From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 9633115838C for ; Tue, 23 Jan 2024 21:41:31 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 9B0442BC022; Tue, 23 Jan 2024 21:41:25 +0000 (UTC) Received: from insect.birch.relay.mailchannels.net (insect.birch.relay.mailchannels.net [23.83.209.93]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 085482BC013 for ; Tue, 23 Jan 2024 21:41:24 +0000 (UTC) X-Sender-Id: thundermail|x-authsender|confabulate@kintzios.com Received: from relay.mailchannels.net (localhost [127.0.0.1]) by relay.mailchannels.net (Postfix) with ESMTP id 92BF1102DA3 for ; Tue, 23 Jan 2024 21:41:23 +0000 (UTC) ARC-Seal: i=1; s=arc-2022; d=mailchannels.net; t=1706046082; a=rsa-sha256; cv=none; b=tNkKOEQGiv5Zcp9C/oE+Vv6K2AL9p6E2SbujgGrVygSIGyGPfFe7XSBZpiINAGgY/YPRl6 MXDhffw18PZjmA+tGQ1MKH/IaoiVYT5++T6Nf9q7L0mDUm5iKxfhjiAFsh57ElwlmnAh1Y yMAh3wQ9pLzOG4TudzHEm6A/D3EeAvGhksUL80en2Ajkco9nFVZTgcA77/ZMPpnA8UI2dc Ae5RkUDy0eBXSdc6QU3CBH9vCknNK13fbl8shxBaxlg6TmMCu69nl8H4fX74gCsGPibPKP Xku4r5MNIGWmw60FupRvG9CDiUu7ZLii7f9LLBSuwVVbFnSD/K6vw0suP3AnjQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=mailchannels.net; s=arc-2022; t=1706046082; h=from:from:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:dkim-signature; bh=1b6/k9EhVH/3rhHFlN4gwkG9UtMzbgRhLpS1obeJlXs=; b=tpWZ8i+DDRd7dnYIqQKfC0ENevgnl9vo6oOkK05lEI4C4a+3Iok+O+LiXScnORtyl0XyYf xSNFhv4OGEUVngoatFTuiRm/fUiN7VVMgjTaQdB/JxjRWLF7xDv1bpnptx2HlkmyDRtVeD K9+OT0hlf6kNdNOTJDOp6dXF7ExI1gpelGHXKveEgVpy+VURvNwsB1HBrrnahxehHrDAIq X+rjDU0yngkqaGIiHPsDwsXprz8djo0rYK6P5EuOwcTRhCBIcnx0gB2PvIN7exJYLgj34K aRjTxsKJUHPEDcG/fCLcHJX5+mPHvKKxGurBH3dNvEMWf23RRa0qaOaAwP1Zfg== ARC-Authentication-Results: i=1; rspamd-76cc9994fd-4pkpb; auth=pass smtp.auth=thundermail smtp.mailfrom=confabulate@kintzios.com X-Sender-Id: thundermail|x-authsender|confabulate@kintzios.com X-MC-Relay: Neutral X-MailChannels-SenderId: thundermail|x-authsender|confabulate@kintzios.com X-MailChannels-Auth-Id: thundermail X-Suffer-Society: 29084ef1543e5ec2_1706046083225_1007663067 X-MC-Loop-Signature: 1706046083225:1364525240 X-MC-Ingress-Time: 1706046083225 Received: from mailclean11.thundermail.uk (mailclean11.thundermail.uk [149.255.60.66]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384) by 100.108.147.7 (trex/6.9.2); Tue, 23 Jan 2024 21:41:23 +0000 Received: from cloud220.unlimitedwebhosting.co.uk (cloud220.unlimitedwebhosting.co.uk [149.255.60.183]) by mailclean11.thundermail.uk (Postfix) with ESMTPS id 7D46A40158 for ; Tue, 23 Jan 2024 21:41:17 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kintzios.com; s=default; t=1706046078; bh=1b6/k9EhVH/3rhHFlN4gwkG9UtMzbgRhLpS1obeJlXs=; h=From:To:Subject; b=TZCHzq0yP4+UO+wMnFeWrlp6+gWl7MuFo2PEeAd2WuF/IFEHUlqn0DFi4qgxxMYO3 DWi6fThGs9Bau7ERFt6xCHbnBQcUbX6YeelRuR4pGA7T0jUtZtQE5cHejAJPwleZ5v CD68TRXdDHd9GxRkaUadBAROGOW2cc8KRvhVaygg= From: Michael To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] [SOLVED] [OT] Anyone running mutt outbound smtp on port 587? Date: Tue, 23 Jan 2024 21:41:16 +0000 Message-ID: <1955193.PYKUYFuaPT@rogueboard> In-Reply-To: References: <1793754.VLH7GnMWUR@rogueboard> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart22159638.EfDdHjke4D"; micalg="pgp-sha256"; protocol="application/pgp-signature" X-PPP-Message-ID: <170604607846.1292190.8979287443311310713@cloud220.unlimitedwebhosting.co.uk> X-PPP-Vhost: kintzios.com X-Rspamd-Queue-Id: 7D46A40158 X-Rspamd-Server: mailclean11 X-Spamd-Result: default: False [-0.61 / 999.00]; SIGNED_PGP(-2.00)[]; SUBJECT_ENDS_QUESTION(1.00)[]; MID_RHS_NOT_FQDN(0.50)[]; MIME_GOOD(-0.20)[multipart/signed,text/plain]; ONCE_RECEIVED(0.10)[]; MX_GOOD(-0.01)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; DMARC_POLICY_ALLOW(0.00)[kintzios.com,none]; FROM_HAS_DN(0.00)[]; R_DKIM_ALLOW(0.00)[kintzios.com:s=default]; ARC_NA(0.00)[]; RCVD_TLS_ALL(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; FUZZY_BLOCKED(0.00)[rspamd.com]; DKIM_TRACE(0.00)[kintzios.com:+]; RCVD_COUNT_ONE(0.00)[1]; MIME_TRACE(0.00)[0:+,1:+,2:~]; TO_DN_NONE(0.00)[]; REPLYTO_ADDR_EQ_FROM(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; MISSING_XM_UA(0.00)[]; PREVIOUSLY_DELIVERED(0.00)[gentoo-user@lists.gentoo.org]; R_SPF_ALLOW(0.00)[+mx]; NEURAL_HAM(-0.00)[-0.997]; ASN(0.00)[asn:34931, ipnet:149.255.60.0/22, country:GB]; RCVD_VIA_SMTP_AUTH(0.00)[]; HAS_REPLYTO(0.00)[confabulate@kintzios.com] X-Rspamd-Action: no action X-Archives-Salt: 658ded76-32a0-4b0c-a71f-95e2dc9511f7 X-Archives-Hash: a4455445a54cb2911a45fa68349c206c --nextPart22159638.EfDdHjke4D Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="UTF-8"; protected-headers="v1" From: Michael To: gentoo-user@lists.gentoo.org Reply-To: confabulate@kintzios.com Date: Tue, 23 Jan 2024 21:41:16 +0000 Message-ID: <1955193.PYKUYFuaPT@rogueboard> In-Reply-To: MIME-Version: 1.0 On Tuesday, 23 January 2024 19:09:19 GMT Walter Dnes wrote: > On Tue, Jan 23, 2024 at 04:12:05PM +0000, Michael wrote > > > You can also try to set deprecated TLS protocols in ~/.muttrc > > to see if this will allow for a successful connection: > > > > http://mutt.org/doc/manual/#ssl-use-tlsv1 > > Thanks. I commented out the "no" lines. TLS 1.1 failed, but TLS 1.0 > seems to work... > > # set ssl_starttls=no > # set ssl_force_tls=no > set ssl_use_tlsv1=yes > set smtp_url=smtp://smtp.ebox.ca:587 > > > You had a good crack at this, but TBH it would be easier and safer to > > find an email hosting company who use up to date TLS certificates. ;-) > > I currently use cotse.net to handle incoming email. It's served me > well, allowing me to keep the same email address over the years as I've > changed ISPs. I could do outbound email through them, but I don't like > webmail interfaces. Notice the mention of "mutt" in the subject. O_O STOP RIGHT THERE! http://cotse.net/support.html They offer SMTP on any number of ports AND require TLS authentication. No need to dance around deprecated hash algos and certificates. Remove the 'ssl_use_tlsv1=yes' directive. For SMTP server use: set smtp_url = "smtp://Your_User_Name@www.cotse.net:465" You can use port 465 without STARTTLS. Mutt will negotiate an encrypted connection over TLS right off the bat. Use your username and password to login, as you do for POP3/IMAP4. Job done. > This post is coming to you via port 587 *VIA FIBRE*... wheeeee! The > support desk phoned this morning, and we went spelunking through the > config menus of the fibre modem, and set it up. It doesn't matter what connection/IP address you use to authenticate on cotse to receive and send messages. They appear to be running a more up to date professional setup. --nextPart22159638.EfDdHjke4D Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEXqhvaVh2ERicA8Ceseqq9sKVZxkFAmWwMnwACgkQseqq9sKV ZxnVcBAAjwBuwL8xilVJDsIo/EdjbbzIoXwJj/ntr9XnAqWJJ8DonNAeSfGxjcCW rMOhoiwchr5Daa18dVCifh1ZI4ir9pzHkbQjjiVTDxgTQQYDaUqRbuB7T2v2q6zl j4wk8H0fZ1q3/bcAV40JY2p+3NPAnpuPp4PvKK59xKkyCfABropPn8oQ+nixJp3k 5ciXarMfuVduKnKRQnv9wtbUtAtMerGbZdf0SCfd2vfooh+o0GqqvTclrnEpEmHi Kfp7K/4KyiXlZms0ijLXKPb7fb1HW1Cm9GUcJiRTgLgot9m/HVxOOAzluj/KZXxu 3qRomyTopTi6x4JqyIiKFcqGVb3jU0MBCIZG01ZCkvebaxmSQgP9eZ6Z5zHyivBT /G/54thQ8NBFngekDiQA6twEzo1jEHlqNIroxfuKPWI7bckTVQwbKg0KUUgQ/N8S Iz+f/Go4NxsRly7jvvr7dn8ZvV/Ku5VxSusZEER5fJW6hX56q3y9+MW/4L/Aewfk FHAMv0uRmV932b86pkrarJLhvGDr6k4iqn0u6yagFNiTVDgorEVabXaHOOA8LTeq Kk5ZLx2jLLsYh4JgY4Ea2ig7NcaO9DzvNRnGsn/QzGc3oNuKZM/2ZyZJ2jVHBNeD Ubho9wUA5VQGuATIL6RPlX1BYH5oV147iUCNMHweWau7uo5PUn4= =GZm3 -----END PGP SIGNATURE----- --nextPart22159638.EfDdHjke4D--