Hi
Having a low-volume server and qpsmtp on top of that affords me the
privilege of studying my logs quite closely.
I have noticed that I get connections from a number of hosts that are
unknown to me (so there is a high probability that they are spammers)
where the connection ends with a failure to negotiate TLS.
SSL accept attempt failederror:1408A0C1:SSL
routines:SSL3_GET_CLIENT_HELLO:no shared cipher
TLS failed: Could not create SSL socket: at ./plugins/tls line 85,
<STDIN> line 2.
Plugin tls, hook unrecognized_command returned DENY, TLS Negotiation
Failed
Ar they trying to exploit a flaw? Do I have a misconfiguration?
TLS works fine from home and I get mail over TLS from my university
too, for example.
Does anyone have a hint as to what is going on?
-Johan
PS: qpsmtpd is really (almost) too easy to toy around with -- but I
find myself tinkering with the existing plugins a lot. I've added
setting $self->connection->notes('authuser',$user); in my
authcheckpassword plugin, and spamassassin for example isn't run when
this is set; qmail-queue will add hashcash headers if it _is_ set to
my userid [that should definitely be a plugin of its own] and mail
that's not from me can't have more than 2 recipients -- if it does, I
bounce it.
