Hi Pascal,

>I'm experiencing another issue since the latest releases

I've found the mistake, but this should has been happen in all releases > 
3.00!

ASSP has done the switch to SSL (server connection) a bit too late (after 
AUTH). The resulting sequence on your MTA was:

EHLO
AUTH
STARTTLS
EHLO
......


this is not RFC conform (but works on my server) - I never saw a problem.

I'll change this in 4.21 - the resulting (right) sequence is now

EHLO
STARTTLS
EHLO
AUTH

This behavior is changed for all SMTP listeners, because the usage of AUTH 
is not restricted to listenPort2, it could be used at any port.

Thomas 




Pascal Dreissen <pas...@dreissen.nl> 
24.09.2009 13:13
Bitte antworten an
ASSP development mailing list <assp-test@lists.sourceforge.net>


An
ASSP development mailing list <assp-test@lists.sourceforge.net>
Kopie

Thema
Re: [Assp-test] fixes and changes in 2.0._RC0.4.20






Thomas,

I'm experiencing another issue since the latest releases (i don't know 
exactly when it started, because my IP is in the acceptallmail).
Users are using port 1025 (listenport2) i have smtp auth forced 
(enforceauth)

I'm also using DoTls.

Since i enabled DoTls, users are experiencing time-outs etc... problem 
is imo that SSL is being forced on the listenport2 while the mail 
client is using a non SSL connection.
I can reproduce this issue on several mail client like outlook 
express / thunderbird / mac mail.
xxx.xxx.xxx.157
This is what the logging produces on the client connecting to port 25 
(ListenPort):

Sep-24-09 13:03:41 [Worker_2] Connected: xxx.xxx.xxx.157:26562 -> 
xxx.xxx.xxx.147:25 -> xxx.xxx.xxx.147:125 , 191-192
Sep-24-09 13:03:41 [Main_Thread] Info: Main_Thread freed by 
interrupted Worker_2 in 0.252 seconds
Sep-24-09 13:03:41 [Worker_2] xxx.xxx.xxx.157 info: faked '250- 
STARTTLS ready' for xxx.xxx.xxx.147
Sep-24-09 13:03:42 [Worker_2] xxx.xxx.xxx.157 authenticated
Sep-24-09 13:03:42 [Worker_2] xxx.xxx.xxx.147 info: injected STARTTLS 
request to xxx.xxx.xxx.147
Sep-24-09 13:03:42 [Worker_2] info: started TLS-SSL session for server 
xxx.xxx.xxx.147
Sep-24-09 13:03:42 [Worker_2] info: sent EHLO again to xxx.xxx.xxx.147
xxx.xxx.xxx.147
Client connecting on port 1025 (ListenPort2) with EnforceAuth enabled:

Sep-24-09 13:08:38 [Worker_2] Connected: xxx.xxx.xxx.157:26686 -> 
xxx.xxx.xxx.147:1025 -> xxx.xxx.xxx.147:125 , 192-195
Sep-24-09 13:08:38 [Worker_2] xxx.xxx.xxx.157 info: faked '250- 
STARTTLS ready' for xxx.xxx.xxx.147
Sep-24-09 13:08:39 [Worker_2] xxx.xxx.xxx.157 authenticated
Sep-24-09 13:08:39 [Worker_2] xxx.xxx.xxx.157 info: injected STARTTLS 
request to xxx.xxx.xxx.147
Sep-24-09 13:08:39 [Worker_2] info: started TLS-SSL session for server 
xxx.xxx.xxx.147
Sep-24-09 13:08:39 [Worker_2] info: sent EHLO again to xxx.xxx.xxx.147

Then the connection waits till it time-outs. Any idea ? Why is it 
forcing SSL ? The client is connecting on standard 25 port with SSL 
disabled.

Op 24 sep 2009, om 10:45 heeft Thomas Eckardt/eck het volgende 
geschreven:

> fixed in 2.0.1_RC0.4.20
>
> - PTR cache was not working correct
>
> changed:
>
> - invalidMsgIDRe, invalidFormatHeloRe and invalidPTRRe accept now the
> weighted regex syntax (**)
>
> Thomas
>
>
>
> DISCLAIMER:
> *******************************************************
> This email and any files transmitted with it may be confidential, 
> legally
> privileged and protected in law and are intended solely for the use 
> of the
>
> individual to whom it is addressed.
> This email was multiple times scanned for viruses. There should be no
> known virus in this email!
> *******************************************************
>
> 
------------------------------------------------------------------------------
> Come build with us! The BlackBerry&reg; Developer Conference in SF, CA
> is the only developer event you need to attend this year. Jumpstart 
> your
> developing skills, take BlackBerry mobile applications to market and 
> stay
> ahead of the curve. Join us from November 9&#45;12, 2009. Register 
> now&#33;
> http://p.sf.net/sfu/devconf
> _______________________________________________
> Assp-test mailing list
> Assp-test@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/assp-test

Met vriendelijke groet / Best regards,

Pascal Dreissen

Virus
Inside
Switch
To
Apple






------------------------------------------------------------------------------
Come build with us! The BlackBerry&reg; Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9&#45;12, 2009. Register 
now&#33;
http://p.sf.net/sfu/devconf
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test



DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally 
privileged and protected in law and are intended solely for the use of the 

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no 
known virus in this email!
*******************************************************

------------------------------------------------------------------------------
Come build with us! The BlackBerry&reg; Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9&#45;12, 2009. Register now&#33;
http://p.sf.net/sfu/devconf
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to