On Mon, Dec 15, 2008 at 03:00:27PM -0700, Jes?s Manuel Loaiza Vidal wrote: > > Dec 15 13:19:43 [postfix/smtpd] > > E21D752FB7: client=auxiliares.chapule.ich.edu.mx[192.168.10.4], > > sasl_method=PLAIN, sasl_username=test > > > > Dec 15 13:19:43 [postfix/smtpd] > > > auxiliares.chapule.ich.edu.mx[192.168.10.4]: 250 2.1.5 Ok > > > > Dec 15 13:19:43 [postfix/smtpd] > > smtp_get: EOF > > > > Dec 15 13:19:43 [postfix/smtpd] > > lost connection after RCPT > > from auxiliares.chapule.ich.edu.mx[192.168.10.4] > > > > Dec 15 13:19:43 [postfix/smtpd] > > disconnect from auxiliares.chapule.ich.edu.mx[192.168.10.4] > > > >What client sent this, and where is the corresponding PCAP file? > > Mozilla Thunderbird, but same issue with M$ Outlook, server initiates > the disconnection
No, the server does not initiate the disconnect, rather the server encounters EOF (client-disconnected) when trying to read the next command after 'RCPT TO'. > without any explanation other than 'Lost connection > after RCPT' just after client sends 'RCPT TO <t...@test.bg>' > But second retries sending just after the error the mail sends > successfully. The error occurs most the times but there are times when > mail sends successfully even from the first try. > Below is the pcap file, but remember that the connection is over TLS, so > only useful thing are IP header flags to guess who of the ends triggers > disconnection. > > PCAP file <http://www.ich.edu.mx/attachments/tcp-1.cap> You have unrealistic expectations of how well TLS masks SMTP protocol interactions. While one can hide the content bytes, one can't hide the messages, and for this discussion, it is sufficient to see the message-flow. > Below is a pcap file from the first session I posted, same issue, but it > includes when I retried sending mail, and then sends successfully with > no reason. > PCAP file <http://www.ich.edu.mx/attachments/tcp-tls.cap> I am sorry, please provide *corresponding* logs and PCAP files, one of each for a successful delivery and an unsuccessful one. The logs must include the clear-text of all client server SMTP interactions. You can drop the smtpd_tls_loglevel to 1 or 0, just the protocol debugging is sufficient. Log entries of the form: Dec 15 14:38:51 [postfix/smtpd] < auxiliares.chapule.ich.edu.mx[192.168.10.4]: RCPT TO:<t...@test.bg> Dec 15 13:19:43 [postfix/smtpd] > auxiliares.chapule.ich.edu.mx[192.168.10.4]: 250 2.1.5 Ok and the exact corresponding PCAP capture. -- Viktor. Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the "Reply-To" header. To unsubscribe from the postfix-users list, visit http://www.postfix.org/lists.html or click the link below: <mailto:majord...@postfix.org?body=unsubscribe%20postfix-users> If my response solves your problem, the best way to thank me is to not send an "it worked, thanks" follow-up. If you must respond, please put "It worked, thanks" in the "Subject" so I can delete these quickly.
