setup using 10.9.5 and server 3.2.2. The mail server is OFF but we have a Relay Outgoing Mail through ISP checked (and the proper credentials for the outgoing relay (FQDN) and the authorization credentials.
What we are trying to do
Our mac mini runs a php script to generate an email that needs to be sent to users. The mail has to use a smtp relay and we are trying to use the smtp relay provided by our email vendor.
Settings required by our email vendor
Instructions for configuring an email client can be found here
https://www.namecheap.com/support/knowledgebase/article.aspx/1179/2175/general-c onfiguration-for-mail-clients-and-mobile-devices
We set up the relay in Mail on the Server 3.2.2 to use SSL and port 465. In our particular case the relay is configured as shown below. Obviously the [email protected] is the proper username for our authorization.
When we try to send mail (we test this function by sending mail from terminal by using the following command (sending mail to myself from myself)
printf "Subject: TestnHello" | sendmail -f [email protected] [email protected]
and then watch the mail logs the smtp server rejects our mail due to authorization issues. The mail log text is shown below (email addresses replaced with [email protected] and IP addresses modified)
Dec 22 11:57:03 109-218-164-81.lightspeed.austtx.sbcglobal.net postfix/pickup[16825]: 5545383231: uid=501 from=<[email protected]>
Dec 22 11:57:03 109-218-164-81.lightspeed.austtx.sbcglobal.net postfix/cleanup[16827]: 5545383231: message-id=<[email protected]bal.net>
Dec 22 11:57:03 109-218-164-81.lightspeed.austtx.sbcglobal.net postfix/qmgr[16826]: 5545383231: from=<[email protected]>, size=340, nrcpt=1 (queue active)
Dec 22 11:57:03 109-218-164-81.lightspeed.austtx.sbcglobal.net postfix/error[16838]: 5545383231: to=<[email protected]>, relay=none, delay=0.04, delays=0.02/0/0/0.02, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to eforwardct3.name-services.com[216.163.176.39]:465: Connection refused)
Dec 22 11:57:05 109-218-164-81.lightspeed.austtx.sbcglobal.net postfix/master[16824]: master exit time has arrived
We find many self help pages on the internet that talk about modifying the main.cf file located at /Library/Server/Mail/Config/postfix. Some even talk about modifying settings in the master.cf file in /ect/postfix. I have tried several and none seem to work.
Can anyone provide some guidance?
Regards!

The Server GUI doesn't provide for this use case.
Take the following steps to configure Postfix to relay mail to a remote SMTP server with password authentication over SSL. Substitute as required for strings in italics below. Address is the fully-qualified domain name of the relay host. The value of port is usually either 25, 465, or 587. Username and password refer to your credentials on the relay host.
In the current version of OS X Server (but not necessarily in older versions), Steps 1 and 3 should be done for you when you enable relaying and relay authentication in the Server application.
1. If necessary, create or update the relayhost directive in
 /Library/Server/Mail/Config/postfix/main.cf
It should look like this:
 relayhost = [address]:port
2. Add these lines, above the section at the end that begins with the comment "# Mac OS X Server":
 smtp_sasl_security_options =
 smtp_tls_CAfile = /etc/certificates/relayhost.pem
 smtp_tls_session_cache_database = btree:$data_directory/smtp_tls_session_cache
 smtp_use_tls = yes
3. If it doesn't already exist, create the password file
 /Library/Server/Mail/Config/postfix/sasl/passwd
with this content:
 [address]:port
 username:password
Here address must match $relayhost.
Then create the password database:
sudo postmap /Library/Server/Mail/Config/postfix/sasl/passwd
This action creates the file
 /Library/Server/Mail/Config/postfix/sasl/passwd.db
The two password files should be readable by root only.
4. Create the file
 /etc/certificates/relayhost.pem
with the CA certificate(s) to be trusted for authentication of the remote host. You get those certificates from the service provider. If you can't find a link to download them, try this:
openssl s_client -connect address:port -showcerts < /dev/null | sed -n '/-BEGIN /,/-END /p' | sudo sh -c 'cat > /etc/certificates/relayhost.pem'
The command may produce an error message that isn't necessarily significant. For servers that use the older STARTTLS protocol, rather than straight TLS or SSL, this command may need to be modified.
5. Restart the Mail service.

SMTP error from remote mail server after initial connection:

Hello folks. I having some serious issues sending email to clients with .mac accounts. I keep on getting the following error. Can someone help? I have replaced email address names with "Blank@...) for obvious reasons.
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
[email protected]
SMTP error from remote mail server after initial connection:
host smtp-mx1.mac.com [17.148.20.64]: 452 try later:
retry timeout exceeded
------ This is a copy of the message, including all the headers. ------
Return-path: <[email protected]>
Received: from ip72-207-229-240.br.br.cox.net ([72.207.229.240] helo=[192.168.0.102])
by srv3.purenrg.com with esmtp (Exim 4.68)
(envelope-from <[email protected]>)
id 1JFeOb-0001FZ-5F
for [email protected]; Thu, 17 Jan 2008 18:43:41 -0500
Message-Id: <[email protected]>
From: "[email protected]" <[email protected]>
To: Cindy Barnes <[email protected]>
Content-Type: multipart/alternative; boundary=Apple-Mail-3--1032078955
Mime-Version: 1.0 (Apple Message framework v915)
Subject: invoice 520 is overdue
Date: Thu, 17 Jan 2008 17:43:40 -0600
X-Mailer: Apple Mail (2.915)
X-PopBeforeSMTPSenders: [email protected]{
--Apple-Mail-3--1032078955
Content-Type: text/plain;
charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit

I'm sure someone will give more detail, but it looks like the server blocked your address because it thinks it's a spam source. If you're not spamming, then it might be someone on the same network spamming, or malware on your computer doing it. Or it could just be a mistake. try calling whoever runs your mail server and see if they can give you more information.

What is the outgoing (SMTP) mail server for iCloud?

What is the outgoing (SMTP) mail server for icloud?

dominic23:
That's just the name/description you can give the server that appears in Mail's preferences for that account.
After selecting Edit you can put in whatever you want in the description.
advisor81:
Why do you need to know the name? If you add an iCloud account in Mail all you really need is your Apple ID and password. The servers are automatically assigned.

TLS mail server issues

I have a customer with Snow Leopard server running mail services. Some hosts cannot email them due to what we think is a TLS related issue. These hosts have TLS enabled for the mail server and they receive the below error message when sending to my customer:
15:27:41.044 3 SMTP-406902(domain.com) failed to establish a secure connection with http://xx.xx.xx.xx:25. Error Code=X509: signature algorithms do not match.
When the host sender turns off TLS emails make it to my customer. The host that cannot send seems to think it's a Postfix configuration issue but I don't know where to begin. It's not a firewall issue as we've tried that with no success.
Any ideas would be appreciated. Thanks.

You'll want to provide more details around the "hosts" here. Is this, for instance, mail clients connecting to the mail server? (It's comparatively rare to have encrypted traffic on port 25 between mail servers.)
If this is mail clients connecting to a remote mail server via port 25, then have a look at switching over to the authenticated ports; moving off of submissions via port 25, as those can run afoul of anti-spam mechanisms.
You'll want to provide more details around the sorts of certificates involved here, as well.
And if the mail server's DNS is stuffed up - you've been asking a whole lot of SMTP questions around the forums, and you've been unfortunately rather "cagey" on the details and the configuration details - you'll have SMTP-related issues sending to some hosts. The forward and reverse and MX records have to match up or the mail will be rejected during the reception-related processing performed by various remote servers; your server will be marked as a spam host.

Outgoing Mail Server(SMTP)

Does anyone know what the host name for the outgoing mail server is suppose to be, right now I have it listed as smtp1.attglobal.net, but it's saying cannot send out mail the connection to the outgoing server smtp1.attglobal.net failed. Can anyone give me the correct outgoing server.
Jeff

Try this first:
http://www.apple.com/support/iphone/mailhelper/
The Outgoing mail server depends on who your email provider is. You can usually get information on the provider's web site for settings, or check the settings on your computer; they will generally be the same. HOWEVER, if your ISP is your email provider they may not allow use of their outgoing mail server unless you are connected to their network. In this case you would be able to send mail connected to your home wireless network, but no from other wireless networks or using EDGE on the phone.
If this is your situation you have several options:
1. For EDGE use only, use cwmx.com as the outgoing mail server, no user id or password. This will not work when connected via a WiFi network.
2. Create a gmail account and use their server; this requires user id and password.
3. Us a paid SMTP site (e.g., godaddy.com)

Mail Server deaf to incoming SMTP

I'm running an EIMS 3.3 mail server, on a G5 iMac 1.8 ghz, OSX 10.4.11. The system worked well for years. I went to an Xserve colo, and now moved, and am trying to resurrect the EIMS mail server.
Email accounts hosted by the server exchange happily whether client is local or remote. Outgoing email to anyone goes through fine. My server sees no connections to deliver mail from the outside world (domains), but remote users can check their accounts.
telnet pacmult.com 25 gets me
Trying 127.0.0.1...
Connected to pacmult.com.
Escape character is '^]'.
Connection closed by foreign host.
Nothing in the error logs, mails hit their accounts ok, just no connections or mail coming in.
Wha???????? Any good SMTP geeks on call? Thanks.....
Message was edited by: pacmult No wifi or internal router, just a cable modem to the server, firewall is in the iMac only, and results are the same with firewall off.

Hi Pterry, thanks for piping up.
I checked all the logs (that I can find), and I don't see a reference to these connection failures. If you can name a particular log of interest, I'll copy it here.
My EIMS logs show no errors, either in the main error log, or receive error log, as it's the mail server appears to never see these incoming attempts.
It was a good idea to check, but I show no other mail services running that would interfere.
I called my cable company and asked if they had a smtp block on my leg, and they swore they different. My old ISP in LA said he's showing a smpt block of some sort.
I tried to send an email to a local account from my yahoo account, and got this daemon bounce:
Hi. This is the qmail-send program at yahoo.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.
<[email protected]>:
Connected to 65.175.133.72 but connection died. (#4.4.2)
I'm not going to try again; this message has been in the queue too long.
I checked the mx record, and it appears to be correct.
Day 3, I'm still looking.......

Free POP of SMTP mail server

I am student, doing a project about javamail.
I only have mail hotmail and yahoo mail account which are not working with my program.
Actually i was trying to find a way to send and retrieve mail from them, since i'm going to pass my project soon, i just wanna find some other account which support the POP and SMTP, so i can do my testing!
Could someone tell me some free POP of SMTP mail server, which i can do my testing!!
Thanks

I am student, doing a project about javamail.
I only have mail hotmail and yahoo mail account which
are not working with my program.
Actually i was trying to find a way to send and
retrieve mail from them, since i'm going to pass my
project soon, i just wanna find some other account
which support the POP and SMTP, so i can do my
testing!
how to create a mail server
Could someone tell me some free POP of SMTP mail
server, which i can do my testing!!
ThanksI am student, doing a project about javamail.
I only have mail hotmail and yahoo mail account which are not working with my program.
Actually i was trying to find a way to send and retrieve mail from them, since i'm going to pass my project soon, i just wanna find some other account which support the POP and SMTP, so i can do my testing!

JavaMail SMTP TLS attempt gives SSLHandshakeException on Domino mail server

Similar Messages

Maybe you are looking for