1

我最近在我的 Debian Squeeze 服务器上出现了一个奇怪的问题。

我已经将 Exim4 配置为使用带有加密设置的 SMTP-AUTH 并在此机器上运行了很长时间，但现在它不起作用。

起初我以为可能是我的证书过期了，但事实并非如此，它们还能再用几年。

服务器似乎不再在端口 25 上侦听。

如果我尝试远程登录到端口 25，它会超时。

如果我在服务器上运行 netstat -tulpen，则端口 25 上没有任何监听。

我正在为 Exim4 使用 splitconf。

在 conf.d/main 我启用 MAIN_TLS_ENABLE=true

在 conf.d/auth/30_exim4-config_examples 我有以下

# Authenticate against local passwords using sasl2-bin
# Requires exim_uid to be a member of sasl group, see README.Debian.gz
plain_saslauthd_server:
   driver = plaintext
   public_name = PLAIN
   server_condition = ${if saslauthd{{$auth2}{$auth3}}{1}{0}}
   server_set_id = $auth2
   server_prompts = :
   .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS
   server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}
   .endif
#
 login_saslauthd_server:
   driver = plaintext
   public_name = LOGIN
   server_prompts = "Username:: : Password::"
   # don't send system passwords over unencrypted connections
   server_condition = ${if saslauthd{{$auth1}{$auth2}}{1}{0}}
   server_set_id = $auth1
   .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS
   server_advertise_condition = ${if eq{$tls_cipher}{}{}{*}}
   .endif

如果我在服务器上运行此命令： swaks -a -tls -q HELO -s localhost -au A_USER_NAME -ap '<>'

I get this ... === Trying localhost:25... * Error connecting 0.0.0.0 to localhost:25: * IO::Socket::INET: connect: Connection refused

Can someone point me to some more advanced debugging techniques?

4

1 回答 1

0

OK. I figured it out.

Comcast blocks port 25. I don't know why this is coming up now, unless they've recently started blocking it.

I had to change a line in /etc/default/exim4

From this

SMTPLISTENEROPTIONS='-oX 25 -oP /var/run/exim4/exim.pid'

To this

SMTPLISTENEROPTIONS='-oX 465:25 -oP /var/run/exim4/exim.pid'

I also added this to /etc/exim4/conf.d/main/03_exim4-config_tlsoptions

tls_on_connect_ports=465

It's odd that this just popped up, unless a Debian package updated the /etc/default/exim4 file. It's confusing, but it's working. Hopefully this will be helpful to someone in the future.

Cheers.

于 2013-03-31T00:17:45.717 回答