KS-Soft. Network Management Solutions
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister    ProfileProfile    Log inLog in 

Problem with Mail Relay test Exchange 2016 on Windows Server

 
Post new topic   Reply to topic    KS-Soft Forum Index -> Configuration, Maintenance, Troubleshooting
View previous topic :: View next topic  
Author Message
rgoebel



Joined: 21 Feb 2012
Posts: 42

PostPosted: Wed Jan 29, 2020 2:53 am    Post subject: Problem with Mail Relay test Exchange 2016 on Windows Server Reply with quote

Hi there,

we have the problem after a migration from our Microsoft Exchange server 2013 and Windows Server 2012R2 to MS Exchange 2016 and Windows Server 2019 that the mail relay test fires the following "unknown" status

Unknown 276: error during handshake[2]: 0x80090308

The KS Hostmon we use is: 11.97 on a windows server 2012R2

We use as incomming mail server in the mail relay test the following config:
Protocol: POP3
Port: 995
TLS: Implicit

On the old Exchange server is the mail relay test still working.

We use as well a "POP3 test" on the new exchange server which is working.
The config here is also Port 995 and TLS Implicit.

All OS (old and new server and KS host server) were configured with the default setting from IIS Crypto.

Is the KS Hostmonitor using a own TLS configuration or do you have any other idea about this issue?

Thank you in advance.

Bye, Robert
Back to top
View user's profile Send private message
KS-Soft



Joined: 03 Apr 2002
Posts: 12791
Location: USA

PostPosted: Wed Jan 29, 2020 12:23 pm    Post subject: Reply with quote

Quote:
All OS (old and new server and KS host server) were configured with the default setting from IIS Crypto.

This means only TLS 1.2 enabled?
AES128 and AES256 ciphers?
SHA, SHA256, SHA512 hashes?
What key exchange methods enabled? Diffie-Hellman, PKCS and ECDH?
Then HostMonitor should work.

What about "Outgoing mail server" options?
Port 25? May be you should connect to port 465? or 587?
Tried Implicit, Explicit options?

Such error may occur if you are using Implicit TLS option while connecting to plain port (service) that does not support encryption.

Regards
Alex
Back to top
View user's profile Send private message Visit poster's website
rgoebel



Joined: 21 Feb 2012
Posts: 42

PostPosted: Tue Feb 11, 2020 12:14 am    Post subject: Reply with quote

Hi Alex,

sorry for my late reply.
I think the problem is now solved.
After installing the Security Update For Exchange Server 2016 CU14 (KB4523171) on the exchange server, I'm able to get a secured connection TLS for pop3.

Thank you anyway.

Bye, Robert
Back to top
View user's profile Send private message
KS-Soft



Joined: 03 Apr 2002
Posts: 12791
Location: USA

PostPosted: Tue Feb 11, 2020 5:21 am    Post subject: Reply with quote

Thank you for information!

Regards
Alex
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    KS-Soft Forum Index -> Configuration, Maintenance, Troubleshooting All times are GMT - 6 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group

KS-Soft Forum Index