EHLO Disconnect

martijn · June 10, 2020, 1:01pm

It looks like a Java client that tries to send email.

Is that all the log/debug information from the Java client? I do not see
any line that the connection was terminated. My guess is that somehow
the Java client decides to terminate the connection.

Do you have more logging after the following line:

DEBUG SMTP: Found extension "8BITMIME", arg ""

Could it be that the email you try to send is larger than 20240000
bytes?, i.e., the value reported by "250-SIZE 20240000"

Kind regards,

Martijn Brinkers

···

On 10-06-2020 14:42, Sir Mac wrote:

Hi Martijn,

Ciphermail is our SMTP server and is used with DLP to encrypt outgoing
messages. The system is authorized to relay messages through this server.
I place a debug line in postfix - this is the output. (I cleaned out
some of the other match_hostaddr from the list)

Jun 10 08:19:23 ems postfix/master[82504]: daemon started -- version
2.10.1, configuration /etc/postfix
Jun 10 08:21:16 ems postfix/smtpd[82508]: connect from unknown[10.10.20.210]
Jun 10 08:21:16 ems postfix/smtpd[82508]: smtp_stream_setup: maxtime=300
enable_deadline=0
Jun 10 08:21:16 ems postfix/smtpd[82508]: match_hostname: unknown ~?
127.0.0.0/8
Jun 10 08:21:16 ems postfix/smtpd[82508]: match_hostaddr: 10.10.20.210
~? 127.0.0.0/8
Jun 10 08:21:16 ems postfix/smtpd[82508]: match_hostname: unknown ~?
[::1]/128
Jun 10 08:21:16 ems postfix/smtpd[82508]: match_hostaddr: 10.10.20.210
~? [::1]/128
Jun 10 08:21:16 ems postfix/smtpd[82508]: match_hostaddr: 10.10.20.210
~? 10.10.20.210
Jun 10 08:21:16 ems postfix/smtpd[82508]: name_mask: silent-discard
Jun 10 08:21:16 ems postfix/smtpd[82508]: name_mask: dsn
Jun 10 08:21:16 ems postfix/smtpd[82508]: name_mask: etrn
Jun 10 08:21:16 ems postfix/smtpd[82508]: > unknown[10.10.20.210]: 220
ems.jc.ca ESMTP CipherMail
Jun 10 08:21:16 ems postfix/smtpd[82508]: watchdog_pat: 0x556660d87140
Jun 10 08:21:16 ems postfix/smtpd[82508]: < unknown[10.10.20.210]: EHLO
d.jc.ca
Jun 10 08:21:16 ems postfix/smtpd[82508]: match_list_match: unknown: no
match
Jun 10 08:21:16 ems postfix/smtpd[82508]: match_list_match:
10.10.20.210: no match
Jun 10 08:21:16 ems postfix/smtpd[82508]: > unknown[10.10.20.210]:
250-ems.jc.ca
Jun 10 08:21:16 ems postfix/smtpd[82508]: > unknown[10.10.20.210]:
250-PIPELINING
Jun 10 08:21:16 ems postfix/smtpd[82508]: > unknown[10.10.20.210]:
250-SIZE 20240000
Jun 10 08:21:16 ems postfix/smtpd[82508]: > unknown[10.10.20.210]: 250-VRFY
Jun 10 08:21:16 ems postfix/smtpd[82508]: > unknown[10.10.20.210]:
250-ENHANCEDSTATUSCODES
Jun 10 08:21:16 ems postfix/smtpd[82508]: > unknown[10.10.20.210]: 250
8BITMIME
Jun 10 08:21:16 ems postfix/smtpd[82508]: watchdog_pat: 0x556660d87140
Jun 10 08:21:17 ems postfix/smtpd[82508]: smtp_get: EOF
Jun 10 08:21:17 ems postfix/smtpd[82508]: match_hostname: unknown ~?
10.10.20.210
Jun 10 08:21:17 ems postfix/smtpd[82508]: match_hostaddr: 10.10.20.210
~? 10.10.20.210
Jun 10 08:21:17 ems postfix/smtpd[82508]: lost connection after EHLO
from unknown[10.10.20.210]
Jun 10 08:21:17 ems postfix/smtpd[82508]: disconnect from
unknown[10.10.20.210]

From the system sending the message to Ciphermail (ems.jc.ca)

DEBUG: getProvider() returning
javax.mail.Provider[TRANSPORT,smtp,com.sun.mail.smtp.SMTPTransport,Oracle]
DEBUG SMTP: useEhlo true, useAuth false
DEBUG SMTP: trying to connect to host "ems.jc.ca", port 25, isSSL false
220 ems.jc.ca ESMTP CipherMail
DEBUG SMTP: connected to host "ems.jc.ca", port: 25

EHLO d.jc.ca
250-ems.jc.ca
250-PIPELINING
250-SIZE 20240000
250-VRFY
250-ENHANCEDSTATUSCODES
250 8BITMIME
DEBUG SMTP: Found extension "PIPELINING", arg ""
DEBUG SMTP: Found extension "SIZE", arg "20240000"
DEBUG SMTP: Found extension "VRFY", arg ""
DEBUG SMTP: Found extension "ENHANCEDSTATUSCODES", arg ""
DEBUG SMTP: Found extension "8BITMIME", arg ""

If I use telnet to ems.jc.ca and then manually prepare a message it works.

Brian

------------------------------------------------------------------------
*From:* Martijn Brinkers via Users <users(a)lists.ciphermail.com>
*Sent:* June 10, 2020 12:08 PM
*To:* users(a)lists.ciphermail.com <users(a)lists.ciphermail.com>
*Cc:* Martijn Brinkers <martijn(a)ciphermail.com>
*Subject:* Re: EHLO Disconnect

On 09-06-2020 20:46, bmaclenn--- via Users wrote:

I am receiving a timeout after EHLO from system[IP]
diconnect from system[IP]

From system[IP] I can telnet and send email correctly? Any ideas where to look?

So this is for incoming connections?, i.e., from a remote SMTP to the
CipherMail gateway?

The SMTP part of the CipherMail gateway is handled by Postfix.

Is there more information from the logs? Can you check the logs on the
other system?

Kind regards,

Martijn Brinkers

--
CipherMail email encryption
Email encryption with support for S/MIME,
OpenPGP, PDF encryption and secure webmail pull.

W: https://www.ciphermail.com/
E: info(a)ciphermail.com
T: +31 20 290 0088
_______________________________________________
Users mailing list -- users(a)lists.ciphermail.com
To unsubscribe send an email to users-leave(a)lists.ciphermail.com

--
CipherMail email encryption
Email encryption with support for S/MIME,
OpenPGP, PDF encryption and secure webmail pull.

W: https://www.ciphermail.com/
E: info(a)ciphermail.com
T: +31 20 290 0088

Sir_Mac · June 10, 2020, 1:12pm

No - there is nothing after those lines on the sending system - so I would agree the issue likely is since no message was sent, the server disconnected.

I'll try increasing the message size and report back.

attachment.htm (7.9 KB)

···

________________________________
From: Martijn Brinkers <martijn(a)ciphermail.com>
Sent: June 10, 2020 1:01 PM
To: Sir Mac <bmaclenn(a)hotmail.com>; users(a)lists.ciphermail.com <users(a)lists.ciphermail.com>
Subject: Re: Re: EHLO Disconnect