Wietse Venema <wie...@porcupine.org> wrote:
> Michael Grimm:
>> Wietse Venema <wie...@porcupine.org> wrote:
>>> Viktor Dukhovni:

>>>> That looks like a TLS client HELLO.  Perhaps the client is misconfigured 
>>>> and using
>>>> wrapper mode on port 25 instead of 465...
>>> 
>>> It should not matter. postscreen is designed to handle random garbage.
>>> 
>>> If you could test withg Postfix 3.6 then that would help to narrow
>>> things down a bit.
>> 
>> Just to understand this correctly. Do you want me to downgrade to 3.6.6?
>> 
>> If so, yes I could do so. But that will take me some time, because I haven't 
>> compiled from source for some time now.
>> 
> 
> You have already mentined that the problem started after you
> updated from 3.6 to 3.7.

Yes, postfix 3.6 didn't trigger my problem. 

But I wonder, if that the simultaneous upgrade of the openssl package might be 
the cause of postscreen's dying after that "TLS random garbage" problem? See, 
from another mail of mine:

| 2022-03-17 changes in jail mail:
|
|       -openssl-1.1.1m_2,1 TLSv1.3 capable SSL and crypto library
|       +openssl-1.1.1n,1 TLSv1.3 capable SSL and crypto library
|       +pcre2-10.39 Perl Compatible Regular Expressions library, version 2
|       -postfix-3.6.3,1 Secure alternative to widely-used Sendmail
|       +postfix-3.7.0_1,1 Secure alternative to widely-used Sendmail

Please let me know, if there is anything I can do to investigate from my end?

Thanks in advance and with kind regards,
Michael

Reply via email to