June 2013 - stunnel-users

Stunnel 4 failing to connect to gmail
by Asif Iqbal 10 Dec '20

10 Dec '20

I am faling to connect to gmail. Not sure what that bind error means. iqbala@ghar:~$ sudo stunnel4 2008.12.15 13:53:17 LOG7[3839:3083650736]: Snagged 64 random bytes from /home/iqbala/.rnd 2008.12.15 13:53:17 LOG7[3839:3083650736]: Wrote 1024 new random bytes to /home/iqbala/.rnd 2008.12.15 13:53:17 LOG7[3839:3083650736]: RAND_status claims sufficient entropy for the PRNG 2008.12.15 13:53:17 LOG7[3839:3083650736]: PRNG seeded successfully 2008.12.15 13:53:17 LOG7[3839:3083650736]: Certificate: /etc/stunnel/stunnel.pem 2008.12.15 13:53:17 LOG7[3839:3083650736]: Certificate loaded 2008.12.15 13:53:17 LOG7[3839:3083650736]: Key file: /etc/stunnel/stunnel.pem 2008.12.15 13:53:17 LOG7[3839:3083650736]: Private key loaded 2008.12.15 13:53:17 LOG7[3839:3083650736]: SSL context initialized for service ssmtp 2008.12.15 13:53:17 LOG5[3839:3083650736]: stunnel 4.22 on i486-pc-linux-gnu with OpenSSL 0.9.8g 19 Oct 2007 2008.12.15 13:53:17 LOG5[3839:3083650736]: Threading:PTHREAD SSL:ENGINE Sockets:POLL,IPv6 Auth:LIBWRAP 2008.12.15 13:53:17 LOG6[3839:3083650736]: file ulimit = 1024 (can be changed with 'ulimit -n') 2008.12.15 13:53:17 LOG6[3839:3083650736]: poll() used - no FD_SETSIZE limit for file descriptors 2008.12.15 13:53:17 LOG5[3839:3083650736]: 500 clients allowed 2008.12.15 13:53:17 LOG7[3839:3083650736]: FD 10 in non-blocking mode 2008.12.15 13:53:17 LOG7[3839:3083650736]: FD 11 in non-blocking mode 2008.12.15 13:53:17 LOG7[3839:3083650736]: FD 12 in non-blocking mode 2008.12.15 13:53:17 LOG7[3839:3083650736]: SO_REUSEADDR option set on accept socket 2008.12.15 13:53:17 LOG3[3839:3083650736]: Error binding ssmtp to 74.125.93.111:587 2008.12.15 13:53:17 LOG3[3839:3083650736]: bind: Cannot assign requested address (99) Here is how my conf file looks like iqbala@ghar:~$ cat /etc/stunnel/stunnel.conf | egrep -v "^;|^$" cert = /etc/stunnel/stunnel.pem foreground = yes sslVersion = SSLv3 chroot = /var/lib/stunnel4/ setuid = stunnel4 setgid = stunnel4 pid = /stunnel4.pid socket = l:TCP_NODELAY=1 socket = r:TCP_NODELAY=1 debug = 7 output = /var/log/stunnel4/stunnel.log client = yes [ssmtp] accept = smtp.gmail.com:587 connect = 25 Asif Iqbal PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu

5 9

stunnel and hosts.allow
by Yousef Alhashemi 05 Jul '16

05 Jul '16

Hi, This may be a little bit off-topic, but does anyone here use stunnel with pan? My connections to stunnel (in pan) are always refused by libwrap. I was looking for the right rule to add to /etc/hosts.allow but nothing seems to work aside from "ALL : ALL" (which is obviously not good) and "nntps: KNOWN". Is the latter reasonable? The hosts_access(5) manpage is confusing to say the least. It mentions that daemon (the first token on any line) is the name of the daemon running the process, which would be "stunnel" in my case, but using "stunnel : LOCAL" or even "stunnel : ALL" doesn't work. The rule that seems to work, as mentioned, is "nntps : KNOWN" ("nntps" being the group name in stunnel.conf). What's even more confusing to me is that "nntps : LOCAL" does not work either. Nor does "nntps : localhost 127.0.0.1", "nntps : localhost", "nntps : 127.0.0.1", or "nntps : 192.168.1.". Pan is running on the same machine as stunnel so all connections must be coming from localhost. Why do these rules not trigger? Either way, I'd like to know the "least permissive" hosts.allow rule that would allow me to connect to my news provider from pan, and/or whether "nntps : KNOWN" is a safe option. Thanks, Yousef

3 6

Re: [stunnel-users] accept : too many open files error(24)
by Senthil Naidu 01 Jul '13

01 Jul '13

Hi, We are using 64 bit version of centos, and the ram of this system is 1gb so should we increase this limit to 100000 in the limits.conf Regards senthil On Sun, Jun 30, 2013 at 12:31 AM, Michael Curran <mike_curran(a)hotmail.com>wrote: > Are you running 32-kernel for centos? > > 32-bit limits in the 4500 range for open connections due to the memory > constraints > > We usually set our open file limits to 100I specifically for Stunnel user > > *Sent from my Verizon Wireless 4G LTE DROID* > > > Senthil Naidu <senthil.naidu(a)gmail.com> wrote: > > Hi > > > > We are using stunnel 4.32 on centos and our ulimits in limits.conf are as > follows > > > > * soft nofile 16384 > > * hard nofile 65536 > > > > We keep getting the error “too many open files(24)” and stunnel does not > accept new connection till we restart the same > > > > Is this ulimit proper or we need to increase the same , we are look for > 3000 to 5000 connections > > > > Regards > > Senthil >

2 2

accept : too many open files error(24)
by Senthil Naidu 29 Jun '13

29 Jun '13

Hi We are using stunnel 4.32 on centos and our ulimits in limits.conf are as follows * soft nofile 16384 * hard nofile 65536 We keep getting the error “too many open files(24)” and stunnel does not accept new connection till we restart the same Is this ulimit proper or we need to increase the same , we are look for 3000 to 5000 connections Regards Senthil

1 0

Re: [stunnel-users] Sending Email Without Authentication with gmail
by Stephen Gates 28 Jun '13

28 Jun '13

I downloaded the old argosoft freeware and it works! Praise God! Thanks to all for your time, help and suggestions!! Much appreciated. Stephen Gates Harold K. Scholz Company 7800 Serum Avenue Ralston, NE 68127 402-339-7600

2 1

Re: [stunnel-users] Sending Email from PLC Without Authentication with gmail - static ip/argosoft/php script
by Stephen Gates 28 Jun '13

28 Jun '13

> The only limitation I can recall on this freeware version is in the file size (5MB) and in the retries between relay errors. > > But you have to be aware when using a mail server that, thanks to Spamhaus, you need a static IP or almost all SMTPs out there will block your server to accept mail from (including Gmail)." > The router that my network is connected to has a static IP as far as I can tell and so does the PC and PLC on the LAN. How can I determine for sure if I have a static IP? I will try the Argosoft link. > Question? What does this device have available for resources. I use a php script that checks server status emails via gmail when there are changes in status, and it handles the connection directly to gmail. > I'm not sure. I don't know what php script is. I am about to try emailrelay from sourceforge.net. Anybody have experience with that? http://emailrelay.sourceforge.net/ Thanks, Stephen Gates Harold K. Scholz Company 7800 Serum Avenue Ralston, NE 68127 402-339-7600

1 0

Re: [stunnel-users] Sending Email from PLC Without Authentication with gmail
by Stephen Gates 27 Jun '13

27 Jun '13

"The issue with your situation is not stunnel but the fact that your SMTP client does not have the capability to provide authentication. As you mentioned, Gmail will require authentication information from the client. If that information is not provided by the SMTP client application, then the SMTP transaction will fail. ? I would suggest you consider setting up some kind of SMTP Relay. Which will serve as a proxy between your PLC and Google SMTP servers. ? You can also take a look at this document and if possible implement the last approach? http://support.google.com/a/bin/answer.py?hl=en <http://support.google.com/a/bin/answer.py?hl=en&answer=176600> &answer=176600" Thanks for your help Leandro. Do you have a suggestion for a SMTP Relay?? I have tried Free SMTP Server which was the only thing that has worked so far and worked almost perfectly except that it can only send out 10 emails a day. And I need more capacity for sending than that. I also have used trial versions of ArgoSoft, 1st Mail Server and QK SMTP Server but couldn't get those to work. I have tried the Google suggestion for using asmpx.l.google.com but I need to send to vtext.com addresses which are outside of the google domain. I tried adding the vtext.com addresses to googlegroups.com and sending emails using the asmpx.l.google.com server but vtext did not receive the emails for googlegroups.com. So I'm desperate to find some sort of solution. Thanks, Stephen Gates Harold K. Scholz Company 7800 Serum Avenue Ralston, NE 68127 402-339-7600

3 2

Stunnel | connection reset by peer
by Prem Vikash Upadhyay 27 Jun '13

27 Jun '13

Hi, Is there any configuration that can be used, to change the 'connection reset by peer' to 'connection refused'?. In our setup we are using day cq dispatcher with sticky session enabled, but dispatcher is invalidating sticky session only when it receiving error as 'connection refused', while stunnel is always sending error as 'connection reset by peer', whenever the connect server is down/crashed. Thanks Prem

2 1

Sending Email from PLC Without Authentication with gmail
by Stephen Gates 26 Jun '13

26 Jun '13

A customer needs to send emails from a Programmable Logic Controller (PLC) which cannot provide authentication. The customer's email server is gmail which obviously requires authentication. The PLC IP is 192.168.1.2 and the PC IP on which stunnel is installed is 192.168.1.31 My config is: cert = stunnel.pem [smtps] client = yes accept = 25 connect = smtp.gmail.com:465 The PLC is set up to send emails to the IP of the PC 192.168.1.31 When I try to send emails I get the following in the stunnel log: 2013.06.26 14:26:30 LOG5[12384:13048]: Service [smtps] accepted connection from 192.168.1.2:2938 2013.06.26 14:26:30 LOG5[12384:13048]: connect_blocking: connected 74.125.130.108:465 2013.06.26 14:26:30 LOG5[12384:13048]: Service [smtps] connected remote server from 192.168.1.31:53599 Any help would be greatly appreciated! Stephen Gates Harold K. Scholz Company 7800 Serum Avenue Ralston, NE 68127 402-339-7600

2 1

Re: [stunnel-users] Sending Email from PLC Without Authentication - With debug = 7 log
by Stephen Gates 26 Jun '13

26 Jun '13

Just wanted to send this again with a clarified subject. Still getting the connect_blocking error. Any more ideas? Thanks for replying, Brian. From: Stephen Gates [mailto:[email protected]] Sent: Wednesday, June 26, 2013 3:09 PM To: 'stunnel-users(a)stunnel.org' Subject: RE: Sending Email from PLC Without Authentication with gmail I added the following as Brian suggested. debug = 7 I tried doing output = stunnel.log but that cause an error when I reloded the config file. Here's the log after adding the above and trying to send another email. 2013.06.26 15:03:37 LOG7[10620:10992]: Service [smtps] (FD=416) bound to 0.0.0.0:25 2013.06.26 15:03:58 LOG7[10620:10992]: Service [smtps] accepted (FD=296) from 192.168.1.2:2946 2013.06.26 15:03:58 LOG7[10620:10992]: Creating a new thread 2013.06.26 15:03:58 LOG7[10620:10992]: New thread created 2013.06.26 15:03:58 LOG7[10620:10360]: Service [smtps] started 2013.06.26 15:03:58 LOG5[10620:10360]: Service [smtps] accepted connection from 192.168.1.2:2946 2013.06.26 15:03:58 LOG6[10620:10360]: connect_blocking: connecting 74.125.130.108:465 2013.06.26 15:03:58 LOG7[10620:10360]: connect_blocking: s_poll_wait 74.125.130.108:465: waiting 10 seconds 2013.06.26 15:03:58 LOG5[10620:10360]: connect_blocking: connected 74.125.130.108:465 2013.06.26 15:03:58 LOG5[10620:10360]: Service [smtps] connected remote server from 192.168.1.31:53640 2013.06.26 15:03:58 LOG7[10620:10360]: Remote socket (FD=368) initialized 2013.06.26 15:03:58 LOG7[10620:10360]: SNI: sending servername: smtp.gmail.com 2013.06.26 15:03:58 LOG7[10620:10360]: SSL state (connect): before/connect initialization 2013.06.26 15:03:58 LOG7[10620:10360]: SSL state (connect): SSLv3 write client hello A 2013.06.26 15:03:58 LOG7[10620:10360]: SSL state (connect): SSLv3 read server hello A 2013.06.26 15:03:58 LOG7[10620:10360]: SSL state (connect): SSLv3 read server certificate A 2013.06.26 15:03:58 LOG7[10620:10360]: SSL state (connect): SSLv3 read server done A 2013.06.26 15:03:58 LOG7[10620:10360]: SSL state (connect): SSLv3 write client key exchange A 2013.06.26 15:03:58 LOG7[10620:10360]: SSL state (connect): SSLv3 write change cipher spec A 2013.06.26 15:03:58 LOG7[10620:10360]: SSL state (connect): SSLv3 write finished A 2013.06.26 15:03:58 LOG7[10620:10360]: SSL state (connect): SSLv3 flush data 2013.06.26 15:03:58 LOG7[10620:10360]: SSL state (connect): SSLv3 read server session ticket A 2013.06.26 15:03:58 LOG7[10620:10360]: SSL state (connect): SSLv3 read finished A 2013.06.26 15:03:58 LOG7[10620:10360]: 1 items in the session cache 2013.06.26 15:03:58 LOG7[10620:10360]: 1 client connects (SSL_connect()) 2013.06.26 15:03:58 LOG7[10620:10360]: 1 client connects that finished 2013.06.26 15:03:58 LOG7[10620:10360]: 0 client renegotiations requested 2013.06.26 15:03:58 LOG7[10620:10360]: 0 server connects (SSL_accept()) 2013.06.26 15:03:58 LOG7[10620:10360]: 0 server connects that finished 2013.06.26 15:03:58 LOG7[10620:10360]: 0 server renegotiations requested 2013.06.26 15:03:58 LOG7[10620:10360]: 0 session cache hits 2013.06.26 15:03:58 LOG7[10620:10360]: 0 external session cache hits 2013.06.26 15:03:58 LOG7[10620:10360]: 0 session cache misses 2013.06.26 15:03:58 LOG7[10620:10360]: 0 session cache timeouts 2013.06.26 15:03:58 LOG7[10620:10360]: Peer certificate was cached (2266 bytes) 2013.06.26 15:03:58 LOG6[10620:10360]: SSL connected: new session negotiated 2013.06.26 15:03:58 LOG6[10620:10360]: Negotiated TLSv1/SSLv3 ciphersuite: AES128-SHA (128-bit encryption) 2013.06.26 15:03:58 LOG6[10620:10360]: Compression: null, expansion: null 2013.06.26 15:03:59 LOG6[10620:10360]: SSL socket closed (SSL_read) 2013.06.26 15:03:59 LOG7[10620:10360]: Sent socket write shutdown 2013.06.26 15:03:59 LOG5[10620:10360]: Connection closed: 65 byte(s) sent to SSL, 293 byte(s) sent to socket 2013.06.26 15:03:59 LOG7[10620:10360]: Remote socket (FD=368) closed 2013.06.26 15:03:59 LOG7[10620:10360]: Local socket (FD=296) closed 2013.06.26 15:03:59 LOG7[10620:10360]: Service [smtps] finished (0 left) 2013.06.26 15:03:59 LOG7[10620:10992]: Service [smtps] accepted (FD=364) from 192.168.1.2:2947 2013.06.26 15:03:59 LOG7[10620:10992]: Creating a new thread 2013.06.26 15:03:59 LOG7[10620:10992]: New thread created 2013.06.26 15:03:59 LOG7[10620:7792]: Service [smtps] started 2013.06.26 15:03:59 LOG5[10620:7792]: Service [smtps] accepted connection from 192.168.1.2:2947 2013.06.26 15:03:59 LOG6[10620:7792]: connect_blocking: connecting 74.125.130.109:465 2013.06.26 15:03:59 LOG7[10620:7792]: connect_blocking: s_poll_wait 74.125.130.109:465: waiting 10 seconds 2013.06.26 15:03:59 LOG5[10620:7792]: connect_blocking: connected 74.125.130.109:465 2013.06.26 15:03:59 LOG5[10620:7792]: Service [smtps] connected remote server from 192.168.1.31:53641 2013.06.26 15:03:59 LOG7[10620:7792]: Remote socket (FD=368) initialized 2013.06.26 15:03:59 LOG7[10620:7792]: SNI: sending servername: smtp.gmail.com 2013.06.26 15:03:59 LOG7[10620:7792]: SSL state (connect): before/connect initialization 2013.06.26 15:03:59 LOG7[10620:7792]: SSL state (connect): SSLv3 write client hello A 2013.06.26 15:03:59 LOG7[10620:7792]: SSL state (connect): SSLv3 read server hello A 2013.06.26 15:03:59 LOG7[10620:7792]: SSL state (connect): SSLv3 read finished A 2013.06.26 15:03:59 LOG7[10620:7792]: SSL state (connect): SSLv3 write change cipher spec A 2013.06.26 15:03:59 LOG7[10620:7792]: SSL state (connect): SSLv3 write finished A 2013.06.26 15:03:59 LOG7[10620:7792]: SSL state (connect): SSLv3 flush data 2013.06.26 15:03:59 LOG7[10620:7792]: 1 items in the session cache 2013.06.26 15:03:59 LOG7[10620:7792]: 2 client connects (SSL_connect()) 2013.06.26 15:03:59 LOG7[10620:7792]: 2 client connects that finished 2013.06.26 15:03:59 LOG7[10620:7792]: 0 client renegotiations requested 2013.06.26 15:03:59 LOG7[10620:7792]: 0 server connects (SSL_accept()) 2013.06.26 15:03:59 LOG7[10620:7792]: 0 server connects that finished 2013.06.26 15:03:59 LOG7[10620:7792]: 0 server renegotiations requested 2013.06.26 15:03:59 LOG7[10620:7792]: 1 session cache hits 2013.06.26 15:03:59 LOG7[10620:7792]: 0 external session cache hits 2013.06.26 15:03:59 LOG7[10620:7792]: 0 session cache misses 2013.06.26 15:03:59 LOG7[10620:7792]: 0 session cache timeouts 2013.06.26 15:03:59 LOG6[10620:7792]: SSL connected: previous session reused 2013.06.26 15:04:00 LOG6[10620:7792]: SSL socket closed (SSL_read) 2013.06.26 15:04:00 LOG7[10620:7792]: Sent socket write shutdown 2013.06.26 15:04:00 LOG5[10620:7792]: Connection closed: 65 byte(s) sent to SSL, 287 byte(s) sent to socket 2013.06.26 15:04:00 LOG7[10620:7792]: Remote socket (FD=368) closed 2013.06.26 15:04:00 LOG7[10620:7792]: Local socket (FD=364) closed 2013.06.26 15:04:00 LOG7[10620:7792]: Service [smtps] finished (0 left) 2013.06.26 15:04:00 LOG7[10620:10992]: Service [smtps] accepted (FD=372) from 192.168.1.2:2948 2013.06.26 15:04:00 LOG7[10620:10992]: Creating a new thread 2013.06.26 15:04:00 LOG7[10620:10992]: New thread created 2013.06.26 15:04:00 LOG7[10620:12944]: Service [smtps] started 2013.06.26 15:04:00 LOG5[10620:12944]: Service [smtps] accepted connection from 192.168.1.2:2948 2013.06.26 15:04:00 LOG6[10620:12944]: connect_blocking: connecting 74.125.130.108:465 2013.06.26 15:04:00 LOG7[10620:12944]: connect_blocking: s_poll_wait 74.125.130.108:465: waiting 10 seconds 2013.06.26 15:04:00 LOG5[10620:12944]: connect_blocking: connected 74.125.130.108:465 2013.06.26 15:04:00 LOG5[10620:12944]: Service [smtps] connected remote server from 192.168.1.31:53642 2013.06.26 15:04:00 LOG7[10620:12944]: Remote socket (FD=368) initialized 2013.06.26 15:04:00 LOG7[10620:12944]: SNI: sending servername: smtp.gmail.com 2013.06.26 15:04:00 LOG7[10620:12944]: SSL state (connect): before/connect initialization 2013.06.26 15:04:00 LOG7[10620:12944]: SSL state (connect): SSLv3 write client hello A 2013.06.26 15:04:00 LOG7[10620:12944]: SSL state (connect): SSLv3 read server hello A 2013.06.26 15:04:00 LOG7[10620:12944]: SSL state (connect): SSLv3 read finished A 2013.06.26 15:04:00 LOG7[10620:12944]: SSL state (connect): SSLv3 write change cipher spec A 2013.06.26 15:04:00 LOG7[10620:12944]: SSL state (connect): SSLv3 write finished A 2013.06.26 15:04:00 LOG7[10620:12944]: SSL state (connect): SSLv3 flush data 2013.06.26 15:04:00 LOG7[10620:12944]: 1 items in the session cache 2013.06.26 15:04:00 LOG7[10620:12944]: 3 client connects (SSL_connect()) 2013.06.26 15:04:00 LOG7[10620:12944]: 3 client connects that finished 2013.06.26 15:04:00 LOG7[10620:12944]: 0 client renegotiations requested 2013.06.26 15:04:00 LOG7[10620:12944]: 0 server connects (SSL_accept()) 2013.06.26 15:04:00 LOG7[10620:12944]: 0 server connects that finished 2013.06.26 15:04:00 LOG7[10620:12944]: 0 server renegotiations requested 2013.06.26 15:04:00 LOG7[10620:12944]: 2 session cache hits 2013.06.26 15:04:00 LOG7[10620:12944]: 0 external session cache hits 2013.06.26 15:04:00 LOG7[10620:12944]: 0 session cache misses 2013.06.26 15:04:00 LOG7[10620:12944]: 0 session cache timeouts 2013.06.26 15:04:00 LOG6[10620:12944]: SSL connected: previous session reused 2013.06.26 15:04:01 LOG6[10620:12944]: SSL socket closed (SSL_read) 2013.06.26 15:04:01 LOG7[10620:12944]: Sent socket write shutdown 2013.06.26 15:04:01 LOG5[10620:12944]: Connection closed: 65 byte(s) sent to SSL, 290 byte(s) sent to socket 2013.06.26 15:04:01 LOG7[10620:12944]: Remote socket (FD=368) closed 2013.06.26 15:04:01 LOG7[10620:12944]: Local socket (FD=372) closed 2013.06.26 15:04:01 LOG7[10620:12944]: Service [smtps] finished (0 left) 2013.06.26 15:04:01 LOG7[10620:10992]: Service [smtps] accepted (FD=288) from 192.168.1.2:2949 2013.06.26 15:04:01 LOG7[10620:10992]: Creating a new thread 2013.06.26 15:04:01 LOG7[10620:10992]: New thread created 2013.06.26 15:04:01 LOG7[10620:12900]: Service [smtps] started 2013.06.26 15:04:01 LOG5[10620:12900]: Service [smtps] accepted connection from 192.168.1.2:2949 2013.06.26 15:04:01 LOG6[10620:12900]: connect_blocking: connecting 74.125.130.109:465 2013.06.26 15:04:01 LOG7[10620:12900]: connect_blocking: s_poll_wait 74.125.130.109:465: waiting 10 seconds 2013.06.26 15:04:01 LOG5[10620:12900]: connect_blocking: connected 74.125.130.109:465 2013.06.26 15:04:01 LOG5[10620:12900]: Service [smtps] connected remote server from 192.168.1.31:53643 2013.06.26 15:04:01 LOG7[10620:12900]: Remote socket (FD=368) initialized 2013.06.26 15:04:01 LOG7[10620:12900]: SNI: sending servername: smtp.gmail.com 2013.06.26 15:04:01 LOG7[10620:12900]: SSL state (connect): before/connect initialization 2013.06.26 15:04:01 LOG7[10620:12900]: SSL state (connect): SSLv3 write client hello A 2013.06.26 15:04:01 LOG7[10620:12900]: SSL state (connect): SSLv3 read server hello A 2013.06.26 15:04:01 LOG7[10620:12900]: SSL state (connect): SSLv3 read finished A 2013.06.26 15:04:01 LOG7[10620:12900]: SSL state (connect): SSLv3 write change cipher spec A 2013.06.26 15:04:01 LOG7[10620:12900]: SSL state (connect): SSLv3 write finished A 2013.06.26 15:04:01 LOG7[10620:12900]: SSL state (connect): SSLv3 flush data 2013.06.26 15:04:01 LOG7[10620:12900]: 1 items in the session cache 2013.06.26 15:04:01 LOG7[10620:12900]: 4 client connects (SSL_connect()) 2013.06.26 15:04:01 LOG7[10620:12900]: 4 client connects that finished 2013.06.26 15:04:01 LOG7[10620:12900]: 0 client renegotiations requested 2013.06.26 15:04:01 LOG7[10620:12900]: 0 server connects (SSL_accept()) 2013.06.26 15:04:01 LOG7[10620:12900]: 0 server connects that finished 2013.06.26 15:04:01 LOG7[10620:12900]: 0 server renegotiations requested 2013.06.26 15:04:01 LOG7[10620:12900]: 3 session cache hits 2013.06.26 15:04:01 LOG7[10620:12900]: 0 external session cache hits 2013.06.26 15:04:01 LOG7[10620:12900]: 0 session cache misses 2013.06.26 15:04:01 LOG7[10620:12900]: 0 session cache timeouts 2013.06.26 15:04:01 LOG6[10620:12900]: SSL connected: previous session reused 2013.06.26 15:04:02 LOG6[10620:12900]: SSL socket closed (SSL_read) 2013.06.26 15:04:02 LOG7[10620:12900]: Sent socket write shutdown 2013.06.26 15:04:02 LOG5[10620:12900]: Connection closed: 65 byte(s) sent to SSL, 293 byte(s) sent to socket 2013.06.26 15:04:02 LOG7[10620:12900]: Remote socket (FD=368) closed 2013.06.26 15:04:02 LOG7[10620:12900]: Local socket (FD=288) closed 2013.06.26 15:04:02 LOG7[10620:12900]: Service [smtps] finished (0 left) 2013.06.26 15:04:02 LOG7[10620:10992]: Service [smtps] accepted (FD=292) from 192.168.1.2:2950 2013.06.26 15:04:02 LOG7[10620:10992]: Creating a new thread 2013.06.26 15:04:02 LOG7[10620:10992]: New thread created 2013.06.26 15:04:02 LOG7[10620:11560]: Service [smtps] started 2013.06.26 15:04:02 LOG5[10620:11560]: Service [smtps] accepted connection from 192.168.1.2:2950 2013.06.26 15:04:02 LOG6[10620:11560]: connect_blocking: connecting 74.125.130.108:465 2013.06.26 15:04:02 LOG7[10620:11560]: connect_blocking: s_poll_wait 74.125.130.108:465: waiting 10 seconds 2013.06.26 15:04:02 LOG5[10620:11560]: connect_blocking: connected 74.125.130.108:465 2013.06.26 15:04:02 LOG5[10620:11560]: Service [smtps] connected remote server from 192.168.1.31:53644 2013.06.26 15:04:02 LOG7[10620:11560]: Remote socket (FD=368) initialized 2013.06.26 15:04:02 LOG7[10620:11560]: SNI: sending servername: smtp.gmail.com 2013.06.26 15:04:02 LOG7[10620:11560]: SSL state (connect): before/connect initialization 2013.06.26 15:04:02 LOG7[10620:11560]: SSL state (connect): SSLv3 write client hello A 2013.06.26 15:04:02 LOG7[10620:11560]: SSL state (connect): SSLv3 read server hello A 2013.06.26 15:04:02 LOG7[10620:11560]: SSL state (connect): SSLv3 read finished A 2013.06.26 15:04:02 LOG7[10620:11560]: SSL state (connect): SSLv3 write change cipher spec A 2013.06.26 15:04:02 LOG7[10620:11560]: SSL state (connect): SSLv3 write finished A 2013.06.26 15:04:02 LOG7[10620:11560]: SSL state (connect): SSLv3 flush data 2013.06.26 15:04:02 LOG7[10620:11560]: 1 items in the session cache 2013.06.26 15:04:02 LOG7[10620:11560]: 5 client connects (SSL_connect()) 2013.06.26 15:04:02 LOG7[10620:11560]: 5 client connects that finished 2013.06.26 15:04:02 LOG7[10620:11560]: 0 client renegotiations requested 2013.06.26 15:04:02 LOG7[10620:11560]: 0 server connects (SSL_accept()) 2013.06.26 15:04:02 LOG7[10620:11560]: 0 server connects that finished 2013.06.26 15:04:02 LOG7[10620:11560]: 0 server renegotiations requested 2013.06.26 15:04:02 LOG7[10620:11560]: 4 session cache hits 2013.06.26 15:04:02 LOG7[10620:11560]: 0 external session cache hits 2013.06.26 15:04:02 LOG7[10620:11560]: 0 session cache misses 2013.06.26 15:04:02 LOG7[10620:11560]: 0 session cache timeouts 2013.06.26 15:04:02 LOG6[10620:11560]: SSL connected: previous session reused 2013.06.26 15:04:03 LOG6[10620:11560]: SSL socket closed (SSL_read) 2013.06.26 15:04:03 LOG7[10620:11560]: Sent socket write shutdown 2013.06.26 15:04:03 LOG5[10620:11560]: Connection closed: 65 byte(s) sent to SSL, 296 byte(s) sent to socket 2013.06.26 15:04:03 LOG7[10620:11560]: Remote socket (FD=368) closed 2013.06.26 15:04:03 LOG7[10620:11560]: Local socket (FD=292) closed 2013.06.26 15:04:03 LOG7[10620:11560]: Service [smtps] finished (0 left) 2013.06.26 15:04:03 LOG7[10620:10992]: Service [smtps] accepted (FD=296) from 192.168.1.2:2951 2013.06.26 15:04:03 LOG7[10620:10992]: Creating a new thread 2013.06.26 15:04:03 LOG7[10620:10992]: New thread created 2013.06.26 15:04:03 LOG7[10620:10092]: Service [smtps] started 2013.06.26 15:04:03 LOG5[10620:10092]: Service [smtps] accepted connection from 192.168.1.2:2951 2013.06.26 15:04:03 LOG6[10620:10092]: connect_blocking: connecting 74.125.130.109:465 2013.06.26 15:04:03 LOG7[10620:10092]: connect_blocking: s_poll_wait 74.125.130.109:465: waiting 10 seconds 2013.06.26 15:04:03 LOG5[10620:10092]: connect_blocking: connected 74.125.130.109:465 2013.06.26 15:04:03 LOG5[10620:10092]: Service [smtps] connected remote server from 192.168.1.31:53645 2013.06.26 15:04:03 LOG7[10620:10092]: Remote socket (FD=368) initialized 2013.06.26 15:04:03 LOG7[10620:10092]: SNI: sending servername: smtp.gmail.com 2013.06.26 15:04:03 LOG7[10620:10092]: SSL state (connect): before/connect initialization 2013.06.26 15:04:03 LOG7[10620:10092]: SSL state (connect): SSLv3 write client hello A 2013.06.26 15:04:03 LOG7[10620:10092]: SSL state (connect): SSLv3 read server hello A 2013.06.26 15:04:03 LOG7[10620:10092]: SSL state (connect): SSLv3 read finished A 2013.06.26 15:04:03 LOG7[10620:10092]: SSL state (connect): SSLv3 write change cipher spec A 2013.06.26 15:04:03 LOG7[10620:10092]: SSL state (connect): SSLv3 write finished A 2013.06.26 15:04:03 LOG7[10620:10092]: SSL state (connect): SSLv3 flush data 2013.06.26 15:04:03 LOG7[10620:10092]: 1 items in the session cache 2013.06.26 15:04:03 LOG7[10620:10092]: 6 client connects (SSL_connect()) 2013.06.26 15:04:03 LOG7[10620:10092]: 6 client connects that finished 2013.06.26 15:04:03 LOG7[10620:10092]: 0 client renegotiations requested 2013.06.26 15:04:03 LOG7[10620:10092]: 0 server connects (SSL_accept()) 2013.06.26 15:04:03 LOG7[10620:10092]: 0 server connects that finished 2013.06.26 15:04:03 LOG7[10620:10092]: 0 server renegotiations requested 2013.06.26 15:04:03 LOG7[10620:10092]: 5 session cache hits 2013.06.26 15:04:03 LOG7[10620:10092]: 0 external session cache hits 2013.06.26 15:04:03 LOG7[10620:10092]: 0 session cache misses 2013.06.26 15:04:03 LOG7[10620:10092]: 0 session cache timeouts 2013.06.26 15:04:03 LOG6[10620:10092]: SSL connected: previous session reused 2013.06.26 15:04:04 LOG6[10620:10092]: SSL socket closed (SSL_read) 2013.06.26 15:04:04 LOG7[10620:10092]: Sent socket write shutdown 2013.06.26 15:04:04 LOG5[10620:10092]: Connection closed: 65 byte(s) sent to SSL, 290 byte(s) sent to socket 2013.06.26 15:04:04 LOG7[10620:10092]: Remote socket (FD=368) closed 2013.06.26 15:04:04 LOG7[10620:10092]: Local socket (FD=296) closed 2013.06.26 15:04:04 LOG7[10620:10092]: Service [smtps] finished (0 left) 2013.06.26 15:04:04 LOG7[10620:10992]: Service [smtps] accepted (FD=364) from 192.168.1.2:2952 2013.06.26 15:04:04 LOG7[10620:10992]: Creating a new thread 2013.06.26 15:04:04 LOG7[10620:10992]: New thread created 2013.06.26 15:04:04 LOG7[10620:1404]: Service [smtps] started 2013.06.26 15:04:04 LOG5[10620:1404]: Service [smtps] accepted connection from 192.168.1.2:2952 2013.06.26 15:04:04 LOG6[10620:1404]: connect_blocking: connecting 74.125.130.108:465 2013.06.26 15:04:04 LOG7[10620:1404]: connect_blocking: s_poll_wait 74.125.130.108:465: waiting 10 seconds 2013.06.26 15:04:04 LOG5[10620:1404]: connect_blocking: connected 74.125.130.108:465 2013.06.26 15:04:04 LOG5[10620:1404]: Service [smtps] connected remote server from 192.168.1.31:53646 2013.06.26 15:04:04 LOG7[10620:1404]: Remote socket (FD=368) initialized 2013.06.26 15:04:04 LOG7[10620:1404]: SNI: sending servername: smtp.gmail.com 2013.06.26 15:04:04 LOG7[10620:1404]: SSL state (connect): before/connect initialization 2013.06.26 15:04:04 LOG7[10620:1404]: SSL state (connect): SSLv3 write client hello A 2013.06.26 15:04:05 LOG7[10620:1404]: SSL state (connect): SSLv3 read server hello A 2013.06.26 15:04:05 LOG7[10620:1404]: SSL state (connect): SSLv3 read finished A 2013.06.26 15:04:05 LOG7[10620:1404]: SSL state (connect): SSLv3 write change cipher spec A 2013.06.26 15:04:05 LOG7[10620:1404]: SSL state (connect): SSLv3 write finished A 2013.06.26 15:04:05 LOG7[10620:1404]: SSL state (connect): SSLv3 flush data 2013.06.26 15:04:05 LOG7[10620:1404]: 1 items in the session cache 2013.06.26 15:04:05 LOG7[10620:1404]: 7 client connects (SSL_connect()) 2013.06.26 15:04:05 LOG7[10620:1404]: 7 client connects that finished 2013.06.26 15:04:05 LOG7[10620:1404]: 0 client renegotiations requested 2013.06.26 15:04:05 LOG7[10620:1404]: 0 server connects (SSL_accept()) 2013.06.26 15:04:05 LOG7[10620:1404]: 0 server connects that finished 2013.06.26 15:04:05 LOG7[10620:1404]: 0 server renegotiations requested 2013.06.26 15:04:05 LOG7[10620:1404]: 6 session cache hits 2013.06.26 15:04:05 LOG7[10620:1404]: 0 external session cache hits 2013.06.26 15:04:05 LOG7[10620:1404]: 0 session cache misses 2013.06.26 15:04:05 LOG7[10620:1404]: 0 session cache timeouts 2013.06.26 15:04:05 LOG6[10620:1404]: SSL connected: previous session reused 2013.06.26 15:04:05 LOG6[10620:1404]: SSL socket closed (SSL_read) 2013.06.26 15:04:05 LOG7[10620:1404]: Sent socket write shutdown 2013.06.26 15:04:05 LOG5[10620:1404]: Connection closed: 65 byte(s) sent to SSL, 290 byte(s) sent to socket 2013.06.26 15:04:05 LOG7[10620:1404]: Remote socket (FD=368) closed 2013.06.26 15:04:05 LOG7[10620:1404]: Local socket (FD=364) closed 2013.06.26 15:04:05 LOG7[10620:1404]: Service [smtps] finished (0 left) 2013.06.26 15:04:05 LOG7[10620:10992]: Service [smtps] accepted (FD=372) from 192.168.1.2:2953 2013.06.26 15:04:05 LOG7[10620:10992]: Creating a new thread 2013.06.26 15:04:05 LOG7[10620:10992]: New thread created 2013.06.26 15:04:05 LOG7[10620:11904]: Service [smtps] started 2013.06.26 15:04:05 LOG5[10620:11904]: Service [smtps] accepted connection from 192.168.1.2:2953 2013.06.26 15:04:05 LOG6[10620:11904]: connect_blocking: connecting 74.125.130.109:465 2013.06.26 15:04:05 LOG7[10620:11904]: connect_blocking: s_poll_wait 74.125.130.109:465: waiting 10 seconds 2013.06.26 15:04:06 LOG5[10620:11904]: connect_blocking: connected 74.125.130.109:465 2013.06.26 15:04:06 LOG5[10620:11904]: Service [smtps] connected remote server from 192.168.1.31:53647 2013.06.26 15:04:06 LOG7[10620:11904]: Remote socket (FD=368) initialized 2013.06.26 15:04:06 LOG7[10620:11904]: SNI: sending servername: smtp.gmail.com 2013.06.26 15:04:06 LOG7[10620:11904]: SSL state (connect): before/connect initialization 2013.06.26 15:04:06 LOG7[10620:11904]: SSL state (connect): SSLv3 write client hello A 2013.06.26 15:04:06 LOG7[10620:11904]: SSL state (connect): SSLv3 read server hello A 2013.06.26 15:04:06 LOG7[10620:11904]: SSL state (connect): SSLv3 read finished A 2013.06.26 15:04:06 LOG7[10620:11904]: SSL state (connect): SSLv3 write change cipher spec A 2013.06.26 15:04:06 LOG7[10620:11904]: SSL state (connect): SSLv3 write finished A 2013.06.26 15:04:06 LOG7[10620:11904]: SSL state (connect): SSLv3 flush data 2013.06.26 15:04:06 LOG7[10620:11904]: 1 items in the session cache 2013.06.26 15:04:06 LOG7[10620:11904]: 8 client connects (SSL_connect()) 2013.06.26 15:04:06 LOG7[10620:11904]: 8 client connects that finished 2013.06.26 15:04:06 LOG7[10620:11904]: 0 client renegotiations requested 2013.06.26 15:04:06 LOG7[10620:11904]: 0 server connects (SSL_accept()) 2013.06.26 15:04:06 LOG7[10620:11904]: 0 server connects that finished 2013.06.26 15:04:06 LOG7[10620:11904]: 0 server renegotiations requested 2013.06.26 15:04:06 LOG7[10620:11904]: 7 session cache hits 2013.06.26 15:04:06 LOG7[10620:11904]: 0 external session cache hits 2013.06.26 15:04:06 LOG7[10620:11904]: 0 session cache misses 2013.06.26 15:04:06 LOG7[10620:11904]: 0 session cache timeouts 2013.06.26 15:04:06 LOG6[10620:11904]: SSL connected: previous session reused 2013.06.26 15:04:06 LOG6[10620:11904]: SSL socket closed (SSL_read) 2013.06.26 15:04:06 LOG7[10620:11904]: Sent socket write shutdown 2013.06.26 15:04:06 LOG5[10620:11904]: Connection closed: 65 byte(s) sent to SSL, 290 byte(s) sent to socket 2013.06.26 15:04:06 LOG7[10620:11904]: Remote socket (FD=368) closed 2013.06.26 15:04:06 LOG7[10620:11904]: Local socket (FD=372) closed 2013.06.26 15:04:06 LOG7[10620:11904]: Service [smtps] finished (0 left) From: Stephen Gates [mailto:[email protected]] Sent: Wednesday, June 26, 2013 2:25 PM To: 'stunnel-users(a)stunnel.org' Subject: Sending Email from PLC Without Authentication with gmail A customer needs to send emails from a Programmable Logic Controller (PLC) which cannot provide authentication. The customer's email server is gmail which obviously requires authentication. The PLC IP is 192.168.1.2 and the PC IP on which stunnel is installed is 192.168.1.31 My config is: cert = stunnel.pem [smtps] client = yes accept = 25 connect = smtp.gmail.com:465 The PLC is set up to send emails to the IP of the PC 192.168.1.31 When I try to send emails I get the following in the stunnel log: 2013.06.26 14:26:30 LOG5[12384:13048]: Service [smtps] accepted connection from 192.168.1.2:2938 2013.06.26 14:26:30 LOG5[12384:13048]: connect_blocking: connected 74.125.130.108:465 2013.06.26 14:26:30 LOG5[12384:13048]: Service [smtps] connected remote server from 192.168.1.31:53599 Any help would be greatly appreciated! Stephen Gates Harold K. Scholz Company 7800 Serum Avenue Ralston, NE 68127 402-339-7600

1 0