While troubleshooting a delivery issue, I am seeing a pattern in my
mail server logs of SSL connection reset messages when receiving
messages from *.outbound.protection.outlook.com. The following is
exigrep output for one particular message:
2014-01-10 21:53:45 SSL_write: (from
mail-by2lp0241.outbound.protection.outlook.com
(na01-by2-obe.outbound.protection.outlook.com) [207.46.163.241])
syscall: Connection reset by peer
2014-01-10 21:53:43 1W1k1O-0003XV-9Z
H=mail-by2lp0241.outbound.protection.outlook.com
(na01-by2-obe.outbound.protection.outlook.com) [207.46.163.241]
Warning: SPF PASS (pass) to m.ivenue.com: domain of Right-WaySigns.com
designates 207.46.163.241 as permitted sender
2014-01-10 21:53:45 1W1k1O-0003XV-9Z <= RTyler@???
H=mail-by2lp0241.outbound.protection.outlook.com
(na01-by2-obe.outbound.protection.outlook.com) [207.46.163.241]
P=esmtps X=TLSv1:AES128-SHA:128 S=27610
id=6fc5548f27984182912489b936c13755@???
2014-01-10 21:53:45 1W1k1O-0003XV-9Z =>
/netapp3/mail/maildirs/e/x/a/example.com/pat/Maildir/
<pat@???> P=<RTyler@???> R=virtual_user
T=address_directory
2014-01-10 21:53:45 1W1k1O-0003XV-9Z Completed
If you look at the timestamps, the SSL_write message is logged at the
end of the message, so I suspect this is just closing down the socket.
But the message tends to indicate an disorderly shutdown. I've not
captured a session yet to see if the remote is not sending QUIT, or if
it is not waiting for the response to the QUIT.
Anybody else seeing this?
...Todd
--
The total budget at all receivers for solving senders' problems is $0.
If you want them to accept your mail and manage it the way you want,
send it the way the spec says to. --John Levine
