SMIME mails from the astaro itself?

davidwood · #1 (**permalink**) 06-02-2009, 10:41 AM

Hi there,

I have just configured S/MIME encryption which is now working perfectly.

I have configured the SMTP proxy on the ASG and can telnet to port 25 and use mail from: <my ASG encryption user> and rcpt to: <my external email for which a S/MIME cert exists>. The mail gets encrypted as expected.

I noticed that if I used a mail from: <non ASG encryption user>, the mails do not get encrypted.

Ok moving on to my main point... I basically want to know if it's possible to receive encrypted notifications and executive summaries using S/Mime (or any alternative supported encryption). I'm thinking it should but searches throughout this forum don't seem to suggest it, I recall one post from a chap asking this but had no responses

).

I figured that if I configured the ASG to send mails from my ASG encryption user email address, the ASG would encrypt the mails ala the ESMTP example above, but this is not true.

I'm sure it must be possible, and that i'm just missing a trick?

Any help would be much appreciated.

Thanks.

BAlfson · #2 (**permalink**) 06-02-2009, 03:18 PM

If you want the Astaro to send alerts, etc. encrypted, then I believe that's a new feature request.

Just to be clear, the Astaro will encrypt only when it has a public key or cert for the recipient.

Cheers - Bob

davidwood · #3 (**permalink**) 06-02-2009, 03:49 PM

Thanks for the response BAlfson,

Yeah, I guess the intended use of this feature is currently to receive notifications/exec summary internally to the ASG.

I'm thinking maybe as a workaround, I could get the ASG to email to an internal SMTP server which then forwards that mail back out of the ASG to an external email account (for which public key ASG is aware of) and allow me to pickup the notifications/exec summary [encrypted] from outside the networked environment.

BAlfson · #4 (**permalink**) 06-02-2009, 04:55 PM

Very creative. I think that would work. Please confirm when you try it.

Cheers - Bob

davidwood · #5 (**permalink**) 06-02-2009, 09:07 PM

Lol, it actually works a treat!

OK, here's how I did it:

1) Configured SMTP on a local box on the network, allowing for relaying from the astaro IP.

2) Configured this SMTP server to use the ataros SMTP proxy as a smarthost.

3) Configured the Astaro > Notifications > Advanced > smarthost to point to the new SMTP service on my internal network.

Therefore the Astaro notification gets sent to my internal SMTP service, which forwards it on to the Astaro SMTP proxy, which then encrypts it based on the email address' S/MIME public key and sends it out of the network, the result being a fully encrypted notification being sent externally.

Jobs-a-good-un!