Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Server program can't send email via SMTP
  •  
brandonh75

Messages: 51
Karma: 0
Send a private message to this user
We recently started using Kerio, and I am trying to get some of our server programs switched over to send mail through Kerio, but they seem to be having trouble and I'm not sure why. When I try to change the email info for WSUS, it says it can't send the test email, but half of the time they actually do go through. Another problem program is called Spiceworks.

I can't get the Spiceworks SMTP email settings to work. I keep getting the error in Spiceworks: Error on outgoing settings: SSL error SSL_connect SYSCALL returned=5 errno=0 state=SSLv2/v3 read server hello A trying to reach 192.168.100.77 on port 25. I'm not sure what that means exactly.

I can use Outlook Express on the same server as Spiceworks and can send email on port 25. Spiceworks will connect to the old email server without trouble.

The Kerio SMTP server (100.77) log shows the following during an attempt from Spiceworks (10.203):

{smtps} SMTP server session begin; client connected from 192.168.10.203:3103
{smtps} Sent SMTP greeting to 192.168.10.203:3103

Fast forward 2 minutes

{conn} Connection timeout after 120000 ms (local=192.168.100.77:25, remote=192.168.10.203:3103)
{conn} Cannot accept SSL connection from 192.168.10.203:3103 to 192.168.100.77:25: SSL code 2, system error: (0) The operation completed successfully.
{smtps} Failed STARTTLS in SMTP connection with 192.168.10.203

This is with Spiceworks on Win 2003 trying to connect via SMTP port 25 to the latest Kerio Connect on Win 2003. I'm trying to find a setting that I may be missing in Kerio, but if that's what is wrong then wouldn't OE not be able to send anything from the same server?

In Kerio, the relay settings should allow authenticated users, and I also put this server into an IP Address Group to allow relay.

I'm not sure what I should be looking for.

Thanks for any input!
  •  
clan

Messages: 236
Karma: 22
Send a private message to this user
There seems that Spiceworks tries to initiate an SSL connection. A short term solution could be to deactivate SSL for outgoing messages in Spiceworks, to try to find the real problem it could be helpful to activate SSL messages in the Kerio debug log.
  •  
Kedar

Messages: 1320
Karma: 48
Send a private message to this user
Check if it tries SSLv2 or SSLv3. Kerio Connect allows only SSLv3 connection for security reasons.
  •  
brandonh75

Messages: 51
Karma: 0
Send a private message to this user
I enabled the SSL messages in the debug log, which added the following:

{conn} SSL debug: id 03776360 SSL handshake started: before/accept initialization
{conn} SSL debug: id 03776360 SSL_accept:before/accept initialization
{conn} SSL debug: id 03776360 SSL_accept:error in SSLv2/v3 read client hello A
...two minutes later...
{conn} Last message repeated 3 times
{conn} Connection timeout after 120000 ms (local=192.168.100.77:25, remote=192.168.10.203:2543)
{conn} Cannot accept SSL connection from 192.168.10.203:2543 to 192.168.100.77:25: SSL code 2, system error: (10035) A non-blocking socket operation could not be completed immediately.

I've also been asking in the Spiceworks forums, but as far as I know it shouldn't be using SSL. Weird.

Thanks!
  •  
clan

Messages: 236
Karma: 22
Send a private message to this user
You may find it as TLS or STARTTLS support, which basically switches the existing connection to SSL.
  •  
brandonh75

Messages: 51
Karma: 0
Send a private message to this user
That did it! There was a hidden setting in Spiceworks that had TLS support enabled. I disabled it and it's all good.

Thanks much!
Previous Topic: ActiveSync Mail Reply/forward symbol wrong
Next Topic: Kerio Connector using 6X the memory of Outlook 2007
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Wed Nov 22 12:10:27 CET 2017

Total time taken to generate the page: 0.00366 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.