mail server secure connection ayarı

Merhaba,

telnet mailipadresi 25

helo

ehlo çektiğinde orada aktif komutları görebilirsin. Yani desteklenen komutlardır bunlari, örnek startls komutu var ise birisi bunu çağırabilir demek yok ise çağıramaz.

Bu arada varsayılan olarak STARTLS açıktır.

Buradan kendinize mail atarak deneyebilirisiniz.

Secure Email (checktls.com)

Eğer sorun var ise Exchange server üzerine geçerli bir sertifika yükleyin, sonra onun SMTP için enable yapın

Enable-ExchangeCertificate <thumbprint> -services SMTP

Daha sonra ise connector' e bağlayın.

Get-ReceiveConnector "ServerName\Default Frontend ReceiveConnector" | Set-ReceiveConnector -TlsCertificateName sertifikaismi

hocam
ehlo çektim fakat aşağıdaki resimdede görüldüğü gibi STARTLS ve benzeri yok. olması gerekmiyormu.

nasıl yapmalıyım. hocam burada resim ekleme ve düzenleme çok uzun sürüyor.

https://hizliresim.com/tyzb6U

Bu durumda sertifika sorunu var demektir, yani exchange server smtp için kullanabileceği uygun bir sertifika bulamaz ise bu komutu yayınlamaz.

Öncelikle sertifikalarınızı kontrol edin

Get-ExchangeCertificate | FL *
Get-ReceiveConnector | FL name, fqdn, objectClass
Get-SendConnector | FL name, fqdn, objectClass

Geçerli bir sertifikanız var ise bu sertifikayı receive connector için enable etmeniz yeterli.

Get-ReceiveConnector "ServerName\Default Frontend ReceiveConnector" | Set-ReceiveConnector -TlsCertificateName sertifikaismi

@hakanuzuner
hovam sertifika bilgileri aşağıda. bu durama göre relay connector kısmına aşağıdaki işlemi yapmam gerekmezmi. sizin yazınıza göre
Geçerli bir sertifikanız var ise bu sertifikayı receive connector için enable etmeniz yeterli.

Get-ReceiveConnector "ServerName\Default Frontend ReceiveConnector" | Set-ReceiveConnector -TlsCertificateName sertifikaismi

KeyIdentifier : 97897
RootCAType : GroupPolicy
Services : None
Status : RevocationCheckFailure
SubjectKeyIdentifier : 8978979
PrivateKeyExportable : True
PublicKeySize : 2048
Identity : mail1.sirket.local\Elkklşklşkşlş544BA
ServicesStringForm : .......
Archived : False
Extensions : {System.Security.Cryptography.Oid, System.Security.Cryptography.Oid,
System.Security.Cryptography.Oid, System.Security.Cryptography.Oid,
System.Security.Cryptography.Oid, System.Security.Cryptography.Oid,
System.Security.Cryptography.Oid, System.Security.Cryptography.Oid,
System.Security.Cryptography.Oid, System.Security.Cryptography.Oid}
FriendlyName : mail.sirket.com.tr
IssuerName : System.Security.Cryptography.X509Certificates.X500DistinguishedName
NotAfter : 11/13/2021 4:42:00 PM
NotBefore : 11/13/2020 4:52:00 PM
HasPrivateKey : True
PrivateKey : System.Security.Cryptography.RSACryptoServiceProvider
PublicKey : System.Security.Cryptography.X509Certificates.PublicKey
RawData : {48, 130, 8, 217, 48, 130, 7, 43, 1210, 3, 2789879, 1, 2, 2, 12897891, 123...}
SerialNumber : 54321452145
SubjectName : System.Security.Cryptography.X509Certificates.X500DistinguishedName
SignatureAlgorithm : System.Security.Cryptography.Oid
Thumbprint : 24524544
Version : 3
Handle : 43249095371218
Issuer : CN=E-firme
Subject : CN=mail.sirket.com.tr, O=avanas buzdolabi A.S., L=artvin, C=TR

PSComputerName : CAS.sirket.local
RunspaceId : 291da3f0-4ef1-43c5-83645645d21-ef778bf953951564564564564
PSShowComputerName : False
EnhancedKeyUsageList : {Server Authentication (1.3.21l.1.i5.5.7.3.1)}
DnsNameList : {Federation}
SendAsTrustedIssuer : False
AccessRules : {System.Security.AccessControl.CryptoKeyAccessRule,
System.Security.AccessControl.CryptoKeyAccessRule,
System.Security.AccessControl.CryptoKeyAccessRule}
CertificateDomains : {Federation}
CertificateRequest :
IisServices : {}
IsSelfSigned : True
KeyIdentifier : ljjşjşkşl25345
RootCAType : None
Services : SMTP, Federation
Status : Valid
SubjectKeyIdentifier : şklş
PrivateKeyExportable : True
PublicKeySize : 2048
Identity : mail1.sirket.local\DA824525445
ServicesStringForm : ....SF.
Archived : False
Extensions : {System.Security.Cryptography.Oid, System.Security.Cryptography.Oid,
System.Security.Cryptography.Oid, System.Security.Cryptography.Oid,
System.Security.Cryptography.Oid}
FriendlyName : Exchange Delegation Federation
IssuerName : System.Security.Cryptography.X509Certificates.X500DistinguishedName
NotAfter : 11/19/2023 11:421:47 AM
NotBefore : 11/19/2018 11:421:47 AM
HasPrivateKey : True
PrivateKey : System.Security.Cryptography.RSACryptoServiceProvider
PublicKey : System.Security.Cryptography.X509Certificates.PublicKey
RawData : {48, 130, 3, 27, 48, 130, 2
4,, 3, 1210, 3, 2, 1, 2, 2, 121, 28...}
SerialNumber : 978978979
SubjectName : System.Security.Cryptography.X509Certificates.X500DistinguishedName
SignatureAlgorithm : System.Security.Cryptography.Oid
Thumbprint : 97897
Version : 3
Handle : 9789
Issuer : CN=Federation
Subject : CN=Federation

PSComputerName : CAS.sirket.local
RunspaceId : 2918686868da3f0-4ef1-43klkc5-86783d21-ef778bf953951
PSShowComputerName : False
EnhancedKeyUsageList : {Server Authentication (1.3.21.1.5.5.7.3.1)}
DnsNameList : {mail.sirket.com.tr, AutoDiscover.malatya.com.tr, AutoDiscover.sirket.com.tr,
AutoDiscover.sirketdemircelik.com.tr, AutoDiscover.sirketfllade.com.tr,
AutoDiscover.sirketmetal.com.tr, AutoDiscover.engerpdev.sirketholding.com.tr,
AutoDiscover.sirketholding.com.tr, AutoDiscover.engerp.sirketholding.com.tr,
AutoDiscover.kanepe.com.tr, AutoDiscover.artvinair.com.tr, AutoDiscover.malatyafyurt.me,
AutoDiscover.sirketdz.com, AutoDiscover.sirketalgeria.com, AutoDiscover.sirket.local,
AutoDiscover.malatyaf.com.tr...}
SendAsTrustedIssuer : False
AccessRules : {System.Security.AccessControl.CryptoKeyAccessRule,
System.Security.AccessControl.CryptoKeyAccessRule}
CertificateDomains : {mail.sirket.com.tr, AutoDiscover.malatya.com.tr, AutoDiscover.sirket.com.tr,
AutoDiscover.sirketdemircelik.com.tr, AutoDiscover.sirketforeigntrade.com.tr,
AutoDiscover.sirketmetal.com.tr, AutoDiscover.engerpdev.sirketholding.com.tr,
AutoDiscover.sirketholding.com.tr, AutoDiscover.engerp.sirketholding.com.tr,
AutoDiscover.kanepe.com.tr, AutoDiscover.artvinair.com.tr, AutoDiscover.malatyafyurt.me,
AutoDiscover.sirketdz.com, AutoDiscover.sirketalgeria.com, AutoDiscover.sirket.local,
AutoDiscover.malatyaf.com.tr...}
CertificateRequest :
IisServices : {}
IsSelfSigned : True
KeyIdentifier : 9789788
RootCAType : None
Services : IMAP, POP
Status : Valid
SubjectKeyIdentifier :
PrivateKeyExportable : True
PublicKeySize : 2048
Identity : mail1.sirket.local\5789789
ServicesStringForm : IP.....
Archived : False
Extensions : {System.Security.Cryptography.Oid, System.Security.Cryptography.Oid,
System.Security.Cryptography.Oid, System.Security.Cryptography.Oid}
FriendlyName : mail
IssuerName : System.Security.Cryptography.X509Certificates.X500DistinguishedName
NotAfter : 5/20/2021 8:10:58 PM
NotBefore : 5/20/20121 8:10:58 PM
HasPrivateKey : True
PrivateKey : System.Security.Cryptography.RSACryptoServiceProvider
PublicKey : System.Security.Cryptography.X509Certificates.PublicKey
RawData : {48, 130, 7, 44, 48, 978130, 21, 20, 187210, 9783, 2, 1, 2, 2, 121, 23...}
SerialNumber : 7897979789
SubjectName : System.Security.Cryptography.X509Certificates.X500DistinguishedName
SignatureAlgorithm : System.Security.Cryptography.Oid
Thumbprint : 9789879
Version : 3
Handle : 4978978978
Issuer : CN=mail.sirket.com.tr
Subject : CN=mail.sirket.com.tr

PSComputerName : CAS.sirket.local
RunspaceId : 291da3f0-4ef1-43c5-83d21-ef778bf953951
PSShowComputerName : False
EnhancedKeyUsageList : {Server Authentication (1.3.21.1.5.5.7.3.1)}
DnsNameList : {mail.sirket.com.tr}
SendAsTrustedIssuer : False
AccessRules : {System.Security.AccessControl.CryptoKeyAccessRule,
System.Security.AccessControl.CryptoKeyAccessRule,
System.Security.AccessControl.CryptoKeyAccessRule}
CertificateDomains : {mail.sirket.com.tr}
CertificateRequest :
IisServices : {}
IsSelfSigned : False
KeyIdentifier : 97897
RootCAType : Enterprise
Services : None
Status : DateInvalid
SubjectKeyIdentifier : B8978979
PrivateKeyExportable : True
PublicKeySize : 1024
Identity : mail1.sirket.local\789
ServicesStringForm : .......
Archived : False
Extensions : {System.Security.Cryptography.Oid, System.Security.Cryptography.Oid,
System.Security.Cryptography.Oid, System.Security.Cryptography.Oid,
System.Security.Cryptography.Oid, System.Security.Cryptography.Oid,
System.Security.Cryptography.Oid, System.Security.Cryptography.Oid}
FriendlyName : maillocal
IssuerName : System.Security.Cryptography.X509Certificates.X500DistinguishedName
NotAfter : 5/20/2018 8:03:52 PM
NotBefore : 5/20/20121 8:03:52 PM
HasPrivateKey : True
PrivateKey : System.Security.Cryptography.RSACryptoServiceProvider
PublicKey : System.Security.Cryptography.X509Certificates.PublicKey
RawData : {48, 130, 5, 83, 48, 130, 4, 59, 1210, 3, 2, 1, 2, 2, 19, 70...}
SerialNumber : 49789
SubjectName : System.Security.Cryptography.X509Certificates.X500DistinguishedName
SignatureAlgorithm : System.Security.Cryptography.Oid
Thumbprint : 9789794
Version : 3
Handle : 4324909539984
Issuer : CN=malatyafCA, DC=sirket, DC=local
Subject : CN=mail.sirket.com.tr, OU=IT, O=IT, L=Istanbul, S=Istanbul, C=TR

PSComputerName : CAS.sirket.local
RunspaceId : 291da3f0-4ef1-43c5-83d21-ef778bf95980890803951
PSShowComputerName : False
EnhancedKeyUsageList : {Server Authentication (1.3.21.1.5.509.7.3.1)}
DnsNameList : {mail1, mail1.sirket.local}
SendAsTrustedIssuer : False
AccessRules :
CertificateDomains : {mail1, mail1.sirket.local}
CertificateRequest :
IisServices : {IIS://mail1/W3SVC/2}
IsSelfSigned : True
KeyIdentifier : 97897
RootCAType : Registry
Services : IMAP, POP, IIS, SMTP
Status : DateInvalid
SubjectKeyIdentifier :
PrivateKeyExportable : False
PublicKeySize : 2048
Identity : mail1.sirket.local\B97897
ServicesStringForm : IP.WS..
Archived : False
Extensions : {System.Security.Cryptography.Oid, System.Security.Cryptography.Oid,
System.Security.Cryptography.Oid, System.Security.Cryptography.Oid}
FriendlyName : Microsoft Exchange
IssuerName : System.Security.Cryptography.X509Certificates.X500DistinguishedName
NotAfter : 5/25/2020 10:33:48 PM
NotBefore : 5/25/2015 10:33:48 PM
HasPrivateKey : True
PrivateKey :
PublicKey : System.Security.Cryptography.X509Certificates.PublicKey
RawData : {48, 130, 3, 30, 48, 130, 2, 21, 1210, 3, 2, 1, 2, 2, 121, 218...}
SerialNumber : 443B5B72198D33DA14E4397E1F5EFFB38
SubjectName : System.Security.Cryptography.X509Certificates.X500DistinguishedName
SignatureAlgorithm : System.Security.Cryptography.Oid
Thumbprint : B3B1C8C13B794B21D887CBCF7BD5B2AABF214A2E59
Version : 3
Handle : 432490953572109880890
Issuer : CN=mail1
Subject : CN=mail1

PSComputerName : CAS.sirket.local
RunspaceId : 291da3f0-4ef1-43c5-83d21-ef778bf9080890853951
PSShowComputerName : False
EnhancedKeyUsageList : {Server Authentication (1.3.21.1.5.5.7.3.1)}
DnsNameList : {WMSvc-mail1}
SendAsTrustedIssuer : False
AccessRules : {System.Security.AccessControl.CryptoKeyAccessRule,
System.Security.AccessControl.CryptoKeyAccessRule,
System.Security.AccessControl.CryptoKeyAccessRule}
CertificateDomains : {WMSvc-mail1}
CertificateRequest :
IisServices : {}
IsSelfSigned : True
KeyIdentifier : 3978979
RootCAType : Registry
Services : None
Status : Valid
SubjectKeyIdentifier :
PrivateKeyExportable : True
PublicKeySize : 2048
Identity : mail1.sirket.local\DE789789D24C501
ServicesStringForm : .......
Archived : False
Extensions : {System.Security.Cryptography.Oid, System.Security.Cryptography.Oid}
FriendlyName : WMSVC
IssuerName : System.Security.Cryptography.X509Certificates.X500DistinguishedName
NotAfter : 5/22/2025 9:58:37 PM
NotBefore : 5/25/2015 9:58:37 PM
HasPrivateKey : True
PrivateKey : System.Security.Cryptography.RSACryptoServiceProvider
PublicKey : System.Security.Cryptography.X509Certificates.PublicKey
RawData : {48, 130, 2, 233, 48, 130, 1, 209, 1210, 3, 2, 1, 2, 2, 121, 121...}
SerialNumber : 10159521DA7DDE99943ECA421CA83DAB213
SubjectName : System.Security.Cryptography.X509Certificates.X500DistinguishedName
SignatureAlgorithm : System.Security.Cryptography.Oid
Thumbprint : DEC121D1B38B1FF39154184989080084B2122E214D24C501
Version : 3
Handle : 432490953708089080892180
Issuer : CN=WMSvc-mail1
Subject : CN=WMSvc-mail1

PSComputerName : CAS.sirket.local
RunspaceId : 291da3f0-4ef1-43c5-83d210808-ef778bf953951
PSShowComputerName : False
EnhancedKeyUsageList : {Server Authentication (1.3.21.1.5.5.7.3.1)}
DnsNameList : {Federation}
SendAsTrustedIssuer : False
AccessRules : {System.Security.AccessControl.CryptoKeyAccessRule,
System.Security.AccessControl.CryptoKeyAccessRule,
System.Security.AccessControl.CryptoKeyAccessRule}
CertificateDomains : {Federation}
CertificateRequest :
IisServices : {}
IsSelfSigned : True
KeyIdentifier : 3C5C3DD08BE9A5CC21F2194821CB23F372193EA90FAE
RootCAType : Unknown
Services : SMTP
Status : Invalid
SubjectKeyIdentifier : 4E7897987987934C2028C924
PrivateKeyExportable : True
PublicKeySize : 2048
Identity : mail1.sirket.local\B98979CE
ServicesStringForm : ....S..
Archived : False
Extensions : {System.Security.Cryptography.Oid, System.Security.Cryptography.Oid,
System.Security.Cryptography.Oid, System.Security.Cryptography.Oid,
System.Security.Cryptography.Oid}
FriendlyName : Exchange Delegation Federation
IssuerName : System.Security.Cryptography.X509Certificates.X500DistinguishedName
NotAfter : 3/2/20121 11:57:20 AM
NotBefore : 3/2/2011 11:57:20 AM
HasPrivateKey : True
PrivateKey : System.Security.Cryptography.RSACryptoServiceProvider
PublicKey : System.Security.Cryptography.X509Certificates.PublicKey
RawData : {48, 130, 3, 27, 48, 130, 2, 3, 1210, 3, 2, 1, 2, 2, 121, 24...}
SerialNumber : 185B72213FBA15B0470EC34E8D42250C
SubjectName : System.Security.Cryptography.X509Certificates.X500DistinguishedName
SignatureAlgorithm : System.Security.Cryptography.Oid
Thumbprint : BE21EBF33AEFBF7899AD9F3E352138F5ED291C218CE
Version : 3
Handle : 4988
Issuer : CN=Federation
Subject : CN=Federation

[PS] C:\Windows\system32>Get-ReceiveConnector | FL name, fqdn, objectClass

Name : dmz
Fqdn : mail1.sirket.local
ObjectClass : {top, msExchSmtpReceiveConnector}

Name : Outbound Proxy Frontend CAS
Fqdn : CAS.sirket.local
ObjectClass : {top, msExchSmtpReceiveConnector}

Name : Disaridan-mail-gelisi
Fqdn : CAS.sirket.local
ObjectClass : {top, msExchSmtpReceiveConnector}

Name : artvin-Kamera
Fqdn : CAS.sirket.local
ObjectClass : {top, msExchSmtpReceiveConnector}

Name : Client Frontend CAS
Fqdn : CAS.sirket.local
ObjectClass : {top, msExchSmtpReceiveConnector}

Name : Default Frontend CAS
Fqdn : CAS.sirket.local
ObjectClass : {top, msExchSmtpReceiveConnector}

Name : Client Proxy mail1
Fqdn : mail1.sirket.local
ObjectClass : {top, msExchSmtpReceiveConnector}

Name : Default mail1
Fqdn : mail1.sirket.local
ObjectClass : {top, msExchSmtpReceiveConnector}

Name : Client Proxy MAIL2
Fqdn : MAIL2.sirket.local
ObjectClass : {top, msExchSmtpReceiveConnector}

Name : Default MAIL2
Fqdn : MAIL2.sirket.local
ObjectClass : {top, msExchSmtpReceiveConnector}

Name : ekstra
Fqdn : CAS.sirket.local
ObjectClass : {top, msExchSmtpReceiveConnector}

Name : Relay Connector
Fqdn : CAS.sirket.local
ObjectClass : {top, msExchSmtpReceiveConnector}

Set-Mailbox "Kim Akers" -ProhibitSendQuota 200MB -UseDatabaseQuotaDefaults $False

VERBOSE: Connecting to CAS.sirket.local.
VERBOSE: Connected to CAS.sirket.local.
[PS] C:\Windows\system32>Get-SendConnector | FL name, fqdn, objectClass

Name : bursa
Fqdn :
ObjectClass : {top, msExchConnector, mailGateway, msExchRoutingSMTPConnector}

Name : 525
Fqdn :
ObjectClass : {top, msExchConnector, mailGateway, msExchRoutingSMTPConnector}

Name : xmediusfsmtp
Fqdn :
ObjectClass : {top, msExchConnector, mailGateway, msExchRoutingSMTPConnector}

Name : yoto Fax
Fqdn :
ObjectClass : {top, msExchConnector, mailGateway, msExchRoutingSMTPConnector}

Name : eng Production
Fqdn :
ObjectClass : {top, msExchConnector, mailGateway, msExchRoutingSMTPConnector}

Name : sirket Send Connector
Fqdn :
ObjectClass : {top, msExchConnector, mailGateway, msExchRoutingSMTPConnector}

Name : fatura
Fqdn :
ObjectClass : {top, msExchConnector, mailGateway, msExchRoutingSMTPConnector}

Name : yurt_Out
Fqdn :
ObjectClass : {top, msExchConnector, mailGateway, msExchRoutingSMTPConnector}

[PS] C:\Windows\system32>

Bu kadar logu kimse forumdan okumaz Ali, çıktıları sen yorumlayamıyor ise kusura bakma bu kadar logu gönüllü olarak forumdan okuyacak vaktim yok.

Ben sana yöntemi gösterdim.

Özetle sertifikan var ise bunu alıcı connector' e kullanmasını söyle.

@hakanuzuner
yok hocam onun için atmadım. dediğiniz gibi smtp ekleyeceğim.ben sadece relay olduğu için relay connector tarafınamı eklemem lazım diye sormak istedim aslında. yoksa logu tabiki yorumlamanız için atmıyorum. teşekkür ederim.

Hangi connector için STARTTLS lazım ise ona eklemen gerekli.

@hakanuzuner
teşekkürler hocam cevaplarınız için

Rica ederim.