On Tue, Aug 15, 2023 at 04:14:58PM -0400, pgnd via Postfix-users wrote:
2023-08-14T13:11:53.782611-04:00 svr01 postfix/postscreen[27910]: CONNECT from
[52.101.56.17]:32607 to [209.123.234.54]:25
2023-08-14T13:11:59.860098-04:00 svr01 postfix/postscreen[27910]: PASS NEW
[52.101.56.17]:32607
2023-08-14T13:12:00.058029-04:00 svr01
postfix/postscreen-internal/smtpd[27907]: connect from
mail-eastus2azon11020017.outbound.protection.outlook.com[52.101.56.17]
2023-08-14T13:12:00.118201-04:00 svr01
postfix/postscreen-internal/smtpd[27907]: Anonymous TLS connection established
from mail-eastus2azon11020017.outbound.protection.outlook.com[52.101.56.17]:
TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)
2023-08-14T13:12:00.131049-04:00 svr01
postfix/postscreen-internal/smtpd[27907]: disconnect from
mail-eastus2azon11020017.outbound.protection.outlook.com[52.101.56.17] ehlo=1
starttls=1 quit=1 commands=3
On 15.08.23 17:12, Viktor Dukhovni via Postfix-users wrote:
Perhaps they don't like your certificate and disconnect once the
handshake completes. What are some of the domains this server is an MX
host for?
I have certificate signed by my personal CA and receive mail from microsoft
services w/o problems.
BTW I explicitly allow mail from their IP ranges at postscreen level:
#google
209.85.128.0/17 permit
74.125.0.0/16 permit
#outlook.com
40.92.0.0/15 permit
40.107.0.0/16 permit
52.100.0.0/14 permit
104.47.0.0/17 permit
they published some more ranges but when I checked, I haven't noticed mail from
other than these ranges
OK mail from outlook does make it's way thru; e.g., since Monday,
xzegrep "250 2.0.0 Queued as.*outbound.protection.outlook.com"
/var/log/postfix/postfix.log | wc -l
4343
Isn't that outbound mail *to* Microsoft-hosted domains? I wouldn't
expect that to appear in logs of incoming mail.
correct
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Honk if you love peace and quiet.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
