On 1/23/2018 4:20 PM, Voytek wrote: > On Wed, January 24, 2018 8:47 am, Noel Jones wrote: > >> Find the error in the postfix log for the user's IP address. The >> postfix error may not be the same as what the user is presented with. > > > Noel, > > thanks > > I can only see this, am I using correct search criteria though ?? > > # grep '110.170.19.146' /var/log/maillog | grep error > Jan 23 20:12:45 geko postfix/smtpd[15596]: SSL_accept error from > 110-170-19-146.static.asianet.co.th[110.170.19.146]: lost connection >
You should grep for "reject:", not error: > and > > # grep '110.170.19.146' /var/log/maillog | grep "Jan 23 20:12" > Jan 23 20:12:44 geko postfix/smtpd[15596]: connect from > 110-170-19-146.static.asianet.co.th[110.170.19.146] > Jan 23 20:12:45 geko postfix/smtpd[15596]: SSL_accept error from > 110-170-19-146.static.asianet.co.th[110.170.19.146]: lost connection > Jan 23 20:12:45 geko postfix/smtpd[15596]: lost connection after STARTTLS > from 110-170-19-146.static.asianet.co.th[110.170.19.146] a connection fails STARTTLS. > Jan 23 20:12:45 geko postfix/smtpd[15596]: disconnect from > 110-170-19-146.static.asianet.co.th[110.170.19.146] ehlo=1 starttls=0/1 > commands=1/2 > Jan 23 20:12:52 geko postfix/smtpd[15596]: connect from > 110-170-19-146.static.asianet.co.th[110.170.19.146] > Jan 23 20:12:53 geko postfix/smtpd[15596]: Anonymous TLS connection > established from 110-170-19-146.static.asianet.co.th[110.170.19.146]: > TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) > Jan 23 20:12:54 geko postfix/smtpd[15596]: 0F2D062B9553: > client=110-170-19-146.static.asianet.co.th[110.170.19.146], > sasl_method=PLAIN, sasl_username=h...@tld.com.au > Jan 23 20:12:58 geko postfix/smtpd[15596]: disconnect from > 110-170-19-146.static.asianet.co.th[110.170.19.146] ehlo=2 starttls=1 > auth=1 mail=1 rcpt=10 data=1 quit=1 commands=17 and a few seconds later STARTTLS succeeds, and that IP successfully sends mail from user hr@ to 10 recipients. Are there many users on that same IP via a NAT? -- Noel Jones
