On 27/4/21 02:53, P.V.Anthony wrote:
Getting ssl errors for some incoming email domains.
Currently using
Postfix version: 3.3.1
Centos 8
I did not give more details of the problem earlier.
Here is the log.
I really need some advice on how to solve this.
The only way to get the emails coming in is to set the following.
smtpd_tls_security_level=none
What settings need to be done to solve this?
------- start ---------------
Apr 27 13:38:06 mail postfix/smtpd[383580]: connect from
hubie.merck.com[155.91.37.10]
Apr 27 13:38:06 mail postfix/smtpd[383580]: setting up TLS connection
from hubie.merck.com[155.91.37.10]
Apr 27 13:38:06 mail postfix/smtpd[383580]:
hubie.merck.com[155.91.37.10]: TLS cipher list
"ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!RC4:!aNULL"
Apr 27 13:38:06 mail postfix/smtpd[383580]: SSL_accept:before SSL
initialization
Apr 27 13:38:06 mail postfix/smtpd[383580]: SSL_accept:before SSL
initialization
Apr 27 13:38:06 mail postfix/smtpd[383580]: SSL_accept:SSLv3/TLS read
client hello
Apr 27 13:38:06 mail postfix/smtpd[383580]: SSL_accept:SSLv3/TLS write
server hello
Apr 27 13:38:06 mail postfix/smtpd[383580]: SSL_accept:SSLv3/TLS write
certificate
Apr 27 13:38:06 mail postfix/smtpd[383580]: SSL_accept:SSLv3/TLS write
key exchange
Apr 27 13:38:06 mail postfix/smtpd[383580]: SSL_accept:SSLv3/TLS write
server done
Apr 27 13:38:07 mail postfix/smtpd[383580]: SSL_accept:error in
SSLv3/TLS write server done
Apr 27 13:38:07 mail postfix/smtpd[383580]: SSL_accept error from
hubie.merck.com[155.91.37.10]: Connection reset by peer
Apr 27 13:38:07 mail postfix/smtpd[383580]: lost connection after
STARTTLS from hubie.merck.com[155.91.37.10]
Apr 27 13:38:07 mail postfix/smtpd[383580]: disconnect from
hubie.merck.com[155.91.37.10] ehlo=1 starttls=0/1 commands=1/2
------- end -----------------
