Re: Troubleshooting "SSL_accept error" that happens with only one domain , iship.com (a UPS company)

2017-10-25 Thread daveg
On Wed, Oct 25, 2017, at 06:57 AM, Petri Riihikallio wrote: > > I checked the server and this is how it's configured > > > > postconf -n | grep smtpd | grep tls | grep ciphers > > smtpd_tls_ciphers = medium > > smtpd_tls_exclude_ciphers = EXPORT, LOW, RC4, eNULL, NULL > > smtpd_tls_mandatory_

Re: Troubleshooting "SSL_accept error" that happens with only one domain , iship.com (a UPS company)

2017-10-25 Thread daveg
On Wed, Oct 25, 2017, at 06:45 AM, Matus UHLAR - fantomas wrote: > > postconf -n | grep smtpd | grep tls | grep ciphers > > smtpd_tls_ciphers = medium > > smtpd_tls_mandatory_ciphers = medium > > this looks like you only accept medium grade ciphers ... so no high grade. > That means, Petri wa

Re: Troubleshooting "SSL_accept error" that happens with only one domain , iship.com (a UPS company)

2017-10-25 Thread daveg
On Wed, Oct 25, 2017, at 06:32 AM, Fazzina, Angelo wrote: > When it works I get this > > Oct 25 09:30:01 mta1 postfix/smtpd[2313]: Anonymous TLS connection > established from unknown[60.6.49.148]: TLSv1.2 with cipher > DHE-RSA-AES256-GCM-SHA384 (256/256 bits) Sure, here too. This server gets l

Re: Troubleshooting "SSL_accept error" that happens with only one domain , iship.com (a UPS company)

2017-10-25 Thread daveg
On Wed, Oct 25, 2017, at 03:39 AM, Petri Riihikallio wrote: > You and UPS require different sets of ciphers and have none in common. Either > you have tinkered with server cipher requirements or UPS has edited their > client cipher list. Check your postconf -n to find out if its you. > http://www

Troubleshooting "SSL_accept error" that happens with only one domain , iship.com (a UPS company)

2017-10-24 Thread daveg
Hello, My office receives email from UPS, since we're a customer. One of the domains that UPS emails from is apparently "iship.com". We're not getting those emails. >From the Postfix mail server's logs there's this for one of the 'misses' mail postfix/postscreen[4531]: PASS NEW [64.74.4.33]: