On Tue, Mar 08, 2016 at 10:10:13AM +0100, Thomas Keller wrote:
> postfix/smtpd[2608]: connect from 61-216-2-13.HINET-IP.hinet.net[61.216.2.13]
A compromised botnet machine is connecting to your Postfix server.
> postfix/smtpd[2608]: warning: TLS library problem: 2608:error:1408F10B:SSL
> routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:340:
In its response to the server SSL/TLS HELLO, or some later packet
its SSL/TLS implementation sends garbage or incorrectly sends a
TLS record whose version number does not match the negotiated
protocol version.
> postfix/smtpd[2608]: lost connection after STARTTLS from
> 61-216-2-13.HINET-IP.hinet.net[61.216.2.13]
The connection with the botnet machine drops. You don't have to
bother with the spam.
--
Viktor.
