TLS is required, but was not offered by host alt2.gmail-smtp-in.l.google

classycraft3r

Hey.
I’ve configurated a mailserver on my VPS, but when I wanted to add TLS (something I don’t know anything of), it stopped working and emails are not sent anymore.
I get a DEAMON reply saying that it has not been delivered because of this error message:

TLS is required, but was not offered by host
    alt2.gmail-smtp-in.l.google.com[108.177.12.26]

Maybe I did not configure it correctly, but gmail is supposed to accept TLS as they say in their support?
Here is my current TLS config:

(mailbox)

piperino

why you want to do that? settings are for receiving domain. isn’t “classydev.fr” the hosted domain on your mailcow instance?
just remove it, let TLS settings alone. except you have some legal obligations with some domains to do mandatory TLS.
“smtp_tls_security_level = dane” is already set as default and that’s perfectly fine.
read - > https://www.postfix.org/postconf.5.html#smtp_tls_policy_maps

if thats not the issue, provide the logs from the whole sequence from the connect till the quit.

classycraft3r

I wanted to make the TLS work as for now GMail marks my emails as insecure because it is missing it.

piperino

where do you see that your message is insecure?

gamearoo

im having the same issue

classycraft3r

Just like gamearoo said

piperino

okay. no clue whats going on. usually, standard mailcow is doing TLS.

gamearoo

its not set as “smtp_tls_security_level = dane” it was set to “smtp_tls_security_level = may” and if i switch it to dane mail will fail to send entirely

piperino

gamearoo
run

docker-compose exec postfix-mailcow postconf -n |grep “smtp_tls_security_level =”

and check the output. dane is default. if you not messed around.

gamearoo

piperino

show your your whole command pls.

gamearoo

piperino

gamearoo

try
docker compose exec postfix-mailcow postconf -n |grep “smtp_tls_security_level ="

gamearoo

if i type the comman manual this happens

ok nvm got a response back

tho i do get this issue

piperino

gamearoo
but thats a different problem. isn’t it?

gamearoo

that started after changing it from may to dane

its defaulting to may when i install mailcow

piperino

gamearoo
just remove the additional TLS settings completely.

gamearoo

so should i set it to just be smtp_tls_security_level = then??

piperino

gamearoo
have you modified the config file? or in the gui as the OP did?

gamearoo

piperino both

my datacenter did tell me this tho

Unfortunately, encrypted email services typically do not work in our network due to the smtp proxies.

no clue if that plays a role

classycraft3r

Mine is on dane by default, but the mails sent are not marked as secure by google.