On Wed, 26 Jul 2017 12:41:29 +0100 Jeremy Harris wrote:

> On 26/07/17 11:41, Christian Balzer wrote:
> > The original connection was actually in the previous logfile. ^o^
> > ---
> > 2017-07-26 06:01:14 1da6x5-0005fV-IX <= redacted@redacted U=mail 
> > P=spam-scanned S=5454 id=20170725210042.D41044062A@redacted  
> 
> So show us "grep 1da6x5-0005fV-IX" on the pair of logfiles.  It almost
> certainly wasn't trying to do a tls handshake for that long.

Yes it was, at least according to the logs.

Here's another one, complete:
---
2017-07-26 17:47:11 1daHyG-0006wE-On <= somebodyredacted.com U=mail 
P=spam-scanned S=8615 
id=ps1pr0302mb2521ea6d93330dc628d6b68a8d...@ps1pr0302mb2521.apcprd03.prod.outlook.com
2017-07-26 17:47:12 1daHyG-0006wE-On => [email protected] 
<redacted> R=dnslookup T=remote_smtp S=8727 H=mb11.dentaku.gol.com 
[203.216.5.41] I=[203.216.5.87] C="250 OK id=1daHyK-000PFY-JI"
2017-07-26 19:58:42 1daHyG-0006wE-On H=redacted-com.mail.protection.outlook.com 
[23.103.139.138] TLS error on connection (gnutls_handshake): timed out
2017-07-26 19:58:42 1daHyG-0006wE-On TLS session failure: delivering 
unencrypted to redacted-com.mail.protection.outlook.com [23.103.139.138] (not 
in hosts_require_tls)
2017-07-26 19:58:43 1daHyG-0006wE-On => [email protected] <redacted> 
R=dnslookup T=remote_smtp S=8727 H=redacted-com.mail.protection.outlook.com 
[23.103.139.138] I=[203.216.5.87] C="250 2.6.0 
<ps1pr0302mb2521ea6d93330dc628d6b68a8d...@ps1pr0302mb2521.apcprd03.prod.outlook.com>
 [InternalId=50470160698992, 
Hostname=KL1PR0301MB2056.apcprd03.prod.outlook.com] 19008 bytes in 0.213, 
87.128 KB/sec Queued mail for delivery"
2017-07-26 19:58:43 1daHyG-0006wE-On Completed QT=2h11m35s
---

2nd line is an instant local delivery, then should be the forward to the
outsourced hell domain, but nothing for 2 hours. 

Christian
-- 
Christian Balzer        Network/Systems Engineer                
[email protected]           Rakuten Communications

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to