Re: [exim] A TLS fatal alert has been received.: Insufficient security

2019-06-10 Thread Thomas Krichel via Exim-users
Viktor Dukhovni via Exim-users writes > The gmx.de MTAs support DANE in both directions. Does your MX host > have published DANE TLSA records? Are they correct? Is your > certificate still valid, or expired? ... I have an issue that has a similar feel to it. It's with a host of Germanic

[exim] just been hacked, could be CVE-2019-10149?

2019-06-10 Thread Calum Mackay via Exim-users
hi all, My mail system has just been hacked; it's running Debian unstable exim 4.91-9 Could it be CVE-2019-10149? I don't see any reports of active exploits yet. The reasons I suspect exim involvement: • starting today, every 5 mins getting frozen messages: The following address(es) have

Re: [exim] A TLS fatal alert has been received.: Insufficient security

2019-06-10 Thread Viktor Dukhovni via Exim-users
On Mon, Jun 10, 2019 at 05:51:42PM +0200, Arno Thuber via Exim-users wrote: > The thing is, that it as far as I can see only happens when receiving > messages from the German mail provider GMX. The gmx.de MTAs support DANE in both directions. Does your MX host have published DANE TLSA records?

Re: [exim] A TLS fatal alert has been received.: Insufficient security

2019-06-10 Thread Jeremy Harris via Exim-users
On 10/06/2019 16:51, Arno Thuber via Exim-users wrote: > A TLS > fatal alert has been received.: Insufficient security You might need to ask on a gnutls mailinglist about this. -- Cheers, Jeremy -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at

[exim] A TLS fatal alert has been received.: Insufficient security

2019-06-10 Thread Arno Thuber via Exim-users
Hello, today I suddenly started to see log lines telling me "A TLS fatal alert has been received.: Insufficient security". The thing is, that it as far as I can see only happens when receiving messages from the German mail provider GMX. I can send messages to them, I also can send mails from GMX

Re: [exim] TLS with gmail started failing

2019-06-10 Thread Jeremy Harris via Exim-users
On 10/06/2019 11:12, Richard Jones via Exim-users wrote: > I can't help with your problem, but could I ask specifically how you got > such detailed logging and where it was logged? exim -d-all+tls stderr -- Cheers, Jeremy -- ## List details at

Re: [exim] TLS with gmail started failing

2019-06-10 Thread Richard Jones via Exim-users
On Jun 07, Exim Users wrote > With more debug logs enabled, I see > 14:32:02 5341 74.125.141.26 in hosts_avoid_tls? no (end of list) > 14:32:02 5341 SMTP>> STARTTLS > 14:32:02 5341 read response data: size=30 > 14:32:02 5341 SMTP<< 220 2.0.0 Ready to start TLS > 14:32:02 5341