Postfix 3.2.0
Jun 22 17:30:26 postfix-outbound/smtp[27125]: < 10.44.43.1[10.44.43.1]:25: 220
icarus.com ESMTP
Jun 22 17:30:26 postfix-outbound/smtp[27125]: > 10.44.43.1[10.44.43.1]:25: EHLO
cs-gw-25856.localdomain
Jun 22 17:30:26 postfix-outbound/smtp[27125]: < 10.44.43.1[10.44.43.1]:25:
250-icarus.com
Jun 22 17:30:26 postfix-outbound/smtp[27125]: < 10.44.43.1[10.44.43.1]:25:
250-SIZE 20480000
Jun 22 17:30:26 postfix-outbound/smtp[27125]: < 10.44.43.1[10.44.43.1]:25:
250-STARTTLS
Jun 22 17:30:26 postfix-outbound/smtp[27125]: < 10.44.43.1[10.44.43.1]:25:
250-AUTH LOGIN
Jun 22 17:30:26 postfix-outbound/smtp[27125]: < 10.44.43.1[10.44.43.1]:25: 250
HELP
Jun 22 17:30:26 postfix-outbound/smtp[27125]: server features: 0x1019 size
20480000
Jun 22 17:30:26 postfix-outbound/smtp[27125]: smtp_stream_setup: maxtime=300
enable_deadline=0
Jun 22 17:30:26 postfix-outbound/smtp[27125]: > 10.44.43.1[10.44.43.1]:25:
STARTTLS
Jun 22 17:30:26 postfix-outbound/smtp[27125]: < 10.44.43.1[10.44.43.1]:25: 220
Ready to start TLS
Jun 22 17:30:26 postfix-outbound/smtp[27125]: setting up TLS connection to
10.44.43.1[10.44.43.1]:25
Jun 22 17:30:26 postfix-outbound/smtp[27125]: 10.44.43.1[10.44.43.1]:25: TLS
cipher list "ALL:!aNULL:!EXP"
Jun 22 17:30:26 postfix-outbound/smtp[27125]: send attr request = seed
Jun 22 17:30:26 postfix-outbound/smtp[27125]: send attr size = 32
Jun 22 17:30:26 postfix-outbound/smtp[27125]: private/tlsmgr: wanted attribute:
status
Jun 22 17:30:26 postfix-outbound/smtp[27125]: input attribute name: status
Jun 22 17:30:26 postfix-outbound/smtp[27125]: input attribute value: 0
Jun 22 17:30:26 postfix-outbound/smtp[27125]: private/tlsmgr: wanted attribute:
seed
Jun 22 17:30:26 postfix-outbound/smtp[27125]: input attribute name: seed
Jun 22 17:30:26 postfix-outbound/smtp[27125]: input attribute value:
/Z4GA8CHRNRAq8X7WI8ZFRldWBsJmdqiOcx3LSGD06A=
Jun 22 17:30:26 postfix-outbound/smtp[27125]: private/tlsmgr: wanted attribute:
(list terminator)
Jun 22 17:30:26 postfix-outbound/smtp[27125]: input attribute name: (end)
Jun 22 17:30:26 postfix-outbound/smtp[27125]: SSL_connect error to
10.44.43.1[10.44.43.1]:25: -1
Jun 22 17:30:26 postfix-outbound/smtp[27125]: warning: TLS library problem:
error:14077102:SSL routines:SSL23_GET_SERVER_HELLO:unsupported
protocol:s23_clnt.c:714:
Jun 22 17:30:26 postfix-outbound/smtp[27125]: connect to subsystem private/defer
Jun 22 17:30:26 postfix-outbound/smtp[27125]: send attr nrequest = 0
Jun 22 17:30:26 postfix-outbound/smtp[27125]: send attr flags = 0
Jun 22 17:30:26 postfix-outbound/smtp[27125]: send attr queue_id =
3wtnBB3Jr7z1Q67T
Jun 22 17:30:26 postfix-outbound/smtp[27125]: send attr original_recipient =
[email protected]
Jun 22 17:30:26 postfix-outbound/smtp[27125]: send attr recipient =
[email protected]
Jun 22 17:30:26 postfix-outbound/smtp[27125]: send attr offset = 691
Jun 22 17:30:26 postfix-outbound/smtp[27125]: send attr dsn_orig_rcpt =
rfc822;[email protected]
Jun 22 17:30:26 postfix-outbound/smtp[27125]: send attr notify_flags = 0
Jun 22 17:30:26 postfix-outbound/smtp[27125]: send attr status = 4.7.5
Jun 22 17:30:26 postfix-outbound/smtp[27125]: send attr diag_type =
Jun 22 17:30:26 postfix-outbound/smtp[27125]: send attr diag_text =
Jun 22 17:30:26 postfix-outbound/smtp[27125]: send attr mta_type =
Jun 22 17:30:26 postfix-outbound/smtp[27125]: send attr mta_mname =
Jun 22 17:30:26 postfix-outbound/smtp[27125]: send attr action = delayed
Jun 22 17:30:26 postfix-outbound/smtp[27125]: send attr reason = Cannot start
TLS: handshake failure
Jun 22 17:30:26 postfix-outbound/smtp[27125]: private/defer socket: wanted
attribute: status
Jun 22 17:30:26 postfix-outbound/smtp[27125]: input attribute name: status
Jun 22 17:30:26 postfix-outbound/smtp[27125]: input attribute value: 0
Jun 22 17:30:26 postfix-outbound/smtp[27125]: private/defer socket: wanted
attribute: (list terminator)
Jun 22 17:30:26 postfix-outbound/smtp[27125]: input attribute name: (end)
Jun 22 17:30:26 postfix-outbound/smtp[27125]: 3wtnBB3Jr7z1Q67T:
to=<[email protected]>, relay=10.44.43.1[10.44.43.1]:25, delay=0.08,
delays=0.02/0.03/0.03/0, dsn=4.7.5, status=deferred (Cannot start TLS:
handshake failure)
It reaches
if (PLAINTEXT_FALLBACK_OK_AFTER_STARTTLS_FAILURE)
RETRY_AS_PLAINTEXT;
inside smtp_start_tls(), but the condition is false the first time because of
the "PREACTIVE_DELAY >= var_min_backoff_time" clause of
PLAINTEXT_FALLBACK_OK_AFTER_STARTTLS_FAILURE.
Nik
-----Original Message-----
From: [email protected] [mailto:[email protected]]
On Behalf Of Wietse Venema
Sent: 22 June 2017 20:17
To: Postfix users <[email protected]>
Subject: Re: Message not retransmitted immediately after opportunistic TLS
handshake failure
Nik Kostaras:
> As expected the TLS handshake fails, but Postfix moves the message to
> deferred queue rather than retrying immediately in plaintext.
What is the error message? The kind of error determines whether or not Postfix
will immediately fall back to plaintext immediately.
The Postfix version may matter as well.
Wietse
----------------------------------------------------------------------------------------------
Message Processed by the Clearswift V4 Engineering Dogfood Secure Email Gateway
This e-mail and any files transmitted with it are strictly confidential, may be
privileged and are intended only for use by the addressee unless otherwise
indicated. If you are not the intended recipient any use, dissemination,
printing or copying is strictly prohibited and may be unlawful. If you have
received this e-mail in error, please delete it immediately and contact the
sender as soon as possible. Clearswift cannot be held liable for delays in
receipt of an email or any errors in its content. Clearswift accepts no
responsibility once an e-mail and any attachments leave us. Unless expressly
stated, opinions in this message are those of the individual sender and not of
Clearswift.
This email message has been inspected by Clearswift for inappropriate content
and security threats.
To find out more about Clearswift’s solutions please visit www.clearswift.com
