Error: TLS not available due to local problem

2010-01-27 Thread Vegard Svanberg
Hi list,

I'm receiving several thousand errors per day from Postfix. The error is
454 4.7.0 TLS not available due to local problem (see below). 

TLS is working, and has been for a long time. I've verified this by
telnet and running STARTTLS. But it seems to stop working from time to
time, and I suspect it happens when the server has a lot to do (read:
being flooded by spam). I set tls_random_source to dev:/dev/urandom to
rule out any entropy-related problems, but no go. 

The error messages give me nothing to go on, and the mail logs don't
give any clues either.

This is Postfix 2.5.5-1.1 (from Debian Lenny) on x86-64.

 Out: 220 XX ESMTP
 In:  EHLO ne.jp
 Out: 250-XX
 Out: 250-PIPELINING
 Out: 250-SIZE
 Out: 250-VRFY
 Out: 250-ETRN
 Out: 250-STARTTLS
 Out: 250-AUTH PLAIN LOGIN
 Out: 250-ENHANCEDSTATUSCODES
 Out: 250-8BITMIME
 Out: 250 DSN
 In:  STARTTLS
 Out: 454 4.7.0 TLS not available due to local problem
 In:  MAIL FROM:adyybiwut2...@ne.jp SIZE=3282
 Out: 250 2.1.0 Ok
 In:  RCPT TO:axesli...@mydomain
 Out: 450 4.1.8 adyybiwut2...@ne.jp: Sender address rejected: Domain not
 found
 In:  QUIT
 Out: 221 2.0.0 Bye

Any ideas? Thanks in advance. 


-- 
Vegard Svanberg veg...@svanberg.no [*tak...@irc (EFnet)]



Re: Error: TLS not available due to local problem

2010-01-27 Thread Eero Volotinen
 Any ideas? Thanks in advance.

 Look at logs. Out: 450 4.1.8 adyybiwut2...@ne.jp: Sender address
 rejected: Domain not looks like DNS problem


Not also that you can tune postfix log level to debug out this kind of problem.

--
Eero


Re: Error: TLS not available due to local problem

2010-01-27 Thread Vegard Svanberg
* Eero Volotinen eero.voloti...@iki.fi [2010-01-27 14:41]:

 Look at logs. Out: 450 4.1.8 adyybiwut2...@ne.jp: Sender address
 rejected: Domain not looks like DNS problem

Unless half of Norway's DNS servers are bad, ne.jp doesn't exist. 

:)

-- 
Vegard Svanberg veg...@svanberg.no [*tak...@irc (EFnet)]



Re: Error: TLS not available due to local problem

2010-01-27 Thread Eero Volotinen
2010/1/27 Vegard Svanberg veg...@svanberg.no:
 * Eero Volotinen eero.voloti...@iki.fi [2010-01-27 14:41]:

 Look at logs. Out: 450 4.1.8 adyybiwut2...@ne.jp: Sender address
 rejected: Domain not looks like DNS problem

 Unless half of Norway's DNS servers are bad, ne.jp doesn't exist.

 :)

 --
 Vegard Svanberg veg...@svanberg.no [*tak...@irc (EFnet)]


to debug tls/ssl related problem, please post unedited postconf -n to
mailinglist.

--
Eero


Re: Error: TLS not available due to local problem

2010-01-27 Thread Wietse Venema
Vegard Svanberg:
 Hi list,
 
 I'm receiving several thousand errors per day from Postfix. The error is
 454 4.7.0 TLS not available due to local problem (see below). 

Look in your LOGFILE. 

Postfix does not reveal the details of this problem to the SMTP client.

http://www.postfix.org/DEBUG_README.html#logging

Wietse