Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

No Email Alerts And Local Email Server Returning "unknown protocol"

No Email Alerts And Local Email Server Returning "unknown protocol"

Version

Cb Response 5.x, 6.x

Issue

Email alerts are not firing for a locally set up email server. Logs show an unexpected response back from the email server

Symptoms

error message: SSLError: [Errno 1] _ssl.c:492: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol

Solution

There is a Failure sending e-mail due to the email protocol not matching when attempting to reach out to the email server. The Email Server settings are incorrect or the Cb Response server is unable to reach the email server

  1. Verify that you have the smtp connection type set correctly under Administration > Settings > E-Mail.
  2. Review the port setting. Standard SMTP ports are 25, and 587 for submission: RFC 6409 - Message Submission for Mail
  3. Verify Perimeter devices (firewall, proxy etc) allow pass-through SSL traffic. If you would like to troubleshoot the E-mail server connection, we'd recommend bringing this issue up with your networking team or email server team. You could start out with ping, tracert and a wireshark capture
  4. If you have no policies against it, another viable option would be to just the Carbon Black External Mail Server option instead. This setting can be changed in the UI under Administration > Settings > E-Mail to  Use Carbon Black External Mail Server (Secure HTTPS POST to api.alliance.carbonblack.com) and save changes
Labels (1)
Was this article helpful? Yes No
100% helpful (1/1)
Article Information
Author:
Creation Date:
‎07-10-2017
Views:
859
Contributors