Since my upgrade to 2.12-20141013, I'm getting an unusual amount of those in my
mailq output:
3jHGY70x2gzBs34 3230 Tue Oct 14 14:39:39 sen...@charite.de
(TLS is required, but unavailable)
cbsx...@entelnet.bo
3jHlzh6PhDzBrqm 5164 Wed Oct 15 09:45:52 sendercharite.de
(TLS is required, but unavailable)
m.lx...@antwortinternet.de
3jHlkM4KhrzBsQD 4378 Wed Oct 15 09:34:19 sen...@charite.de
(TLS is required, but unavailable)
m.lx...@antwortinternet.de
3jHFX65QbJzBrWF 18115 Tue Oct 14 13:53:42 sen...@charite.de
(TLS is required, but unavailable)
m.lxx...@antwortinternet.de
3jHDzf0GWYzBrd9 24159 Tue Oct 14 13:29:02 tobias.ger...@charite.de
(TLS is required, but unavailable)
muir.x...@medknox.net
A closer examination shows that STARTTLS is used, but failing during
the DATA phasE:
Oct 15 10:21:05 mail2 postfix/smtp[10273]: maps_find:
smtp_discard_ehlo_keyword_address_maps: 88.97.56.177: not found
Oct 15 10:21:05 mail2 postfix/smtp[10273]: > mail.medknox.net[88.97.56.177]:25:
MAIL FROM:<sen...@charite.de> SIZE=24159 BODY=7BIT
Oct 15 10:21:05 mail2 postfix/smtp[10273]: > mail.medknox.net[88.97.56.177]:25:
RCPT TO:<muir.x...@medknox.net> ORCPT=rfc822;muir.g...@medknox.net
Oct 15 10:21:05 mail2 postfix/smtp[10273]: > mail.medknox.net[88.97.56.177]:25:
DATA
Oct 15 10:21:05 mail2 postfix/smtp[10273]: warning:
mail.medknox.net[88.97.56.177]:25: cleartext fallback, post-handshake TLS
failure
Oct 15 10:21:05 mail2 postfix/smtp[10273]: 3jHDzf0GWYzBrd9: lost connection
with mail.medknox.net[88.97.56.177] while sending MAIL FROM
"cleartext fallback, post-handshake TLS failure"?
With mail.syseleven.de I'm seeing:
Oct 15 10:53:11 mail2 postfix/smtp[27766]: < mail.syseleven.de[176.74.60.6]:25:
250-STARTTLS
Oct 15 10:53:11 mail2 postfix/smtp[27766]: < mail.syseleven.de[176.74.60.6]:25:
250-AUTH LOGIN PLAIN CRAM-MD5 DIGEST-MD5 GSSAPI MSN NTLM
Oct 15 10:53:11 mail2 postfix/smtp[27766]: < mail.syseleven.de[176.74.60.6]:25:
250-ETRN
Oct 15 10:53:11 mail2 postfix/smtp[27766]: < mail.syseleven.de[176.74.60.6]:25:
250-TURN
Oct 15 10:53:11 mail2 postfix/smtp[27766]: < mail.syseleven.de[176.74.60.6]:25:
250-ATRN
Oct 15 10:53:11 mail2 postfix/smtp[27766]: < mail.syseleven.de[176.74.60.6]:25:
250-NO-SOLICITING
Oct 15 10:53:11 mail2 postfix/smtp[27766]: < mail.syseleven.de[176.74.60.6]:25:
250-8BITMIME
Oct 15 10:53:11 mail2 postfix/smtp[27766]: < mail.syseleven.de[176.74.60.6]:25:
250-HELP
Oct 15 10:53:11 mail2 postfix/smtp[27766]: < mail.syseleven.de[176.74.60.6]:25:
250-PIPELINING
Oct 15 10:53:11 mail2 postfix/smtp[27766]: < mail.syseleven.de[176.74.60.6]:25:
250 EHLO
Oct 15 10:53:11 mail2 postfix/smtp[27766]: maps_find:
smtp_discard_ehlo_keyword_address_maps: 176.74.60.6: not found
Oct 15 10:53:11 mail2 postfix/smtp[27766]: > mail.syseleven.de[176.74.60.6]:25:
STARTTLS
Oct 15 10:53:11 mail2 postfix/smtp[27770]: < mail.syseleven.de[176.74.60.6]:25:
220 please start a TLS connection
Oct 15 10:53:11 mail2 postfix/smtp[27770]: send attr cache_id =
smtp&antwortinternet.de&mail.syseleven.de&176.74.60.6&&61C1F0A650C56573180261A8776FB0E84C16FD8E6E1507FE04117A8D8F21231B
Oct 15 10:53:11 mail2 postfix/smtp[27766]: < mail.syseleven.de[176.74.60.6]:25:
220 please start a TLS connection
Oct 15 10:53:11 mail2 postfix/smtp[27766]: send attr cache_id =
smtp&antwortinternet.de&mail.syseleven.de&176.74.60.6&&61C1F0A650C56573180261A8776FB0E84C16FD8E6E1507FE04117A8D8F21231B
Oct 15 10:53:11 mail2 postfix/smtp[27785]: SSL_connect error to
mail.syseleven.de[176.74.60.6]:25: -1
--
[*] sys4 AG
http://sys4.de, +49 (89) 30 90 46 64
Franziskanerstraße 15, 81669 München
Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer
Aufsichtsratsvorsitzender: Florian Kirstein
