cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

Can't send email to some domain

Hi all,

I'm using McAfee Email Gateway. I can't send email to some domain.

[admin@xxx ~]$ openssl s_client -connect xxx.abc.com.vn:25 -starttls smtp  

CONNECTED(00000003)

write:errno=32

---

no peer certificate available

---

No client certificate CA names sent

---

SSL handshake has read 331 bytes and written 32 bytes

---

New, (NONE), Cipher is (NONE)

Secure Renegotiation IS NOT supported

Compression: NONE

Expansion: NONE

---

[admin@xxx ~]$ openssl s_client -connect xxx.xyz.com.vn:25 -starttls smtp

CONNECTED(00000003)

write:errno=32

---

no peer certificate available

---

No client certificate CA names sent

---

SSL handshake has read 382 bytes and written 39 bytes

---

New, (NONE), Cipher is (NONE)

Secure Renegotiation IS NOT supported

Compression: NONE

Expansion: NONE

---

The domains are using TLSv1.

I don't know about error "write:errno=32", what is it mean?

Please help me this case.

Thanks,

Dk

4 Replies

Re: Can't send email to some domain

Hi,

Did you try to add that domain into whitelist in Email--> Email Configuration--> Sending Email--> (below Delivering email-->Domain routing) add that specific domain

hope i could help you.

enjoy

Re: Can't send email to some domain

Dear Nurbekcanon,

Thank you for your help.

But I still can't send email to the domains,

Thanks,

DK.

Unblack
Level 10
Report Inappropriate Content
Message 4 of 5

Re: Can't send email to some domain

Did you read this? :

McAfee KnowledgeBase -

Reliable Contributor marcus69
Reliable Contributor
Report Inappropriate Content
Message 5 of 5

Re: Can't send email to some domain

Hi there,

by default Your EMail Gateway will try to send any Email encrypted using TLS.

Believe it or not, there are way lot of servers out there that cannon handle encrypted mailtransfer.

Especially when transferring mails to eastern countries You may encounter problems that these server either do not speak TLS at all, or can only handle weak or broken ciphers suites.

So in my eyes this looks like that there is no encryption capability on the target server. So You may want to disable TLS for that specific target domain.

MEG-Disable-TLS.jpg

Keep the Wildcard-Record at the very bottom of your TLS exception list, otherwise this will override Your entry as this list is always handled up -> down

Best Regards,

    Marcus

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community