While troubleshooting a delivery issue, I am seeing a pattern in my mail server logs of SSL connection reset messages when receiving messages from *.outbound.protection.outlook.com. The following is exigrep output for one particular message:
2014-01-10 21:53:45 SSL_write: (from mail-by2lp0241.outbound.protection.outlook.com (na01-by2-obe.outbound.protection.outlook.com) [207.46.163.241]) syscall: Connection reset by peer 2014-01-10 21:53:43 1W1k1O-0003XV-9Z H=mail-by2lp0241.outbound.protection.outlook.com (na01-by2-obe.outbound.protection.outlook.com) [207.46.163.241] Warning: SPF PASS (pass) to m.ivenue.com: domain of Right-WaySigns.com designates 207.46.163.241 as permitted sender 2014-01-10 21:53:45 1W1k1O-0003XV-9Z <= [email protected] H=mail-by2lp0241.outbound.protection.outlook.com (na01-by2-obe.outbound.protection.outlook.com) [207.46.163.241] P=esmtps X=TLSv1:AES128-SHA:128 S=27610 id=6fc5548f27984182912489b936c13...@blupr05mb070.namprd05.prod.outlook.com 2014-01-10 21:53:45 1W1k1O-0003XV-9Z => /netapp3/mail/maildirs/e/x/a/example.com/pat/Maildir/ <[email protected]> P=<[email protected]> R=virtual_user T=address_directory 2014-01-10 21:53:45 1W1k1O-0003XV-9Z Completed If you look at the timestamps, the SSL_write message is logged at the end of the message, so I suspect this is just closing down the socket. But the message tends to indicate an disorderly shutdown. I've not captured a session yet to see if the remote is not sending QUIT, or if it is not waiting for the response to the QUIT. Anybody else seeing this? ...Todd -- The total budget at all receivers for solving senders' problems is $0. If you want them to accept your mail and manage it the way you want, send it the way the spec says to. --John Levine -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
