On Mon, Apr 24, 2017 at 04:30:34PM +0200, Frank Timmers wrote: > ... > — smtpd.conf — > pki mail.example.com certificate "/etc/opensmtpd/ssl.crt" > pki mail.example.com key "/etc/opensmtpd/ssl.key" > > # Interface to listen on any address (needed for failover) > listen on 0.0.0.0 secure auth smtp_users pki mail.example.com
surround smtp_users with a < and > like: listen on 0.0.0.0 secure auth <smtp_users> pki mail.example.com > # Userlist > table smtp_users file:/etc/opensmtpd/smtp_users and try defining the smtp_users table before your "listen on" line although I would expect smtpd -n should have complained about that. -Tim > — smtp.conf — > > — smtp_users— > test > $6$F1n7ZnzRfkPbGLjV$qBw5kvTo0dnJOA5dR7OCiF94gGK5yLOxtH9D2T4/.AAVGgfyyjdunh.RaXS6O0VHPPKriWurP/WgESa/dpfij1 > — smtpd_users— > > — /var/log/maillog— > Apr 24 13:02:08 localhost smtpd[17028]: e3f09084856c63f5 smtp event=connected > address=192.168.50.1 host=192.168.50.1 > Apr 24 13:02:08 localhost smtpd[17028]: e3f09084856c63f5 smtp event=starttls > ciphers="version=TLSv1.2, cipher=ECDHE-RSA-AES256-GCM-SHA384, bits=256" > Apr 24 13:02:08 localhost smtpd[17028]: e3f09084856c63f5 smtp > event=authentication user=test result=permfail > Apr 24 13:02:09 localhost smtpd[17028]: smtp-in: Failed command on session > e3f09084856c63f5: "AUTH PLAIN (...)" => 535 Authentication failed > Apr 24 13:02:09 localhost smtpd[17028]: e3f09084856c63f5 smtp > event=authentication user=test result=permfail > Apr 24 13:02:10 localhost smtpd[17028]: smtp-in: Failed command on session > e3f09084856c63f5: "AUTH PLAIN (...)" => 535 Authentication failed > Apr 24 13:02:10 localhost smtpd[17028]: e3f09084856c63f5 smtp > event=authentication user=test result=permfail > Apr 24 13:02:11 localhost smtpd[17028]: smtp-in: Failed command on session > e3f09084856c63f5: "AUTH LOGIN (password)" => 535 Authentication failed > Apr 24 13:02:11 localhost smtpd[17028]: e3f09084856c63f5 smtp > event=authentication user=test result=permfail > Apr 24 13:02:11 localhost smtpd[17028]: smtp-in: Failed command on session > e3f09084856c63f5: "AUTH LOGIN (password)" => 535 Authentication failed > Apr 24 13:02:11 localhost smtpd[17028]: e3f09084856c63f5 smtp event=closed > reason=quit > — /var/log/maillog — > > — smtp -dv -T all — > TABLE "smtp_users" type=HASH config="/etc/opensmtpd/tables/smtp_users" > "test" -> > "$6$F1n7ZnzRfkPbGLjV$qBw5kvTo0dnJOA5dR7OCiF94gGK5yLOxtH9D2T4/.AAVGgfyyjdunh.RaXS6O0VHPPKriWurP/WgESa/dpfij1" > mproc: lka -> pony: enabled > imsg: pony <- parent: IMSG_CONF_START (len=0) > imsg: pony <- parent: IMSG_CONF_END (len=0) > debug: smtp: listen on 127.0.0.1 port 10028 flags 0x400 pki "" ca "" > debug: smtp: listen on 0.0.0.0 port 25 flags 0x449 pki “mail.example.com" ca > "" > debug: smtp: listen on 0.0.0.0 port 465 flags 0x44a pki “mail.example.com" ca > "" > debug: pony: rsae_init > debug: pony: rsae_init > debug: smtp: will accept at most 2043 clients > imsg: ca <- parent: IMSG_CONF_START (len=0) > imsg: ca <- parent: IMSG_CONF_END (len=0) > debug: init private ssl-tree > mproc: ca -> pony: enabled > queue-backend: queue_envelope_walk() -> -1 (0000000000000000) > debug: queue: done loading queue into scheduler > debug: smtpd: scanning offline queue... > debug: smtpd: offline scanning done > debug: smtp: new client on listener: 0x23ca250 > smtp: 0x23bbf60: connected to listener 0x23ca250 [hostname=mail.example.com, > port=25, tag=] > mproc: pony -> lka: allocating 128 > mproc: pony -> lka : 34 IMSG_SMTP_DNS_PTR > mproc: pony -> control: allocating 128 > mproc: pony -> control : 47 IMSG_STAT_INCREMENT > mproc: pony -> control : 53 IMSG_STAT_INCREMENT > imsg: lka <- pony: IMSG_SMTP_DNS_PTR (len=34) > imsg: control <- pony: IMSG_STAT_INCREMENT (len=47) > ramstat: increment: smtp.session > ramstat: smtp.session (0x9fc641): 0 -> 1 > imsg: control <- pony: IMSG_STAT_INCREMENT (len=53) > ramstat: increment: smtp.session.inet4 > ramstat: smtp.session.inet4 (0x9fc641): 0 -> 1 > mproc: lka -> pony: allocating 128 > mproc: lka -> pony : 28 IMSG_SMTP_DNS_PTR > imsg: pony <- lka: IMSG_SMTP_DNS_PTR (len=28) > smtp: 0x23bbf60: STATE_NEW -> STATE_CONNECTED > 89080c4f60136a5e smtp event=connected address=192.168.50.1 host=192.168.50.1 > filter: new query QUERY_CONNECT > filter: filter_drain_query 89080c5060380f52[QUERY_CONNECT=192.168.50.221 <-> > 192.168.50.1(192.168.50.1),filter_session@0x23bbba0[datalen=0,eom=(nil),ofile=(nil)]] > filter: filter_end_query 89080c5060380f52[QUERY_CONNECT=192.168.50.221 <-> > 192.168.50.1(192.168.50.1),filter_session@0x23bbba0[datalen=0,eom=(nil),ofile=(nil)]] > filter: query 89080c5060380f52 done: status=FILTER_OK code=0 response="(null)" > smtp: 0x23bbf60: >>> 220 mail.example.com ESMTP OpenSMTPD > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R ib=21 ob=0> > smtp: 0x23bbf60: <<< EHLO [192.168.50.1] > filter: new query QUERY_HELO > filter: filter_drain_query > 89080c511256b740[QUERY_HELO=[192.168.50.1],filter_session@0x23bbba0[datalen=0,eom=(nil),ofile=(nil)]] > filter: filter_end_query > 89080c511256b740[QUERY_HELO=[192.168.50.1],filter_session@0x23bbba0[datalen=0,eom=(nil),ofile=(nil)]] > filter: query 89080c511256b740 done: status=FILTER_OK code=0 response="(null)" > smtp: 0x23bbf60: STATE_CONNECTED -> STATE_HELO > smtp: 0x23bbf60: >>> 250-mail.example.com Hello [192.168.50.1] > [192.168.50.1], pleased to meet you > smtp: 0x23bbf60: >>> 250-8BITMIME > smtp: 0x23bbf60: >>> 250-ENHANCEDSTATUSCODES > smtp: 0x23bbf60: >>> 250-SIZE 36700160 > smtp: 0x23bbf60: >>> 250-DSN > smtp: 0x23bbf60: >>> 250-STARTTLS > smtp: 0x23bbf60: >>> 250 HELP > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R ib=10 ob=0> > smtp: 0x23bbf60: <<< STARTTLS > smtp: 0x23bbf60: >>> 220 2.0.0: Ready to start TLS > smtp: 0x23bbf60: STATE_HELO -> STATE_TLS > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W ib=0 ob=0> > mproc: pony -> lka : 80 IMSG_SMTP_TLS_INIT > imsg: lka <- pony: IMSG_SMTP_TLS_INIT (len=80) > debug: lka: looking up pki “mail.example.com" > mproc: lka -> pony : 1561 IMSG_SMTP_TLS_INIT > imsg: pony <- lka: IMSG_SMTP_TLS_INIT (len=1561) > debug: session_start_ssl: switching to SSL > debug: pony: rsae_priv_enc > mproc: pony -> ca: allocating 128 > mproc: pony -> ca : 117 IMSG_CA_PRIVENC (flush) > imsg: ca <- pony: IMSG_CA_PRIVENC (len=117) > mproc: ca -> pony: allocating 128 > mproc: ca -> pony: realloc 128 -> 512 > mproc: ca -> pony : 279 IMSG_CA_PRIVENC > imsg: pony <- ca: IMSG_CA_PRIVENC (len=279) > smtp: 0x23bbf60: IO_TLSREADY <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > 89080c4f60136a5e smtp event=starttls ciphers="version=TLSv1.2, > cipher=ECDHE-RSA-AES256-GCM-SHA384, bits=256" > mproc: pony -> control : 43 IMSG_STAT_INCREMENT > smtp: 0x23bbf60: STATE_TLS -> STATE_HELO > imsg: control <- pony: IMSG_STAT_INCREMENT (len=43) > ramstat: increment: smtp.tls > ramstat: smtp.tls (0x9fc641): 0 -> 1 > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=21 ob=0> > smtp: 0x23bbf60: <<< EHLO [192.168.50.1] > filter: new query QUERY_HELO > filter: filter_drain_query > 89080c5241573d1b[QUERY_HELO=[192.168.50.1],filter_session@0x23bbba0[datalen=0,eom=(nil),ofile=(nil)]] > filter: filter_end_query > 89080c5241573d1b[QUERY_HELO=[192.168.50.1],filter_session@0x23bbba0[datalen=0,eom=(nil),ofile=(nil)]] > filter: query 89080c5241573d1b done: status=FILTER_OK code=0 response="(null)" > smtp: 0x23bbf60: STATE_HELO -> STATE_HELO > smtp: 0x23bbf60: >>> 250-mail.example.com Hello [192.168.50.1] > [192.168.50.1], pleased to meet you > smtp: 0x23bbf60: >>> 250-8BITMIME > smtp: 0x23bbf60: >>> 250-ENHANCEDSTATUSCODES > smtp: 0x23bbf60: >>> 250-SIZE 36700160 > smtp: 0x23bbf60: >>> 250-DSN > smtp: 0x23bbf60: >>> 250-AUTH PLAIN LOGIN > smtp: 0x23bbf60: >>> 250 HELP > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=33 ob=0> > smtp: 0x23bbf60: <<< AUTH PLAIN dGVzdAB0ZXN0AHRlc3Q= > smtp: 0x23bbf60: STATE_HELO -> STATE_AUTH_INIT > mproc: pony -> lka : 34 IMSG_SMTP_AUTHENTICATE > imsg: lka <- pony: IMSG_SMTP_AUTHENTICATE (len=34) > debug: lka: authenticating for <dynamic:0>:test > lookup: lookup "test" as CREDENTIALS in table static:<dynamic:0> -> 0 > mproc: lka -> pony : 14 IMSG_SMTP_AUTHENTICATE > imsg: pony <- lka: IMSG_SMTP_AUTHENTICATE (len=14) > 89080c4f60136a5e smtp event=authentication user=test result=permfail > smtp: timing-attack protection triggered, will defer answer for 94418 > microseconds > smtp: 0x23bbf60: >>> 535 Authentication failed > smtp-in: Failed command on session 89080c4f60136a5e: "AUTH PLAIN (...)" => > 535 Authentication failed > smtp: 0x23bbf60: STATE_AUTH_INIT -> STATE_HELO > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=29 ob=0> > smtp: 0x23bbf60: <<< AUTH PLAIN AHRlc3QAdGVzdA== > smtp: 0x23bbf60: STATE_HELO -> STATE_AUTH_INIT > mproc: pony -> lka : 34 IMSG_SMTP_AUTHENTICATE > imsg: lka <- pony: IMSG_SMTP_AUTHENTICATE (len=34) > debug: lka: authenticating for <dynamic:0>:test > lookup: lookup "test" as CREDENTIALS in table static:<dynamic:0> -> 0 > mproc: lka -> pony : 14 IMSG_SMTP_AUTHENTICATE > imsg: pony <- lka: IMSG_SMTP_AUTHENTICATE (len=14) > 89080c4f60136a5e smtp event=authentication user=test result=permfail > smtp: timing-attack protection triggered, will defer answer for 721976 > microseconds > smtp: 0x23bbf60: >>> 535 Authentication failed > smtp-in: Failed command on session 89080c4f60136a5e: "AUTH PLAIN (...)" => > 535 Authentication failed > smtp: 0x23bbf60: STATE_AUTH_INIT -> STATE_HELO > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=12 ob=0> > smtp: 0x23bbf60: <<< AUTH LOGIN > smtp: 0x23bbf60: STATE_HELO -> STATE_AUTH_USERNAME > smtp: 0x23bbf60: >>> 334 VXNlcm5hbWU6 > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=10 ob=0> > smtp: 0x23bbf60: <<< dGVzdA== > smtp: 0x23bbf60: STATE_AUTH_USERNAME -> STATE_AUTH_PASSWORD > smtp: 0x23bbf60: >>> 334 UGFzc3dvcmQ6 > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=10 ob=0> > smtp: 0x23bbf60: <<< dGVzdA== > mproc: pony -> lka : 34 IMSG_SMTP_AUTHENTICATE > imsg: lka <- pony: IMSG_SMTP_AUTHENTICATE (len=34) > debug: lka: authenticating for <dynamic:0>:test > lookup: lookup "test" as CREDENTIALS in table static:<dynamic:0> -> 0 > mproc: lka -> pony : 14 IMSG_SMTP_AUTHENTICATE > imsg: pony <- lka: IMSG_SMTP_AUTHENTICATE (len=14) > 89080c4f60136a5e smtp event=authentication user=test result=permfail > smtp: timing-attack protection triggered, will defer answer for 326218 > microseconds > smtp: 0x23bbf60: >>> 535 Authentication failed > smtp-in: Failed command on session 89080c4f60136a5e: "AUTH LOGIN (password)" > => 535 Authentication failed > smtp: 0x23bbf60: STATE_AUTH_PASSWORD -> STATE_HELO > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=12 ob=0> > smtp: 0x23bbf60: <<< AUTH LOGIN > smtp: 0x23bbf60: STATE_HELO -> STATE_AUTH_USERNAME > smtp: 0x23bbf60: >>> 334 VXNlcm5hbWU6 > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=10 ob=0> > smtp: 0x23bbf60: <<< dGVzdA== > smtp: 0x23bbf60: STATE_AUTH_USERNAME -> STATE_AUTH_PASSWORD > smtp: 0x23bbf60: >>> 334 UGFzc3dvcmQ6 > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=10 ob=0> > smtp: 0x23bbf60: <<< dGVzdA== > mproc: pony -> lka : 34 IMSG_SMTP_AUTHENTICATE > imsg: lka <- pony: IMSG_SMTP_AUTHENTICATE (len=34) > debug: lka: authenticating for <dynamic:0>:test > lookup: lookup "test" as CREDENTIALS in table static:<dynamic:0> -> 0 > mproc: lka -> pony : 14 IMSG_SMTP_AUTHENTICATE > imsg: pony <- lka: IMSG_SMTP_AUTHENTICATE (len=14) > 89080c4f60136a5e smtp event=authentication user=test result=permfail > smtp: timing-attack protection triggered, will defer answer for 808887 > microseconds > smtp: 0x23bbf60: >>> 535 Authentication failed > smtp-in: Failed command on session 89080c4f60136a5e: "AUTH LOGIN (password)" > => 535 Authentication failed > smtp: 0x23bbf60: STATE_AUTH_PASSWORD -> STATE_HELO > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=6 ob=0> > smtp: 0x23bbf60: <<< QUIT > smtp: 0x23bbf60: >>> 221 2.0.0: Bye > smtp: 0x23bbf60: STATE_HELO -> STATE_QUIT > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > 89080c4f60136a5e smtp event=closed reason=quit > debug: smtp: 0x23bbf60: deleting session: done > mproc: pony -> control : 43 IMSG_STAT_DECREMENT > mproc: pony -> control : 47 IMSG_STAT_DECREMENT > imsg: control <- pony: IMSG_STAT_DECREMENT (len=43) > ramstat: decrement: smtp.tls > ramstat: smtp.tls (0x9fc641): 1 -> 0 > imsg: control <- pony: IMSG_STAT_DECREMENT (len=47) > ramstat: decrement: smtp.session > ramstat: smtp.session (0x9fc641): 1 -> 0 > debug: smtp: new client on listener: 0x23ca250 > smtp: 0x23bbf60: connected to listener 0x23ca250 [hostname=mail.example.com, > port=25, tag=] > mproc: pony -> lka : 34 IMSG_SMTP_DNS_PTR > mproc: pony -> control : 47 IMSG_STAT_INCREMENT > mproc: pony -> control : 53 IMSG_STAT_INCREMENT > imsg: lka <- pony: IMSG_SMTP_DNS_PTR (len=34) > imsg: control <- pony: IMSG_STAT_INCREMENT (len=47) > ramstat: increment: smtp.session > ramstat: smtp.session (0x9fc641): 0 -> 1 > imsg: control <- pony: IMSG_STAT_INCREMENT (len=53) > ramstat: increment: smtp.session.inet4 > ramstat: smtp.session.inet4 (0x9fc641): 1 -> 2 > mproc: lka -> pony : 28 IMSG_SMTP_DNS_PTR > imsg: pony <- lka: IMSG_SMTP_DNS_PTR (len=28) > smtp: 0x23bbf60: STATE_NEW -> STATE_CONNECTED > 89080c53206010b1 smtp event=connected address=192.168.50.1 host=192.168.50.1 > filter: new query QUERY_CONNECT > filter: filter_drain_query 89080c54c5f8c4c4[QUERY_CONNECT=192.168.50.221 <-> > 192.168.50.1(192.168.50.1),filter_session@0x23c0e40[datalen=0,eom=(nil),ofile=(nil)]] > filter: filter_end_query 89080c54c5f8c4c4[QUERY_CONNECT=192.168.50.221 <-> > 192.168.50.1(192.168.50.1),filter_session@0x23c0e40[datalen=0,eom=(nil),ofile=(nil)]] > filter: query 89080c54c5f8c4c4 done: status=FILTER_OK code=0 response="(null)" > smtp: 0x23bbf60: >>> 220 mail.example.com ESMTP OpenSMTPD > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R ib=21 ob=0> > smtp: 0x23bbf60: <<< EHLO [192.168.50.1] > filter: new query QUERY_HELO > filter: filter_drain_query > 89080c55d1adf67a[QUERY_HELO=[192.168.50.1],filter_session@0x23c0e40[datalen=0,eom=(nil),ofile=(nil)]] > filter: filter_end_query > 89080c55d1adf67a[QUERY_HELO=[192.168.50.1],filter_session@0x23c0e40[datalen=0,eom=(nil),ofile=(nil)]] > filter: query 89080c55d1adf67a done: status=FILTER_OK code=0 response="(null)" > smtp: 0x23bbf60: STATE_CONNECTED -> STATE_HELO > smtp: 0x23bbf60: >>> 250-mail.example.com Hello [192.168.50.1] > [192.168.50.1], pleased to meet you > smtp: 0x23bbf60: >>> 250-8BITMIME > smtp: 0x23bbf60: >>> 250-ENHANCEDSTATUSCODES > smtp: 0x23bbf60: >>> 250-SIZE 36700160 > smtp: 0x23bbf60: >>> 250-DSN > smtp: 0x23bbf60: >>> 250-STARTTLS > smtp: 0x23bbf60: >>> 250 HELP > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R ib=10 ob=0> > smtp: 0x23bbf60: <<< STARTTLS > smtp: 0x23bbf60: >>> 220 2.0.0: Ready to start TLS > smtp: 0x23bbf60: STATE_HELO -> STATE_TLS > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W ib=0 ob=0> > mproc: pony -> lka : 80 IMSG_SMTP_TLS_INIT > imsg: lka <- pony: IMSG_SMTP_TLS_INIT (len=80) > debug: lka: looking up pki “mail.example.com" > mproc: lka -> pony : 1561 IMSG_SMTP_TLS_INIT > imsg: pony <- lka: IMSG_SMTP_TLS_INIT (len=1561) > debug: session_start_ssl: switching to SSL > debug: pony: rsae_priv_enc > mproc: pony -> ca : 117 IMSG_CA_PRIVENC (flush) > imsg: ca <- pony: IMSG_CA_PRIVENC (len=117) > mproc: ca -> pony : 279 IMSG_CA_PRIVENC > imsg: pony <- ca: IMSG_CA_PRIVENC (len=279) > smtp: 0x23bbf60: IO_TLSREADY <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > 89080c53206010b1 smtp event=starttls ciphers="version=TLSv1.2, > cipher=ECDHE-RSA-AES256-GCM-SHA384, bits=256" > mproc: pony -> control : 43 IMSG_STAT_INCREMENT > smtp: 0x23bbf60: STATE_TLS -> STATE_HELO > imsg: control <- pony: IMSG_STAT_INCREMENT (len=43) > ramstat: increment: smtp.tls > ramstat: smtp.tls (0x9fc641): 0 -> 1 > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=21 ob=0> > smtp: 0x23bbf60: <<< EHLO [192.168.50.1] > filter: new query QUERY_HELO > filter: filter_drain_query > 89080c565ceef4ba[QUERY_HELO=[192.168.50.1],filter_session@0x23c0e40[datalen=0,eom=(nil),ofile=(nil)]] > filter: filter_end_query > 89080c565ceef4ba[QUERY_HELO=[192.168.50.1],filter_session@0x23c0e40[datalen=0,eom=(nil),ofile=(nil)]] > filter: query 89080c565ceef4ba done: status=FILTER_OK code=0 response="(null)" > smtp: 0x23bbf60: STATE_HELO -> STATE_HELO > smtp: 0x23bbf60: >>> 250-mail.example.com Hello [192.168.50.1] > [192.168.50.1], pleased to meet you > smtp: 0x23bbf60: >>> 250-8BITMIME > smtp: 0x23bbf60: >>> 250-ENHANCEDSTATUSCODES > smtp: 0x23bbf60: >>> 250-SIZE 36700160 > smtp: 0x23bbf60: >>> 250-DSN > smtp: 0x23bbf60: >>> 250-AUTH PLAIN LOGIN > smtp: 0x23bbf60: >>> 250 HELP > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=33 ob=0> > smtp: 0x23bbf60: <<< AUTH PLAIN dGVzdAB0ZXN0AHRlc3Q= > smtp: 0x23bbf60: STATE_HELO -> STATE_AUTH_INIT > mproc: pony -> lka : 34 IMSG_SMTP_AUTHENTICATE > imsg: lka <- pony: IMSG_SMTP_AUTHENTICATE (len=34) > debug: lka: authenticating for <dynamic:0>:test > lookup: lookup "test" as CREDENTIALS in table static:<dynamic:0> -> 0 > mproc: lka -> pony : 14 IMSG_SMTP_AUTHENTICATE > imsg: pony <- lka: IMSG_SMTP_AUTHENTICATE (len=14) > 89080c53206010b1 smtp event=authentication user=test result=permfail > smtp: timing-attack protection triggered, will defer answer for 319717 > microseconds > smtp: 0x23bbf60: >>> 535 Authentication failed > smtp-in: Failed command on session 89080c53206010b1: "AUTH PLAIN (...)" => > 535 Authentication failed > smtp: 0x23bbf60: STATE_AUTH_INIT -> STATE_HELO > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=29 ob=0> > smtp: 0x23bbf60: <<< AUTH PLAIN AHRlc3QAdGVzdA== > smtp: 0x23bbf60: STATE_HELO -> STATE_AUTH_INIT > mproc: pony -> lka : 34 IMSG_SMTP_AUTHENTICATE > imsg: lka <- pony: IMSG_SMTP_AUTHENTICATE (len=34) > debug: lka: authenticating for <dynamic:0>:test > lookup: lookup "test" as CREDENTIALS in table static:<dynamic:0> -> 0 > mproc: lka -> pony : 14 IMSG_SMTP_AUTHENTICATE > imsg: pony <- lka: IMSG_SMTP_AUTHENTICATE (len=14) > 89080c53206010b1 smtp event=authentication user=test result=permfail > smtp: timing-attack protection triggered, will defer answer for 821413 > microseconds > smtp: 0x23bbf60: >>> 535 Authentication failed > smtp-in: Failed command on session 89080c53206010b1: "AUTH PLAIN (...)" => > 535 Authentication failed > smtp: 0x23bbf60: STATE_AUTH_INIT -> STATE_HELO > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=12 ob=0> > smtp: 0x23bbf60: <<< AUTH LOGIN > smtp: 0x23bbf60: STATE_HELO -> STATE_AUTH_USERNAME > smtp: 0x23bbf60: >>> 334 VXNlcm5hbWU6 > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=10 ob=0> > smtp: 0x23bbf60: <<< dGVzdA== > smtp: 0x23bbf60: STATE_AUTH_USERNAME -> STATE_AUTH_PASSWORD > smtp: 0x23bbf60: >>> 334 UGFzc3dvcmQ6 > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=10 ob=0> > smtp: 0x23bbf60: <<< dGVzdA== > mproc: pony -> lka : 34 IMSG_SMTP_AUTHENTICATE > imsg: lka <- pony: IMSG_SMTP_AUTHENTICATE (len=34) > debug: lka: authenticating for <dynamic:0>:test > lookup: lookup "test" as CREDENTIALS in table static:<dynamic:0> -> 0 > mproc: lka -> pony : 14 IMSG_SMTP_AUTHENTICATE > imsg: pony <- lka: IMSG_SMTP_AUTHENTICATE (len=14) > 89080c53206010b1 smtp event=authentication user=test result=permfail > smtp: timing-attack protection triggered, will defer answer for 858737 > microseconds > smtp: 0x23bbf60: >>> 535 Authentication failed > smtp-in: Failed command on session 89080c53206010b1: "AUTH LOGIN (password)" > => 535 Authentication failed > smtp: 0x23bbf60: STATE_AUTH_PASSWORD -> STATE_HELO > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=12 ob=0> > smtp: 0x23bbf60: <<< AUTH LOGIN > smtp: 0x23bbf60: STATE_HELO -> STATE_AUTH_USERNAME > smtp: 0x23bbf60: >>> 334 VXNlcm5hbWU6 > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=10 ob=0> > smtp: 0x23bbf60: <<< dGVzdA== > smtp: 0x23bbf60: STATE_AUTH_USERNAME -> STATE_AUTH_PASSWORD > smtp: 0x23bbf60: >>> 334 UGFzc3dvcmQ6 > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=10 ob=0> > smtp: 0x23bbf60: <<< dGVzdA== > mproc: pony -> lka : 34 IMSG_SMTP_AUTHENTICATE > imsg: lka <- pony: IMSG_SMTP_AUTHENTICATE (len=34) > debug: lka: authenticating for <dynamic:0>:test > lookup: lookup "test" as CREDENTIALS in table static:<dynamic:0> -> 0 > mproc: lka -> pony : 14 IMSG_SMTP_AUTHENTICATE > imsg: pony <- lka: IMSG_SMTP_AUTHENTICATE (len=14) > 89080c53206010b1 smtp event=authentication user=test result=permfail > smtp: timing-attack protection triggered, will defer answer for 853048 > microseconds > smtp: 0x23bbf60: >>> 535 Authentication failed > smtp-in: Failed command on session 89080c53206010b1: "AUTH LOGIN (password)" > => 535 Authentication failed > smtp: 0x23bbf60: STATE_AUTH_PASSWORD -> STATE_HELO > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > smtp: 0x23bbf60: IO_DATAIN <io:0x23bbfa8 fd=19 to=300000 fl=R > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=6 ob=0> > smtp: 0x23bbf60: <<< QUIT > smtp: 0x23bbf60: >>> 221 2.0.0: Bye > smtp: 0x23bbf60: STATE_HELO -> STATE_QUIT > smtp: 0x23bbf60: IO_LOWAT <io:0x23bbfa8 fd=19 to=300000 fl=W > ssl=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 ib=0 ob=0> > 89080c53206010b1 smtp event=closed reason=quit > debug: smtp: 0x23bbf60: deleting session: done > mproc: pony -> control : 43 IMSG_STAT_DECREMENT > mproc: pony -> control : 47 IMSG_STAT_DECREMENT > imsg: control <- pony: IMSG_STAT_DECREMENT (len=43) > ramstat: decrement: smtp.tls > ramstat: smtp.tls (0x9fc641): 1 -> 0 > imsg: control <- pony: IMSG_STAT_DECREMENT (len=47) > ramstat: decrement: smtp.session > ramstat: smtp.session (0x9fc641): 1 -> 0 > — smtpd -dv -T all — > > > > -- > You received this mail because you are subscribed to [email protected] > To unsubscribe, send a mail to: [email protected] > -- You received this mail because you are subscribed to [email protected] To unsubscribe, send a mail to: [email protected]
