Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Postfix and TLS timeing out when connecting
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
qubix
Tux's lil' helper
Tux's lil' helper


Joined: 22 Sep 2003
Posts: 144
Location: Warsaw/Poland

PostPosted: Wed Sep 21, 2016 2:15 pm    Post subject: Postfix and TLS timeing out when connecting Reply with quote

Hi!

I'm running a postfix server on Gentoo since, well check this out :]
Code:

# head -n 2 /var/log/emerge.log
1074935127: Started emerge on: Jan 24, 2004 09:05:27
1074935127:  *** emerge  sync


I've got a mail server here, that serves a small company (less than 100 users). We have never had any problems with getting and sending mail, but it turned out that mail servers of a company that we do business with drops connections when trying to send emails to us. We can send and receive from google, all the rest of the world. We can even send emails to them, but please check this out:

Code:

Sep 21 15:03:38 batou-xen postfix/smtpd[8994]: connect from nXXXb.com[XXX]
Sep 21 15:08:39 batou-xen postfix/smtpd[8994]: SSL_accept error from nXXXb.com[XXX]: Connection timed out
Sep 21 15:08:40 batou-xen postfix/smtpd[8994]: lost connection after STARTTLS from nXXXb.com[XXX]
Sep 21 15:08:40 batou-xen postfix/smtpd[8994]: disconnect from nXXXb.com[XXX] ehlo=1 starttls=0/1 commands=1/2


it drops the connection after 5 minutes. The timeouts I have look like this:
Code:

# grep time /etc/postfix/main.cf
smtpd_tls_session_cache_timeout = 3600s
maximal_queue_lifetime=2d
smtp_starttls_timeout = 600s
smtpd_starttls_timeout = 600s
smtp_tls_session_cache_timeout = 3600s


What should I look at? What to search for? Where should I even start?
_________________
qubix
Back to top
View user's profile Send private message
Ant P.
Watchman
Watchman


Joined: 18 Apr 2009
Posts: 5593

PostPosted: Wed Sep 21, 2016 5:20 pm    Post subject: Reply with quote

Do you have any non-default SSL stuff in your config? Most SMTP servers on the internet are really stupid and won't talk to e.g. a TLS1.2 server, or one that requires SSL at all...
Back to top
View user's profile Send private message
qubix
Tux's lil' helper
Tux's lil' helper


Joined: 22 Sep 2003
Posts: 144
Location: Warsaw/Poland

PostPosted: Thu Sep 22, 2016 9:31 am    Post subject: Reply with quote

Funny thing, the server started pushing mails to me with TLS 1.2 without any issues about 14 hours ago. Either it didn't like the greylists I have or they might have changed something.

Thanks for keeping me up in the moment of doubt :)
_________________
qubix
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum