Email for 3rd Party Domain No Longer Able To Send Via Apple Mail Client

A couple weeks ago my Apple mail client refused to send emails on my non-Apple email account via SMTP on Port 465 (SSL).


Prior to this I made no changes to the settings, which are: incoming IMAP port 993; outgoing SMTP port 465 SSL. The only recent change to anything on my end was the disabling of "ipv6" on our Arris dsl modem from AT&T, router and in my computer's network settings (now "local link only"), but that shouldn't have had any affect on this.


I have used Apple Mail to send and receive email from this particular domain for years. At the same time, throughout all those years, I've also used it to send and receive mail from my Apple addresses, and Google Gmail. While I continue to be able to send and receive using the Apple and Gmail accounts, my third-party email still won't connect to the outgoing server.


I've tried all the resets. Deleted all the accounts and reentered them from scratch. I've repaired disk permissions. I've started and restarted everything - Modem, Router, Computer - at least a dozen times. But still, no sending on that one third-party domain, yet I continue to be able to pull email off that server using port 993.


I contacted the hosting service for my domain to see if the problem is on their end, but their best guest is that something on my end (software or hardware) is outdated, i.e. no longer capable of supporting the SSL requirements of their servers. This explanation fails, however, because I have two other domains hosted on different servers by this provider and those emails continue to be able to send and receive via the Apple Mail client.


Help. I'm stuck.


I'm on a 27-inch iMac desktop mid 2011 running OS Yosemite (10.10.5) with Apple Mail client version 8.2 (2104).


The server logs show the following (my IP address has been replaced with XX.XX.XX.XX):

==========================================

2018-06-28 13:28:43 TLS error on connection from [XX.XX.XX.XX]:38601 (SSL_accept): error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol

2018-06-28 13:28:43 SMTP connection from [XX.XX.XX.XX]:44614 (TCP/IP connection count = 43)

2018-06-28 13:29:08 TLS error on connection from [XX.XX.XX.XX]:44614 (SSL_accept): error:00000000:lib(0):func(0):reason(0)

2018-06-28 13:38:48 SMTP connection from [XX.XX.XX.XX]:35880 (TCP/IP connection count = 37)

2018-06-28 13:38:48 TLS error on connection from [XX.XX.XX.XX]:35880 (SSL_accept): error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol

2018-06-28 13:38:48 SMTP connection from [XX.XX.XX.XX]:35093 (TCP/IP connection count = 37)

==========================================


There were some new online security requirements that took effect at the start of July, and I know that a lot of apps were running updates. Also, I know from my Arris dsl modem logs that AT&T has been updating the firmware on some of their modems, mine included. Perhaps something in one of those threw my email out of whack.


All theories appreciated.

iMac, OS X Yosemite (10.10.5), 27" Mid 2011 3.4 GHz Intel Core i7 Processor

Posted on Jul 3, 2018 2:22 PM

Reply

Similar questions

9 replies

Jul 6, 2018 1:50 PM in response to Eric Root

Now the Web Hosting Service for my domain says it has nothing to do with settings.


Now they say it's about ciphers and protocols.


They explain it like this: The reason I'm suddenly unable to send third-party emails via IMAP and SMTP on Port 465 using my Apple Mail client is because Apple Mail is no longer capable of connecting to the new modern ciphers that were recently installed on the servers managed by my web hosting service.


According to the hosting service, the problem has nothing to do with the many changes their techs have advised me to make during the prior two weeks. Not my Apple Mail client settings, or Network settings, or AEBS firewall settings, or Motorola DSL modem settings, etc… They apologized for the confusion, and stated definitively that the problem cannot be solved with settings. It requires a different mail client, i.e., not Apple Mail.


They say this was partly due to Apple's decision to snub OpenSSL in favor of Apple's own TLS and crypto libraries. As a result, they say, even the most up-to-date Apple Mail versions will no longer be able to connect to third-party servers that employ these modern ciphers and OpenSSL.


To further support this explanation, my web hosting service cites the Linux-based web-hosting control panel they employ — cPanel — and its effort to improve security by doing away with older ciphers and changing their default server configurations to use only modern ciphers, which are incapable of connecting to Apple Mail. I assume this means all hosting services that employ cPanel will soon yield the same result for customers who use the Apple Mail client, so I expect I may be the first of many seeking answers to these same questions.


I'm just a writer who uses a computer, not a programer, tech or engineer. So, please, if you are someone who can confirm or dismiss this "Open SSL/Modern Ciphers" theory, please do so.


I admit to being inclined to accept this explanation, though at the same time part of me hopes it's wrong because of my affection for the amazing piece of Apple software that we call Mail. Though it may be under-appreciated, and/or under-rated, it is certainly not under-utilized by Apple users like myself.


Furthermore, if true, I expect this will mean we all have to choose between switching to hosting services that utilize Apple's TLS, or finding other Mac-friendly email clients (do those even exist?).


Personally, if it comes down it, I'll chuck the web hosting service a thousand times before I surrender my Apple Mail client, but I'd like to confirm that there's absolutely no other fix before I go to all that trouble.


When it comes to fixing this problem, even the advice of customer support techs has proven untrustworthy. My new mantra is "verify, verify, verify" before making any more changes to settings. In the past 14 days, multiple customer service reps from my web hosting service have given me at least half a dozen different explanations, and fixes, for this problem, only to have them all contradicted by this "OpenSSL/modern cipher" theory. While I appreciate the apology I received from my web hosting service for those errors, I remain skeptical of their explanations and advice. (I'm intentionally not naming the hosting service because this isn't about shaming them, but rather about solving this problem)


By way of attribution for their explanation, my web hosting service directed me to a forum thread for the Cpanel security changes involving modern ciphers and OpenSSL. This thread discusses how the very same problem has been reported on even up-to-date mail clients — including users of Outlook 2016 and Windows 10. These users have experienced the exact same problem as me. Without apparent cause, they were suddenly unable to send third-party emails using previously reliable email clients, and, according to this thread, it's all because of new ciphers and protocols installed by their web hosting services.


Please feel free to confirm, clarify, or dismiss any or all of this. As I stated previously in this post, I'm looking for the true explanation, not the one I want to hear.


Thank you to Eric Root and rccharles for replying to this post and attempting to help me find that explanation.

Jul 6, 2018 11:31 AM in response to Teej_LA

You are welcome. Try sending in the Safe Mode.


Safe Mode - About


Safe Mode Startup – El Capitan. also Sierra


If it works in the Safe Mode, try running this program when booted normally and then copy and paste the output in a reply. The program was created by Etresoft, a frequent contributor. Please use copy and paste as screen shots can be hard to read. Click “Share Report” button in the toolbar, select “Copy to Clipboard” and then paste into a reply. This will show what is running on your computer. No personal information is shown.

Etrecheck – System Information

Jul 4, 2018 12:33 PM in response to Teej_LA

The only recent change to anything on my end was the disabling of "ipv6" on our Arris dsl modem from AT&T, router and in my computer's network settings (now "local link only"),

I second the motion. Why did you make the change? If it aren't broke don't fix it.

what domain are you talking about, if you can spare the domain name.

Here is what I see on my 10.10.5 machine.

User uploaded file

User uploaded file

R

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Email for 3rd Party Domain No Longer Able To Send Via Apple Mail Client

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.