• Debian 11 is approaching its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.80 will be the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

Question Postfix TLS issue

USY

Basic Pleskian
Hi

am running my my Plesk Webserver and my Community behind Cloudflare. CF Origin Certificates are installed on my Webserver and SSL Full (strict) is encryption mode is enabled. The subdomain: mail.mydomain.com is not proxied:

How can I solve that issue ?

Code:
Apr  2 22:46:17 srv postfix/smtpd[2733041]: connect from srv.mydomain.com[XXX.XXX.84.94]
Apr  2 22:46:17 srv postfix/smtpd[2733041]: SSL_accept error from srv.mydomain.com[XXX.XXX.84.94]: -1
Apr  2 22:46:17 srv postfix/smtpd[2733041]: warning: TLS library problem: error:14094418:SSL routines:ssl3_read_bytes:tlsv1 alert unknown ca:../ssl/record/rec_layer_s3.c:1543:SSL alert number 48:
Apr  2 22:46:17 srv postfix/smtpd[2733041]: lost connection after STARTTLS from srv.mydomain.com[XXX.XXX.84.94]
Apr  2 22:46:17 srv postfix/smtpd[2733041]: disconnect from srv.mydomain.com[XXX.XXX.84.94] ehlo=1 starttls=0/1 commands=1/2
Apr  2 22:46:21 srv plesk_saslauthd[2733179]: select timeout, exiting
 
There you go. CloudFlare doesn't support email traffic when proxy is enabled.
But doesn't the mail should be sent trough the subdomain: mail.mydomain.com ?
The subdomain srv.mydomain.com is the plesk the Server Full hostname under Plesk Server settings.
 
Back
Top