Hi,

something must changed in ssl/tls or in postfix. After some time my postfix log write (spam) this:

postfix/smtpd[75310]: timeout after EHLO from localhost[127.0.0.1]
postfix/smtpd[75273]: timeout after DATA (0 bytes) from localhost[127.0.0.1]
postfix/smtpd[75316]: timeout after MAIL from localhost[127.0.0.1]
postfix/smtpd[75258]: timeout after DATA (0 bytes) from localhost[127.0.0.1]
postfix/smtpd[75284]: timeout after STARTTLS from localhost[127.0.0.1]

I tried everything in assp and in postfix but it is same. I can't use tls proxy on assp becuse messages will be non readable for assp. I must tur on 587 submisson at postfix and turn of in assp. This works for users but for meassages from outside some tls connections are timeouted too.

I am using ubuntu server 20.04 LTS (want use centos 7 but it is impossible to install recommended perl with packages on it :-))


Dne 30. 07. 21 v 3:26 Mark D Montgomery II via Assp-user napsal(a):
Yeah, with the Disable SSL setting blank and also with 25 added to the Force TLS proxy setting incoming connections just time out (unsure if it's all the time or just most of the time).

Jul-29-21 21:19:31 [Worker_3] [TLS-in] [TLS-out] 209.85.218.52 TLS-Connection idle for 180 secs - timeout Jul-29-21 21:19:31 [Worker_3] [TLS-in] [TLS-out] 209.85.218.52 [SMTP Status] 451 Connection timeout, try later

I'll have to test more thoroughly when I have time.

----- Message from K Post <nntp.p...@gmail.com> ---------
    Date: Thu, 29 Jul 2021 20:39:29 -0400
    From: K Post <nntp.p...@gmail.com>
Reply-To: For Users of ASSP <assp-user@lists.sourceforge.net>
 Subject: Re: [Assp-user] STARTTLS - connection randomly timeout (outlook imap error)
      To: For Users of ASSP <assp-user@lists.sourceforge.net>


Just my 1 1/2 cents:
I'm not sure why you needed to (or would want to) disable ssl on port 25,
but setting

Disable SSL on listenports: 25

will make it so that outside smtp servers communicate with you without
encryption.  Outside centers always deliver on port 25, and won't try 587
or any other port.

On Wed, Jul 28, 2021 at 5:49 PM Mark D Montgomery II via Assp-user <
assp-user@lists.sourceforge.net> wrote:

I fought with this for quite a while the other day after upgrading my
VPS from Debian 9 to 10.
It seems something must have changed with SSL handling at another
level (maybe something with a Postfix update?).

What I ended up with:

Network Setup:
SMTP Listen Port: 25
SMTP Destination: 125
SMTP Secure Listen Port: 465
SSL Destination: 1465
Second SMTP Listen Port: 587
Second SMTP Destination: 1587
Force SMTP AUTH on Second SMTP Listen Port: On


SSL/TLS:
How to Handle STARTTLS Request: do TLS
Disable SSL on listenports: 25
Force TLS to Proxy on this Ports: 587

Client Side:
Connections to port 465: SSL/TLS
Connections to port 587: STARTTLS



----- Message from "Ing. Lukáš Pečínka" <lukas.peci...@osu.cz> ---------
     Date: Wed, 28 Jul 2021 12:10:46 +0200
     From: "Ing. Lukáš Pečínka" <lukas.peci...@osu.cz>
Reply-To: For Users of ASSP <assp-user@lists.sourceforge.net>
  Subject: [Assp-user] STARTTLS - connection randomly timeout (outlook
imap error)
       To: assp-user@lists.sourceforge.net


> Hello,
>
> I have some problem. I started ASSP with STARTTLS. Some users have
> problem with connection timeout (180s). Same with MS Outlook. Test
> message never pass and never connect on server. If I switch assp to
> TLS proxy everything works fine. After 2 days I don't know what to
> do or what I did bad. Could someone help me? Thank you.
>
> Is something to tweak? Some Timeout or connection&nbsp; rise/lower?
>
> I tested starttls connection in terminal via openssl - everything is
good.
>
> Listen SMTP port 25
>
> SMTP destination 125
>
> SMTP secure listen port 465
>
> SSL Destination 225
>
> second SMTP listen port 587
>
> TLS Do TLS
>
>
> Thanks a lot
>
> --
> S pozdravem a přáním pěkného dne | Best regards
>
> Lucas
>
>
>
> _______________________________________________
> Assp-user mailing list
> Assp-user@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/assp-user


----- End message from "Ing. Lukáš Pečínka" <lukas.peci...@osu.cz> -----



--
Mark D Montgomery II
techi...@techiem2.net
https://www.techiem2.net (Blog)
https://www.techiem2.tv (Photo Gallery/Journal)



_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user



----- End message from K Post <nntp.p...@gmail.com> -----



--
S pozdravem a přáním pěkného dne | Best regards

Ing. Lukáš Pečínka
System administrator, Postmaster, IdP administrator
Students mail, Antispam, Mail delivery system
Centre for information technology
University of Ostrava
Bráfova 5
701 03 Ostrava
Czech Republic

lukas.peci...@osu.cz
m...@helpdesk.osu.cz
ed...@helpdesk.osu.cz
+420 597 09 1116
+420 731 639 635



_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to