Hello, GMX and web.de started an initiative for secure E-Mail made in Germany... they turned TLS on.
But in addition to that bold move the did something else that causes the following errors when they try to send mail to my postfix: postfix/smtpd[28706]: connect from mout.web.de[212.227.15.14] postfix/smtpd[28706]: SSL_accept error from mout.web.de[212.227.15.14]: 0 postfix/smtpd[28706]: warning: TLS library problem: 28706:error:14094438:SSL routines:SSL3_READ_BYTES:tlsv1 alert internal error:s3_pkt.c:1256:SSL alert number 80: postfix/smtpd[28706]: lost connection after STARTTLS from mout.web.de[212.227.15.14] postfix/smtpd[28706]: disconnect from mout.web.de[212.227.15.14] Postfix 2.9.6 running on Debian 7.1. This error ONLY occurs with their servers. My question is if anyone has an idea what could cause this error. My first guess is that they check certificates for validity and I only have an CACert certificate. Also I would like to know if anyone else sees this on their postfix? Currently I've disabled STARTTLS for their mailservers but of course I would like to use TLS if possible. Would increasing the tls log level reveal additional helpful information? Regards Sebastian -- GPG Key: 0x93A0B9CE (F4F6 B1A3 866B 26E9 450A 9D82 58A2 D94A 93A0 B9CE) 'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE. -- Terry Pratchett, The Fifth Elephant