hi i am experiencing problems configuring smtp from fleet gu osquery #fleet

hi, i am experiencing problems configuring smtp fr...

Ibra

10/25/2023, 7:44 PM

hi, i am experiencing problems configuring smtp from fleet gui. once set up i am encountering the following error:

Copy code

{
  "component": "http",
  "err": "validation failed: SMTP Options a mail error occurred: sending mail: could not dial smtp host: SMTP connection error: read tcp 172.21.0.6:33498->35.xxx.xxx.126 :465: i/o timeout",
  "level": "error",
  "method": "PATCH",
  "took": "30.004357792s",
  "ts": "2023-10-25T19:26:18. 383828397Z",
  "uri": "/api/latest/fleet/config",
  "user": "admin@company.it",
  "uuid": "84f4b78c-0d3b-479f-b3ec-8efe8c1e2a1e"
}

Checking with netcat from within the container I see that the smtp server responds to the following

Copy code

[devops@devops fleetdm]$ docker exec -en Fleet nc -vz smtps.company.it 465
smtps.company.it (35.xxx.xxx.126:465) open

and doing the 2 second timeout test from the container responds the same

Copy code

/ $ timeout 2 nc -vz smtps.company.it 465
smtps.company.it (35.xxx.xxx.126:465) open

so I don't understand why it goes into timeout. is it possible to increase the fleet timeout? Thanks

Grant Bilstad

10/25/2023, 8:22 PM

Hey @Ibra, We are currently investigating a similar SMTP configuration issue from fleet UI. Would you be able to provide the sanitized "email backend" and "smtp_settings" lines from your fleet instance configuration? Can use fleetctl to get the current configuration

fleetctl get config --include-server-config

Ibra

10/25/2023, 8:43 PM

smtp_settings: authentication_method: authmethod_plain authentication_type: authtype_username_password configured: false domain: "" enable_smtp: false enable_ssl_tls: true enable_start_tls: true password: "" port: 587 sender_address: "" server: "" user_name: "" verify_ssl_certs: true

Ibra

10/26/2023, 10:47 AM

@Grant Bilstad any news here? thanks

Grant Bilstad

10/26/2023, 2:34 PM

We're still looking into things @Ibra. What version of fleet do you have running?

Ibra

10/26/2023, 2:54 PM

Copy code

{
  "version": "4.38.0",
  "branch": "HEAD",
  "revision": "6807cfe89748ef3950b324692198782f6644e3b5",
  "go_version": "go1.20.1",
  "build_date": "2023-09-25",
  "build_user": "runner"
}

@Grant Bilstad

Grant Bilstad

11/06/2023, 7:01 PM

Hey @Ibra, Apologies for late reply, have you been working on this and found anything new? Would you be able to get us the Developer Tool "Network" view when you try to configure the SMTP though fleet UI and provide the error along with anything from the `PATCH`request?

Ibra

11/07/2023, 12:09 PM

Hi @Grant Bilstad, I did more tests but nothing changed

Grant Bilstad

11/07/2023, 2:04 PM

That is the information engineering requested to look into further. Adding to report. Thanks much @Ibra

Ibra

11/07/2023, 2:08 PM

thanks to you @Grant Bilstad , the only thing is that I am still having problems on vulnerabilities as reported in the previous post, it reports me almost 600 vulnerabilities on single host and several vulnerabilities on the other software, they recurred even after deleting vulnerabilities from db as per your suggestion, but nothing changes

Ibra

11/29/2023, 7:04 AM

hi @Grant Bilstad any news for smtp problem?

Grant Bilstad

11/29/2023, 2:25 PM

The TLS issue with the older port is fixed for 4.41. Thanks for pinging me @Ibra as was trying to find this thread yesterday when the version was released.

Ibra

11/29/2023, 2:26 PM

thanks

3 Views

Open in Slack

Previous Next