IBM i Global

 View Only
  • 1.  SMTP Mail Forwarding

    Posted Mon September 30, 2024 09:30 AM

    I recently upgraded to a Power 10 running IBM i 7.5.   My old IBM i 7.3 server was configured to send SMTP mail and relay to M365.   I have compared all of the settings on both servers and they appear to be correct.  I reached out to M365 who indicated to recreate the O365 connectors which I did, however there is still an issue.  I can send emails internally to other users, however, those going outside are failing.  I found my CA certificate had expired and recreated that also.  I have validated the parameters from M365 for the MX name.  Any feedback is appreciated as I have hit a wall.    

    Here part of the SMTP trace.

    using mailhub 
    09/30/2024 12:39:12.532 0B F4241 091 qtmscltaut.C 00714 getAuthParm: domain num=-1 
    09/30/2024 12:39:12.532 0B F4241 091 qtmscltaut.C 00716 getAuthParm: domain=mycompany-com.mail.protection.outlook.com 
    09/30/2024 12:39:12.533 0B F4241 091 qtmscltaut.C 00847 getAuthParm: could not find MYCOMPANY-COM.MAIL.PROTECTION.OUTLO
    09/30/2024 12:39:12.533 0B F4241 091 qtmscltaut.C 00847 OK.COM errno 3102 
    09/30/2024 12:39:12.533 0B F4241 091 qtmscltaut.C 00854 possible expected errno = 3102 
    09/30/2024 12:39:12.533 0B F4241 091 qtmscltaut.C 00875 Expected errno Major/Minor codes were 0. So the record didn't exist 
    09/30/2024 12:39:12.533 0B F4241 091 qtmscltaut.C 00877 Record not present 
    09/30/2024 12:39:12.533 0B F4241 091 qtmscltaut.C 00889 Return: getAuthParm 
    09/30/2024 12:39:12.533 0B F4241 091 qtmsmxrsv.C 00664 Call: getmxhostnames(name=mycompany-com.mail.protection.outlook.c
    09/30/2024 12:39:12.533 0B F4241 091 qtmsmxrsv.C 00664 om,lht_first=TRUE,mxrslv=TRUE) 
    09/30/2024 12:39:12.533 0B F4241 091 qtmsmxrsv.C 00564 host MYCOMPANY-COM.MAIL.PROTECTION.OUTLOOK.COM was not found in L
    09/30/2024 12:39:12.533 0B F4241 091 qtmsmxrsv.C 00564 HT 
    09/30/2024 12:39:12.533 0B F4241 091 qtmsmxrsv.C 00710 Resolving MX for MYCOMPANY-COM.MAIL.PROTECTION.OUTLOOK.COM 
    09/30/2024 12:39:19.443 0B 00000 090 qtmssmtpc.C 01126 Received request E-mail ID: 004E1C-M40-03488700000090F8C0 
    09/30/2024 12:39:19.443 0B 00000 090 qtmssmtpc.C 01137 Total request waiting relay: 1 
    09/30/2024 12:39:19.443 0B 00000 093 qtmssmtpc.C 01744 Processing Status, Waiting=1, Live=1 
    09/30/2024 12:39:19.443 0B 00000 093 qtmssmtpc.C 01755 Processing E-mail ID: 004E1C-M40-03488700000090F8C0 
    09/30/2024 12:39:19.443 0B 00000 093 qtmscltcnn.C 00729 Call: createClientConnection(id = 004E1C-M40-03488700000090F8C0) 
    09/30/2024 12:39:19.443 0B 00000 093 qtmsemm.C 02833 Call: TryEmailStateUpdLock(id=004E1C-M40-03488700000090F8C0) 
    09/30/2024 12:39:19.443 0B 00000 093 qtmsemm.C 02383 Call: CheckEmailWrkState(id=004E1C-M40-03488700000090F8C0) 
    09/30/2024 12:39:19.444 0B 00000 093 qtmsemm.C 00996 Call: LockFileUpdate(int file_descriptor=5) 
    09/30/2024 12:39:19.444 0B 00000 093 qtmsemm.C 01004 Return: LockFileUpdate return 1 
    09/30/2024 12:39:19.444 0B 00000 093 qtmsemm.C 02463 Return: CheckEmailWrkState return -3 
    09/30/2024 12:39:19.764 0B F4241 091 qtmsmxrsv.C 00270 Header Info 
    09/30/2024 12:39:19.764 0B F4241 091 qtmsmxrsv.C 00271 ID=13959, QR=1, OPCODE = 0 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00273 AA=0,TC=0,RD=1,RA=1,Z=0,RCODE=0 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00275 Question Section: Count =1 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00323 MYCOMPANY-COM.MAIL.PROTECTION.OUTLOOK.COM IN A 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00324 Answer Section: Count =4 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00126 RR NAME=MYCOMPANY-COM.MAIL.PROTECTION.OUTLOOK.COM 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00142 RR TYPE=1(A) 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00150 RR CLASS=1 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00157 TTL =10 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00164 RDLEN =4 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00224 rr 0 was type 1(A) this was not the requested type it was not added 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00225 The DNS is responding in the answer section with records that do not belo
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00225 ng in the answer. 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00226 This information was supposed to be in the additional information section
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00227 It will be ignored as per RFC 2821 and corresponding DNS RFCs 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00228 A and AAAA records will be picked up later by an explicit query 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00126 RR NAME=MYCOMPANY-COM.MAIL.PROTECTION.OUTLOOK.COM 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00142 RR TYPE=1(A) 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00150 RR CLASS=1 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00157 TTL =10 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00164 RDLEN =4 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00224 rr 1 was type 1(A) this was not the requested type it was not added 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00225 The DNS is responding in the answer section with records that do not belo
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00225 ng in the answer. 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00226 This information was supposed to be in the additional information section
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00227 It will be ignored as per RFC 2821 and corresponding DNS RFCs 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00228 A and AAAA records will be picked up later by an explicit query 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00126 RR NAME=MYCOMPANY-COM.MAIL.PROTECTION.OUTLOOK.COM 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00142 RR TYPE=1(A) 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00150 RR CLASS=1 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00157 TTL =10 
    09/30/2024 12:39:19.765 0B F4241 091 qtmsmxrsv.C 00164 RDLEN =4 



    ------------------------------
    Michael Garczynski
    ------------------------------


  • 2.  RE: SMTP Mail Forwarding

    Posted Mon September 30, 2024 09:04 PM

    Dear Michael

    IBM i 7.5 comes with a new OpenSSL release 1.1 (as opposed to 1.0.x in previous IBM i release) and I wonder if this has to do with your problem or not.  Perhaps, you may ask M365 (is this the same as Office 365?) if they use OpenSSL at lower level than 1.1 or not, and if so, ask them if they can upgrade their OpenSSL release? 

    Another point is when you mentioned you " compared all of the settings on both servers and they appear to be correct. ", I wonder what information source was your reference?  Is it this one from IBM Technote? Configuration of the IBM i SMTP Client to Relay Email to Office365 and Gmail at https://www.ibm.com/support/pages/configuration-ibm-i-smtp-client-relay-email-office365-and-gmail      



    ------------------------------
    Satid S
    ------------------------------



  • 3.  RE: SMTP Mail Forwarding

    Posted 22 days ago

    Thank you so much for the link.



    ------------------------------
    Hazel Bell
    ------------------------------



  • 4.  RE: SMTP Mail Forwarding

    Posted Fri October 04, 2024 07:19 AM

    Hi Michael,

    Just throwing this out there, it might not be much help, but at some point during our conversion to Office 365 Mail, we had a consultant help us with creating an SMTP relay server in our Windows server environment. I don't know exactly how it works, but among other settings, I pretty much just point the IBM i SMTP server to it's IP address and it handles the rest. This relay server is also used by our fax server and other entities that would otherwise be difficult to configure for Office 365. (We are at V7R4 of IBMi)

    John



    ------------------------------
    John Paisley
    ------------------------------



  • 5.  RE: SMTP Mail Forwarding

    Posted Fri October 04, 2024 11:32 AM

    Hi

    I'll see you have recreate CA certifcate. Is the Local CA for the server or did you reimport SSL Certificat from Office 365 in DCM ?  May be you can try to import the Office 365 certificat.

    Regards



    ------------------------------
    Virgile VATIN
    ------------------------------