> On Dec 25, 2017, at 8:57 PM, li...@sbt.net.au wrote:
>
> anything to worry about ?
Generally no. There are some SMTP clients that both TLS,
they'll either retry in the clear, or they are likely shoddy
spamware.
> # grep 'TLS library problem' /var/log/maillog*
> /var/log/maillog:Dec 25 08:39:21 geko postfix/smtpd[9701]: warning: TLS
> library problem: error:140760FC:SSL
> routines:SSL23_GET_CLIENT_HELLO:unknown protocol:s23_srvr.c:640:
> /var/log/maillog:Dec 25 08:39:24 geko postfix/smtpd[9701]: warning: TLS
> library problem: error:1408A10B:SSL routines:ssl3_get_client_hello:wrong
> version number:s3_srvr.c:977:
> /var/log/maillog-20171224:Dec 21 05:25:49 geko postfix/smtpd[20642]:
> warning: TLS library problem: error:140760FC:SSL
> routines:SSL23_GET_CLIENT_HELLO:unknown protocol:s23_srvr.c:640:
> /var/log/maillog-20171224:Dec 21 05:25:54 geko postfix/smtpd[20642]:
> warning: TLS library problem: error:1408A10B:SSL
> routines:ssl3_get_client_hello:wrong version number:s3_srvr.c:977:
Other log messages will show the IP address of the client. If you weren't
expecting any email from that client, just ignore this.
This of course assumes you've not configured particularly exotic TLS
settings on your end.
--
Viktor.
