Re: Segfaults libpcre in cleanup

2020-05-12 Thread Tobi
Hi as usual: thanks to Wietse :-) Adding the info rule to the pcre maps solved more than expected. After adding the info rule postfix cleanup did not segfault anymore and the mail could be accepted --> we have the source now. From what I see that is a massively oversized mime part header. I count

Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-12 Thread Tobi
Hi Am 12.05.20 um 11:27 schrieb Jaroslaw Rafa: > If > somedomain.com sends spam, you won't automatically classify all other .com > domains as spam. So why do it for eu.org? because .com is a real TLD whereas eu.org is a pseudo TLD. You won't see user@com in mail but u...@eu.org My 5 cents: never

Re: "SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-12 Thread Viktor Dukhovni
On Tue, May 12, 2020 at 08:59:15PM -0700, Alexander Vasarab wrote: > On 12/05/20 23:27 -0400, Viktor Dukhovni wrote: > >Once again out of the blue, a lost connection. The SMTP server is > >trying to read the next command after sending "RCPT TO" and encounters > >an EOF condition, for no apparent

Re: "SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-12 Thread Viktor Dukhovni
On Tue, May 12, 2020 at 07:31:02PM -0700, Alexander Vasarab wrote: > I wish I could offer an interpretation, but I'm ignorant to the arcana > that's on full display in this log. > May 12 19:04:06 vasaconsulting postfix/smtpd[3301]: > [ scrubbed>]: 250 2.1.5 Ok > May 12 19:04:06 vasaconsulting pos

Re: "SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-12 Thread Alexander Vasarab
On 12/05/20 21:07 -0400, Viktor Dukhovni wrote: At this point, clone your submission service onto port 588, and configure that copy with "smtpd -vvv" + all the other options. Then use your client to connect to port 588, and there should now be voluminous logging from the Postfix I/O layer (events

Re: "SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-12 Thread Viktor Dukhovni
On Tue, May 12, 2020 at 03:08:16PM -0700, Alexander Vasarab wrote: > May 12 14:27:22 vasaconsulting postfix/smtpd[3482]: > [ scrubbed>]: 250 2.1.0 Ok > May 12 14:27:22 vasaconsulting postfix/smtpd[3482]: watchdog_pat: > 0x55bec82e41e0 > May 12 14:27:22 vasaconsulting postfix/smtpd[3482]: < [ scru

Re: "SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-12 Thread Alexander Vasarab
On 12/05/20 05:40 -0400, Viktor Dukhovni wrote: Indeed the server slams the TCP socket closed after receiving the client's RCPT command. Unclear why. You might try debug_peer_list next, to see whether the server can log enough cleartext traffic to expose the SMTP traffic inside TLS. Thanks. U

Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-12 Thread Gerald Galster
> What is a valid rDNS? How is it set? when you open an address in your browser a (forward) dns lookup will be initiated to get the server's ip address. A reverse lookup (rDNS) is the opposite. You query an ip address and get a fully qualified domainname back. Mailservers must have a matching

Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-12 Thread Ranjan Maitra
On Tue, 12 May 2020 08:14:21 -0600 "@lbutlr" wrote: > On 11 May 2020, at 04:24, Jaroslaw Rafa wrote: > > Someone told me… that Google is more likely to classify email from small > > senders as spam if they are sent via IPv6, and less likely if they are sent > > via IPv4. > > Short of Google pu

Re: "SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-12 Thread Andreas Schamanek
FWIW: On Mon, 11 May 2020, at 21:17, Alexander Vasarab wrote: When I send mail, it fails the first time, and then as long as I immediately resend, it succeeds (over TLS, thankfully). I have recently come along this very same pattern when using command line tools like curl or lynx to access h

Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-12 Thread @lbutlr
On 11 May 2020, at 04:24, Jaroslaw Rafa wrote: > Someone told me… that Google is more likely to classify email from small > senders as spam if they are sent via IPv6, and less likely if they are sent > via IPv4. Short of Google publishing this information, I doubt that anyone knows this, and s

Re: Segfaults libpcre in cleanup

2020-05-12 Thread Wietse Venema
Tobi: > Hi list > > we have the very rare problem that cleanup "triggers" segfaults in > libpcre. We're currently running postfix 3.5.1 but had the issue before > updating (with postfix 3.4.4) as well. OS is a Centos7 with latest updates. > > > May 12 14:36:14 XXX kernel: cleanup[23927]: segfault

Segfaults libpcre in cleanup

2020-05-12 Thread Tobi
Hi list we have the very rare problem that cleanup "triggers" segfaults in libpcre. We're currently running postfix 3.5.1 but had the issue before updating (with postfix 3.4.4) as well. OS is a Centos7 with latest updates. > May 12 14:36:14 XXX kernel: cleanup[23927]: segfault at 7ffc5118ef78 > i

Re: explicit shlib_directory in main.cf

2020-05-12 Thread Maxim Nikulin
Wietse Venema: > Maxim Nikulin: >> of shared libraries. If shlib_directory were absent in main.cf >> and all programs were getting the value from postconf instead of >> reading main.cf directly than package upgrades would be smooth. >> Such way is not viable since there are installations >> with ex

Re: "SSL_Shutdown:shutdown while in init" while sending and receiving

2020-05-12 Thread Viktor Dukhovni
On Mon, May 11, 2020 at 09:17:16PM -0700, Alexander Vasarab wrote: > On 11/05/20 23:35 -0400, Viktor Dukhovni wrote: > >Attaching it is fine, if you're willing to disclose the IP addresses and > >hostnames of the two servers. > > Okay, I've attached two files; the PCAP and the postfix log. Indee

Re: Postfix "IPv6-only" - experience/recommendation question

2020-05-12 Thread Jaroslaw Rafa
Dnia 11.05.2020 o godz. 15:36:47 Curtis Villamizar pisze: > > I've had no problem with google dropping my email as spam in years. > AOL and MSN (and friends, live, outlook, hotmail) sometimes, but > resolved. Helps to have rDNS on your IPv6 and SPF and DKIM signed and > all other things in place.