X-POP-User: lfindlay000.centurytel.net
X-Envelope-From:
Return-Path: <>
Received: from D1R99811 (72-161-234-79.dyn.centurytel.net [72.161.234.79])
by mail960c35.nsolutionszone.com (8.13.6.20060614/8.13.1) with SMTP id m6V04ULW007741
for <>; Thu, 31 Jul 2008 00:04:34 GMT
From: "Linda Findlay" <>
To: "Lilia Guzman" <>

Subject: RE: Sales Tax
Date: Wed, 30 Jul 2008 19:04:36 -0500
Message-ID: <>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="—-=_NextPart_000_002E_01C8F277.1BD4F3B0"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0)
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
X-MS-TNEF-Correlator: <>
In-Reply-To: <>

Reporting-MTA: dns; mail960c35.nsolutionszone.com
Arrival-Date: Thu, 31 Jul 2008 00:04:34 GMT
Final-Recipient: RFC822;
Action: delayed
Status: 4.7.0
Diagnostic-Code: SMTP; 403 4.7.0 TLS handshake failed.
Last-Attempt-Date: Thu, 31 Jul 2008 08:02:07 GMT
Will-Retry-Until: Tue, 5 Aug 2008 00:04:34 GMT

Thanks.

You running exchange? If so do you have a SSL cert on the SMTP server.
Exchange Server? In Exchange System Manager, go down to the server/protocols/SMTP and right click probably default SMTP protocol and click properties. CLick the access tab, and the Authentication button. Make sure Require TLS encryption is turned off.
Sorry guys, forgot to mention it is infact Windows Small Business Server 2003.

Require TLS is off. What is checked is Anonymous Access, Resolve anonymous e-mail, and Integrated Windows Authentication

Could it be the Resolve anonymous e-mail being checked thats causing the issue?
No – don’t think so. BSR was on the right track – you could be advertising to the world you accept TLS if you assigned the SSL cert to the SMTP server (used for OWA).

Assuming this is you:

250-mail.dauntlessmolds.com Hello [68.179.23.209]
250-TURN
250-SIZE
250-ETRN
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-8bitmime
250-BINARYMIME
250-CHUNKING
250-VRFY
250-TLS
250-STARTTLS
250-X-EXPS GSSAPI NTLM
250-AUTH GSSAPI NTLM
250-X-LINK2STATE
250-XEXCH50
250 OK

That would indicate you do allow TLS.
We allow tls, I believe we had another vendor sending mail through Sprint who couldnt send when we had it enabled.

No related posts.