Error: "<451 4.7.6 [internal] STARTTLS required but not advertised>" in the maillog on a Symantec Brightmail Gateway when setting up outbound TLS
Article ID: 177708
Updated On:
Products
Issue/Introduction
You are setting up and requiring outbound TLS to a specific domain and messages are not received. The maillog shows this error, "451 4.7.6 [internal] STARTTLS required but not advertised"
451 4.7.6 [internal] STARTTLS required but not advertised
Cause
1)Remote domain is configured in Protocols -> Domains -> Delivery to require TLS, but the domain is not presenting STARTTLS as an acceptable command.
2)When adding the domain, the option "Local Domain" was left enabled.
Resolution
1) Verify the remote domain is presenting a 250-STARTTLS as an valid command. If it is not you will need to a) deliver to that domain with out TLS b) contact an admin at the remote domain to enable TLS.
2) Verify the domain is not set as a local domain. In under Protocols --> Domains, uncheck "Local Domain (Accept inbound mail addressed to this domain)" in the Acceptance tab.
Feedback
