On Sat, Sep 27, 2003, Dann Daggett wrote:

> > I still need to keep this short as long emails still a problem.
> > Tried setting MTU to 1450, still hangs on emails over 800 bytes.
> > Last lines in maillog is (DebugLevel 99):
> >   Sep 27 22:11:38 ns1 sm-mta[2513]: h8S5BKkL002513: <-- DATA
> >   Sep 27 22:11:38 ns1 sm-mta[2513]: h8S5BKkL002513: --- 354 Enter
> mail,
> >     end with "." on a line by itself
> > Only hangs when STARTTLS is used after AUTH LOGIN.
> > Same hang in both Netscape 7.1 and MS Outlook.
> > Seems like an OpenSSL issue??
> 
> Hmm, I set my eth0 MTU to 576 and the longer emails via SSL get
> through now.
> Of course, that doesn't mean it's not an openssl problem, but it's
> sure looking unlikely, and more likely a sendmail-8.12.10 problem.

Very unlikely...

> I'll post this all to the sendmail newsgroup as well. I'm not going to
> be to thrilled to run my MTU as 576 however, but if I need to, perhaps
> I can just set that on a virutal interface like eth0:1 and only slow
> down email and not the rest of my net services.
> 
> Does anyone have any idea as to why STARTTLS based email breaks on
> MTU=1500 yet non STARTTLS email doesn't?

sendmail calls SSL_read(), SSL_write() for I/O if TLS is active.
Unless there are some settings that influence OpenSSLs network I/O
behaviour and depend on the MTU, it is very unlikely that sendmail
is at fault.

You can use openssl s_server/s_client to transfer some larger
data and see how it behaves.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to