Bug #10922
closed
Gmail smtp relay TLS stopped working.
Added by Anton Palmgard about 5 years ago.
Updated about 5 years ago.
Description
Hi, a few days ago up to a week my stunnel connection to smtp-gmail.gmail.com. stopped working with the error:
ep 21 17:25:57 stunnel LOG50: Connection reset: 0 byte(s) sent to TLS, 0 byte(s) sent to socket
Sep 21 17:25:57 stunnel LOG30: Remote server is not RFC 1425 compliant
Sep 21 17:25:57 stunnel LOG50: Service [to_gmail] connected remote server from xxx.xxx.xxx.xxx:29662
Tried from 2 different Locations / sites (i.e companies) same error. The relay work fine without client settings but that leaves TLS to the endpoint.. Office 365 relay works fine with TLS. Contacted Google support but the claimed nothing have been changed. I assume somehting with the TLS version/ CIPHERS is wrong ?
- Status changed from New to Rejected
no such issue on pfSense 2.4.5-p1, pfSense-pkg-stunnel-5.50_4
/usr/local/etc/stunnel/stunnel.conf:
cert = /usr/local/etc/stunnel/stunnel.pem
chroot = /var/tmp/stunnel
setuid = stunnel
setgid = stunnel
[]
client = yes
accept = 127.0.0.1:2525
connect = smtp.gmail.com:25
debug = 6
TIMEOUTclose = 0
protocol = smtp
test:
# telnet 127.0.0.1 2525
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 smtp.gmail.com ESMTP m10sm13729407edf.11 - gsmtp
works fine, keep further discussion on the forum: https://forum.netgate.com/
Hi to clarify we use, smtp-relay.gmail.com as this is used by gsuite.
Anton Palmgard wrote:
Hi to clarify we use, smtp-relay.gmail.com as this is used by gsuite.
/usr/local/etc/stunnel/stunnel.conf:
cert = /usr/local/etc/stunnel/stunnel.pem
chroot = /var/tmp/stunnel
setuid = stunnel
setgid = stunnel
[smtp-relay.gmail.com]
accept = 127.0.0.1:2525
connect = smtp-relay.gmail.com:25
debug = 5
TIMEOUTclose = 0
protocol = smtp
# telnet 127.0.0.1 2525
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 smtp-relay.gmail.com stunnel for ESMTP s23sm4053ljj.6 - gsmtp
same, no issues
Please use https://forum.netgate.com/ for further discussion
Also available in: Atom
PDF