Re: [exim] TLS error in incoming emails from *.outlook.com

Góra strony
Delete this message
Reply to this message
Autor: Kirill Miazine
Data:  
Dla: exim-users
Temat: Re: [exim] TLS error in incoming emails from *.outlook.com
I'm having another issue with *.outlook.com, please see below. I don't
mean to hijack the thread, but maybe report will help tracking down the
issue.

* Andreas Bauer via Exim-users [2017-11-27 13:30]:
> Hello all,
>
> we have a well configured mail server with exi 4.89 on Debian 9, and
> use a LetsEncrypt certificate for SMTP with STARTTLS on port 25 as
> well as SMTPS on port 465.
>
> Everything works well, except:
>
> 2017-11-27 13:22:55 TLS error on connection from
> mail-oln040092070016.outbound.protection.outlook.com
> (EUR03-AM5-obe.outbound.protection.outlook.com) [40.92.70.16] (send):
> The specified session has been invalidated for some reason.
> 2017-11-27 13:23:46 1eJILV-0001Gg-K3 TLS error on connection from
> mail-oln040092071027.outbound.protection.outlook.com
> (EUR03-DB5-obe.outbound.protection.outlook.com) [40.92.71.27] (recv):
> Error in the pull function.


Mine are different, but I don't know if they are related.

Nov 25 18:03:17 puffy exim[17107]: SSL_write: (from mail-oln040092005061.outbound.protection.outlook.com (NAM02-SN1-obe.outbound.protection.outlook.com) [40.92.5.61]) syscall: Broken pipe
Nov 27 10:36:28 puffy exim[28563]: SSL_write: (from mail-oln040092066037.outbound.protection.outlook.com (EUR01-VE1-obe.outbound.protection.outlook.com) [40.92.66.37]) syscall: Broken pipe
Nov 27 15:26:50 puffy exim[88515]: SSL_write: (from mail-ve1eur01on0073.outbound.protection.outlook.com (EUR01-VE1-obe.outbound.protection.outlook.com) [104.47.1.73]) syscall: Broken pipe

I haven't had time to debug this further...

System is running OpenBSD 6.2 with LibreSSL.

> It seems only this specific server will fail to connect with TLS with
> "Error in the pull function". This is the only occasion where we see
> this message, everything else works fine.
>
> Does someone have an idea how to troubleshoot this, or even how to
> work around this?
>
> It seems the remote mails server does not back down and tries since
> days (!) to deliver this message and fails every 5 minutes.
>
> Duh!
>
> Andreas
>
>
> --
> ## List details at https://lists.exim.org/mailman/listinfo/exim-users
> ## Exim details at http://www.exim.org/
> ## Please use the Wiki with this list - http://wiki.exim.org/


-- 
    -- Kirill Miazine <km@???>