Postfix/smtp/smtpd

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
14 messages Options
Reply | Threaded
Open this post in threaded view
|

Postfix/smtp/smtpd

Den1
Hello everybody,

I was wondering if anybody could advise please, on what does this log entry
mean postfix/smtp/smtpd? I know postfix/smtp is to send mails out to the
world, postfix/smtpd stands for daemon that rules out deliveries for
incoming mail. What about postfix/smtp/smtpd? Is it something in between
incoming and outgoing messages? Does it perhaps mean that some clients try
to connect to my 465 port? If that is the case then do they try to send or
receive here? Would appreciate any pointers from experts. Many thanks in
advance!



--
Sent from: http://postfix.1071664.n5.nabble.com/Postfix-Users-f2.html
Reply | Threaded
Open this post in threaded view
|

Re: Postfix/smtp/smtpd

Wietse Venema
Den1:
> Hello everybody,
>
> I was wondering if anybody could advise please, on what does this log entry
> mean postfix/smtp/smtpd? I know postfix/smtp is to send mails out to the

postfix = syslog_name setting in main.cf
smtp = name of the master.cf entry
smtpd = name of the executable file.

Examples that differ only in the name of the master.cf entry:
postfix/smtp/smtpd
postfix/smtps/smtpd
postfix/submission/smtpd

More examples that differ only in the name of the master.cf entry:
postfix/smtp/smtp
postfix/relay/smtp

Without some clue about the master.cf entry, troubleshooting
can be harder than it needs to be.

        Wietse
Reply | Threaded
Open this post in threaded view
|

Re: Postfix/smtp/smtpd

Den1
Wietse Venema wrote

> Den1:
>> Hello everybody,
>>
>> I was wondering if anybody could advise please, on what does this log
>> entry
>> mean postfix/smtp/smtpd? I know postfix/smtp is to send mails out to the
>
> postfix = syslog_name setting in main.cf
> smtp = name of the master.cf entry
> smtpd = name of the executable file.
>
> Examples that differ only in the name of the master.cf entry:
> postfix/smtp/smtpd
> postfix/smtps/smtpd
> postfix/submission/smtpd
>
> More examples that differ only in the name of the master.cf entry:
> postfix/smtp/smtp
> postfix/relay/smtp
>
> Without some clue about the master.cf entry, troubleshooting
> can be harder than it needs to be.
>
> Wietse

Thank you so much for replying, Wietse. Appreciate.

Well, my master.cf looks like this. Hope it will help to throw some more
light upon what my postfix/smtp/smtpd log entry may mean. Clients trying to
login and send?

smtpd     pass  -       -       -       -       -       smtpd -o
content_filter=spamassassin
smtp      inet  n       -       -       -       1       postscreen
dnsblog   unix  -       -       -       -       0       dnsblog
tlsproxy  unix  -       -       -       -       0       tlsproxy
submission inet n       -       -       -       -       smtpd
  -o syslog_name=postfix/submission
  -o smtpd_tls_security_level=encrypt
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  -o milter_macro_daemon_name=ORIGINATING
smtps     inet  n       -       -       -       -       smtpd
  -o syslog_name=postfix/smtps
  -o smtpd_tls_wrappermode=yes
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  -o milter_macro_daemon_name=ORIGINATING
pickup    fifo  n       -       -       60      1       pickup
          -o content_filter=
          -o receive_override_options=no_header_body_checks
cleanup   unix  n       -       -       -       0       cleanup
qmgr      fifo  n       -       n       300     1       qmgr
tlsmgr    unix  -       -       -       1000?   1       tlsmgr
rewrite   unix  -       -       -       -       -       trivial-rewrite
bounce    unix  -       -       -       -       0       bounce
defer     unix  -       -       -       -       0       bounce
trace     unix  -       -       -       -       0       bounce
verify    unix  -       -       -       -       1       verify
flush     unix  n       -       -       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
proxywrite unix -       -       n       -       1       proxymap
smtp      unix  -       -       -       -       -       smtp
relay     unix  -       -       -       -       -       smtp
showq     unix  n       -       -       -       -       showq
error     unix  -       -       -       -       -       error
retry     unix  -       -       -       -       -       error
discard   unix  -       -       -       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       -       -       -       lmtp
anvil     unix  -       -       -       -       1       anvil
scache    unix  -       -       -       -       1       scache
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
dovecot  unix  -       n       n       -       -       pipe
  flags=DRhu user=mmail:mmail argv=/usr/lib/dovecot/deliver -d ${recipient}
dovecot-spamass  unix  -       n       n       -       -       pipe
  flags=DRhu user=mmail:mmail argv=/usr/bin/spamc -u ${recipient} -e
/usr/lib/dovecot/deliver -d ${recipient}
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender
$recipient
scalemail-backend unix - n n - 2 pipe
  flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store
${nexthop} ${user} ${extension}
mailman   unix  -       n       n       -       -       pipe
  flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
  ${nexthop} ${user}
policy-spf  unix  -       n       n       -     -       spawn
   user=nobody argv=/usr/sbin/postfix-policyd-spf-perl
   policyd-spf-perl_time_limit = 3600
spamassassin unix -     n       n       -       -       pipe
   user=spamd argv=/usr/bin/spamc -f -e /usr/sbin/sendmail -oi -f ${sender}
${recipient}
procmail unix - n n - - pipe
   flags=DROhu user=mmail argv=/usr/bin/procmail -t -m USER=${user}
EXTENSION=${extension} NEXTHOP=${nexthop} /etc/postfix/procmailrc.common





--
Sent from: http://postfix.1071664.n5.nabble.com/Postfix-Users-f2.html
Reply | Threaded
Open this post in threaded view
|

Re: Postfix/smtp/smtpd

Wietse Venema
Den1:

> Wietse Venema wrote
> > Den1:
> >> Hello everybody,
> >>
> >> I was wondering if anybody could advise please, on what does this log
> >> entry
> >> mean postfix/smtp/smtpd? I know postfix/smtp is to send mails out to the
> >
> > postfix = syslog_name setting in main.cf
> > smtp = name of the master.cf entry
> > smtpd = name of the executable file.
> >
> > Examples that differ only in the name of the master.cf entry:
> > postfix/smtp/smtpd
> > postfix/smtps/smtpd
> > postfix/submission/smtpd
> >
> > More examples that differ only in the name of the master.cf entry:
> > postfix/smtp/smtp
> > postfix/relay/smtp
> >
> > Without some clue about the master.cf entry, troubleshooting
> > can be harder than it needs to be.
> >
> > Wietse
>
> Thank you so much for replying, Wietse. Appreciate.
>
> Well, my master.cf looks like this. Hope it will help to throw some more
> light upon what my postfix/smtp/smtpd log entry may mean. Clients trying to
> login and send?

No logfile record, no support.

        Wietse
Reply | Threaded
Open this post in threaded view
|

Re: Postfix/smtp/smtpd

Den1
Wietse Venema wrote

> Den1:
>> Wietse Venema wrote
>> > Den1:
>> >> Hello everybody,
>> >>
>> >> I was wondering if anybody could advise please, on what does this log
>> >> entry
>> >> mean postfix/smtp/smtpd? I know postfix/smtp is to send mails out to
>> the
>> >
>> > postfix = syslog_name setting in main.cf
>> > smtp = name of the master.cf entry
>> > smtpd = name of the executable file.
>> >
>> > Examples that differ only in the name of the master.cf entry:
>> > postfix/smtp/smtpd
>> > postfix/smtps/smtpd
>> > postfix/submission/smtpd
>> >
>> > More examples that differ only in the name of the master.cf entry:
>> > postfix/smtp/smtp
>> > postfix/relay/smtp
>> >
>> > Without some clue about the master.cf entry, troubleshooting
>> > can be harder than it needs to be.
>> >
>> > Wietse
>>
>> Thank you so much for replying, Wietse. Appreciate.
>>
>> Well, my master.cf looks like this. Hope it will help to throw some more
>> light upon what my postfix/smtp/smtpd log entry may mean. Clients trying
>> to
>> login and send?
>
> No logfile record, no support.
>
> Wietse

Here is an extract from the log. Thank you.

Mar 30 05:25:27  postfix/smtps/smtpd[4797]: connect from
scan-7.security.ipip.net[106.186.113.132]
Mar 30 05:25:27  postfix/smtps/smtpd[4797]: connect from
scan-7.security.ipip.net[106.186.113.132]
Mar 30 05:25:27  postfix/smtps/smtpd[4797]: connect from
scan-7.security.ipip.net[106.186.113.132]
Mar 30 05:25:29  postfix/smtps/smtpd[4797]: Anonymous TLS connection
established from scan-7.security.ipip.net[106.186.113.132]: TLSv1.2 with
cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)
Mar 30 05:25:29  postfix/smtps/smtpd[4797]: Anonymous TLS connection
established from scan-7.security.ipip.net[106.186.113.132]: TLSv1.2 with
cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)
Mar 30 05:25:29  postfix/smtps/smtpd[4797]: Anonymous TLS connection
established from scan-7.security.ipip.net[106.186.113.132]: TLSv1.2 with
cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)
Mar 30 05:25:32  postfix/smtps/smtpd[4797]: lost connection after CONNECT
from scan-7.security.ipip.net[106.186.113.132]
Mar 30 05:25:32  postfix/smtps/smtpd[4797]: disconnect from
scan-7.security.ipip.net[106.186.113.132]
Mar 30 05:25:32  postfix/smtps/smtpd[4797]: lost connection after CONNECT
from scan-7.security.ipip.net[106.186.113.132]
Mar 30 05:25:32  postfix/smtps/smtpd[4797]: disconnect from
scan-7.security.ipip.net[106.186.113.132]
Mar 30 05:25:32  postfix/smtps/smtpd[4797]: lost connection after CONNECT
from scan-7.security.ipip.net[106.186.113.132]
Mar 30 05:25:32  postfix/smtps/smtpd[4797]: disconnect from
scan-7.security.ipip.net[106.186.113.132]

here is another one:

Mar 28 22:12:25  postfix/smtps/smtpd[5713]: warning: hostname
vps147579.trouble-free.net does not resolve to address 174.138.189.116: Name
or service not known
Mar 28 22:12:25  postfix/smtps/smtpd[5713]: connect from
unknown[174.138.189.116]
Mar 28 22:12:25  postfix/smtps/smtpd[5713]: SSL_accept error from
unknown[174.138.189.116]: lost connection
Mar 28 22:12:25  postfix/smtps/smtpd[5713]: lost connection after CONNECT
from unknown[174.138.189.116]
Mar 28 22:12:25  postfix/smtps/smtpd[5713]: disconnect from
unknown[174.138.189.116]
Mar 28 22:12:25  postfix/smtps/smtpd[5713]: warning: hostname
vps147579.trouble-free.net does not resolve to address 174.138.189.116: Name
or service not known
Mar 28 22:12:25  postfix/smtps/smtpd[5713]: connect from
unknown[174.138.189.116]
Mar 28 22:12:25  postfix/smtps/smtpd[5713]: SSL_accept error from
unknown[174.138.189.116]: lost connection
Mar 28 22:12:25  postfix/smtps/smtpd[5713]: lost connection after CONNECT
from unknown[174.138.189.116]
Mar 28 22:12:25  postfix/smtps/smtpd[5713]: disconnect from
unknown[174.138.189.116]
Mar 28 22:12:25  postfix/smtps/smtpd[5713]: warning: hostname
vps147579.trouble-free.net does not resolve to address 174.138.189.116: Name
or service not known
Mar 28 22:12:25  postfix/smtps/smtpd[5713]: connect from
unknown[174.138.189.116]
Mar 28 22:12:25  postfix/smtps/smtpd[5713]: SSL_accept error from
unknown[174.138.189.116]: lost connection
Mar 28 22:12:25  postfix/smtps/smtpd[5713]: lost connection after CONNECT
from unknown[174.138.189.116]
Mar 28 22:12:25  postfix/smtps/smtpd[5713]: disconnect from
unknown[174.138.189.116]
Mar 28 22:12:26  postfix/smtps/smtpd[5713]: warning: hostname
vps147579.trouble-free.net does not resolve to address 174.138.189.116: Name
or service not known



--
Sent from: http://postfix.1071664.n5.nabble.com/Postfix-Users-f2.html
Reply | Threaded
Open this post in threaded view
|

Re: Postfix/smtp/smtpd

Wietse Venema
Den1:
> Here is an extract from the log. Thank you.
>
> Mar 30 05:25:27  postfix/smtps/smtpd[4797]: connect from
> scan-7.security.ipip.net[106.186.113.132]
> Mar 30 05:25:27  postfix/smtps/smtpd[4797]: connect from
> scan-7.security.ipip.net[106.186.113.132]
> Mar 30 05:25:27  postfix/smtps/smtpd[4797]: connect from
> scan-7.security.ipip.net[106.186.113.132]

Postfix does not support three concurrent connections to the same
SMTP server process, so that looks like a logging infrastrucure
that logs the same event three times to the same file.

> Mar 30 05:25:29  postfix/smtps/smtpd[4797]: Anonymous TLS connection
> established from scan-7.security.ipip.net[106.186.113.132]: TLSv1.2 with
> cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)
> Mar 30 05:25:29  postfix/smtps/smtpd[4797]: Anonymous TLS connection
> established from scan-7.security.ipip.net[106.186.113.132]: TLSv1.2 with
> cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)
> Mar 30 05:25:29  postfix/smtps/smtpd[4797]: Anonymous TLS connection
> established from scan-7.security.ipip.net[106.186.113.132]: TLSv1.2 with
> cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)

More logfile duplication.

> Mar 30 05:25:32  postfix/smtps/smtpd[4797]: lost connection after CONNECT
> from scan-7.security.ipip.net[106.186.113.132]
> Mar 30 05:25:32  postfix/smtps/smtpd[4797]: disconnect from
> scan-7.security.ipip.net[106.186.113.132]
> Mar 30 05:25:32  postfix/smtps/smtpd[4797]: lost connection after CONNECT
> from scan-7.security.ipip.net[106.186.113.132]
> Mar 30 05:25:32  postfix/smtps/smtpd[4797]: disconnect from
> scan-7.security.ipip.net[106.186.113.132]
> Mar 30 05:25:32  postfix/smtps/smtpd[4797]: lost connection after CONNECT
> from scan-7.security.ipip.net[106.186.113.132]
> Mar 30 05:25:32  postfix/smtps/smtpd[4797]: disconnect from
> scan-7.security.ipip.net[106.186.113.132]

More duplication.

Someone is scanning mail servers, for good or evil purposes.

> here is another one:
>
> Mar 28 22:12:25  postfix/smtps/smtpd[5713]: warning: hostname
> vps147579.trouble-free.net does not resolve to address 174.138.189.116: Name
> or service not known
> Mar 28 22:12:25  postfix/smtps/smtpd[5713]: connect from
> unknown[174.138.189.116]
> Mar 28 22:12:25  postfix/smtps/smtpd[5713]: SSL_accept error from
> unknown[174.138.189.116]: lost connection
> Mar 28 22:12:25  postfix/smtps/smtpd[5713]: lost connection after CONNECT
> from unknown[174.138.189.116]
> Mar 28 22:12:25  postfix/smtps/smtpd[5713]: disconnect from
> unknown[174.138.189.116]

Welcome to the Internet. If you have not looked at Postfix logs
before, then you may be surprised at the amount of noise.

        Wietse
Reply | Threaded
Open this post in threaded view
|

Re: Postfix/smtp/smtpd

Viktor Dukhovni


> On Apr 1, 2018, at 3:05 PM, Wietse Venema <[hidden email]> wrote:
>
>>
>> Mar 30 05:25:27  postfix/smtps/smtpd[4797]: connect from
>> scan-7.security.ipip.net[106.186.113.132]
>> Mar 30 05:25:27  postfix/smtps/smtpd[4797]: connect from
>> scan-7.security.ipip.net[106.186.113.132]
>> Mar 30 05:25:27  postfix/smtps/smtpd[4797]: connect from
>> scan-7.security.ipip.net[106.186.113.132]
>
> Postfix does not support three concurrent connections to the same
> SMTP server process, so that looks like a logging infrastrucure
> that logs the same event three times to the same file.

Or just the disconnect events not logged, or log data re-ordered.

--
        Viktor.

Reply | Threaded
Open this post in threaded view
|

Re: Postfix/smtp/smtpd

Wietse Venema
Viktor Dukhovni:

>
>
> > On Apr 1, 2018, at 3:05 PM, Wietse Venema <[hidden email]> wrote:
> >
> >>
> >> Mar 30 05:25:27  postfix/smtps/smtpd[4797]: connect from
> >> scan-7.security.ipip.net[106.186.113.132]
> >> Mar 30 05:25:27  postfix/smtps/smtpd[4797]: connect from
> >> scan-7.security.ipip.net[106.186.113.132]
> >> Mar 30 05:25:27  postfix/smtps/smtpd[4797]: connect from
> >> scan-7.security.ipip.net[106.186.113.132]
> >
> > Postfix does not support three concurrent connections to the same
> > SMTP server process, so that looks like a logging infrastrucure
> > that logs the same event three times to the same file.
>
> Or just the disconnect events not logged, or log data re-ordered.

The time stamps were distinct for connect, TLS handshake, and
disconnect. But it is possible that the poster omitted other handshake
and diconnect records between the ones that were posted.

        Wietse

Mar 30 05:25:27  postfix/smtps/smtpd[4797]: connect from scan-7.security.ipip.net[106.186.113.132]
Mar 30 05:25:27  postfix/smtps/smtpd[4797]: connect from scan-7.security.ipip.net[106.186.113.132]
Mar 30 05:25:27  postfix/smtps/smtpd[4797]: connect from scan-7.security.ipip.net[106.186.113.132]

Mar 30 05:25:29  postfix/smtps/smtpd[4797]: Anonymous TLS connection established from scan-7.security.ipip.net[106.186.113.132]: TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)
Mar 30 05:25:29  postfix/smtps/smtpd[4797]: Anonymous TLS connection established from scan-7.security.ipip.net[106.186.113.132]: TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)
Mar 30 05:25:29  postfix/smtps/smtpd[4797]: Anonymous TLS connection established from scan-7.security.ipip.net[106.186.113.132]: TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)

Mar 30 05:25:32  postfix/smtps/smtpd[4797]: lost connection after CONNECT from scan-7.security.ipip.net[106.186.113.132]
Mar 30 05:25:32  postfix/smtps/smtpd[4797]: disconnect from scan-7.security.ipip.net[106.186.113.132]
Mar 30 05:25:32  postfix/smtps/smtpd[4797]: lost connection after CONNECT from scan-7.security.ipip.net[106.186.113.132]
Mar 30 05:25:32  postfix/smtps/smtpd[4797]: disconnect from scan-7.security.ipip.net[106.186.113.132]
Mar 30 05:25:32  postfix/smtps/smtpd[4797]: lost connection after CONNECT from scan-7.security.ipip.net[106.186.113.132]
Mar 30 05:25:32  postfix/smtps/smtpd[4797]: disconnect from scan-7.security.ipip.net[106.186.113.132]

Reply | Threaded
Open this post in threaded view
|

Re: Postfix/smtp/smtpd

Den1
Thank you all for replying. I really do appreciate your input.

When the first extract from the log is pretty obvious as it says scan, the
second one is not really clear to me. Did the client try to connect in order
to send mail? Does postfix/smtp/smtpd mean sending out? I just assume it but
I am not sure. For example when mail arrives I see postfix/smtpd when it
goes out I see postfix/submission/smtpd and this is understandable, but
seeing postfifix/smtp/smtpd makes me confused a little...



--
Sent from: http://postfix.1071664.n5.nabble.com/Postfix-Users-f2.html
Reply | Threaded
Open this post in threaded view
|

Re: Postfix/smtp/smtpd

Bill Cole-3
On 1 Apr 2018, at 15:54 (-0400), Den1 wrote:

> Thank you all for replying. I really do appreciate your input.
>
> When the first extract from the log is pretty obvious as it says scan,
> the
> second one is not really clear to me. Did the client try to connect in
> order
> to send mail? Does postfix/smtp/smtpd mean sending out? I just assume
> it but
> I am not sure. For example when mail arrives I see postfix/smtpd when
> it
> goes out I see postfix/submission/smtpd and this is understandable,
> but
> seeing postfifix/smtp/smtpd makes me confused a little...

Look closer.

Neither postfix/smtp/smtpd nor postfifix/smtp/smtpd appear in the log
lines you posted.

What IS there is 'postfix/smtps/smtpd', which indicates connections to
your port 465 "wrappermode" instance of smtpd.

--
Bill Cole
[hidden email] or [hidden email]
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Currently Seeking Steady Work: https://linkedin.com/in/billcole
Reply | Threaded
Open this post in threaded view
|

Re: Postfix/smtp/smtpd

Den1
Bill Cole-3 wrote

> Look closer.
>
> Neither postfix/smtp/smtpd nor postfifix/smtp/smtpd appear in the log
> lines you posted.
>
> What IS there is 'postfix/smtps/smtpd', which indicates connections to
> your port 465 "wrappermode" instance of smtpd.
>
> --
> Bill Cole

> bill@

>  or

> billcole@

> (AKA @grumpybozo and many *@billmail.scconsult.com addresses)
> Currently Seeking Steady Work: https://linkedin.com/in/billcole

That's right, Bill. That's a nice observation. Thanks.

Plus, this is also exactly what I was asking about in my very first /
initial post. That is if postfix/smtps/smtpd meant connections to my 465
port. /Quote,/ "Does it perhaps mean that some clients try to connect to my
465 port?" /Unquote./ Now it's utmost clear! Thank you so much everybody for
your help!




--
Sent from: http://postfix.1071664.n5.nabble.com/Postfix-Users-f2.html
Reply | Threaded
Open this post in threaded view
|

Re: Postfix/smtp/smtpd

Viktor Dukhovni
In reply to this post by Wietse Venema


> On Apr 1, 2018, at 3:17 PM, Wietse Venema <[hidden email]> wrote:
>
> The time stamps were distinct for connect, TLS handshake, and
> disconnect. But it is possible that the poster omitted other handshake
> and diconnect records between the ones that were posted.

You're right, that sure looks logging in triplicate.

> Mar 30 05:25:27  postfix/smtps/smtpd[4797]: connect from scan-7.security.ipip.net[106.186.113.132]
> Mar 30 05:25:27  postfix/smtps/smtpd[4797]: connect from scan-7.security.ipip.net[106.186.113.132]
> Mar 30 05:25:27  postfix/smtps/smtpd[4797]: connect from scan-7.security.ipip.net[106.186.113.132]
>
> Mar 30 05:25:29  postfix/smtps/smtpd[4797]: Anonymous TLS connection established from scan-7.security.ipip.net[106.186.113.132]: TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)
> Mar 30 05:25:29  postfix/smtps/smtpd[4797]: Anonymous TLS connection established from scan-7.security.ipip.net[106.186.113.132]: TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)
> Mar 30 05:25:29  postfix/smtps/smtpd[4797]: Anonymous TLS connection established from scan-7.security.ipip.net[106.186.113.132]: TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)
>
> Mar 30 05:25:32  postfix/smtps/smtpd[4797]: lost connection after CONNECT from scan-7.security.ipip.net[106.186.113.132]
> Mar 30 05:25:32  postfix/smtps/smtpd[4797]: disconnect from scan-7.security.ipip.net[106.186.113.132]
> Mar 30 05:25:32  postfix/smtps/smtpd[4797]: lost connection after CONNECT from scan-7.security.ipip.net[106.186.113.132]
> Mar 30 05:25:32  postfix/smtps/smtpd[4797]: disconnect from scan-7.security.ipip.net[106.186.113.132]
> Mar 30 05:25:32  postfix/smtps/smtpd[4797]: lost connection after CONNECT from scan-7.security.ipip.net[106.186.113.132]
> Mar 30 05:25:32  postfix/smtps/smtpd[4797]: disconnect from scan-7.security.ipip.net[106.186.113.132

--
        Viktor.

Reply | Threaded
Open this post in threaded view
|

Re: Postfix/smtp/smtpd

Wietse Venema
In reply to this post by Den1
Den1:
> Plus, this is also exactly what I was asking about in my very first /
> initial post. That is if postfix/smtps/smtpd meant connections to my 465

No, you asked about "postfix/smtp/smtpd" not "postfix/smtps/smtpd".

    I was wondering if anybody could advise please, on what does
    this log entry mean postfix/smtp/smtpd? I know postfix/smtp is
    to send mails out to the...

Are you a troll?

        Wietse

Reply | Threaded
Open this post in threaded view
|

Re: Postfix/smtp/smtpd

Den1
Wietse Venema wrote

> Den1:
>> Plus, this is also exactly what I was asking about in my very first /
>> initial post. That is if postfix/smtps/smtpd meant connections to my 465
>
> No, you asked about "postfix/smtp/smtpd" not "postfix/smtps/smtpd".
>
>     I was wondering if anybody could advise please, on what does
>     this log entry mean postfix/smtp/smtpd? I know postfix/smtp is
>     to send mails out to the...
>
> Are you a troll?
>
> Wietse

No, I am not. I said that is /*also*/ what I was asking about. That is I
asked about both. My apologies I did not make myself clear enough.



--
Sent from: http://postfix.1071664.n5.nabble.com/Postfix-Users-f2.html