TLS error

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

TLS error

James Moe-2
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

assp 2.4.7 (16004)

  I have been seeing these error messages:

2016-01-31 19:51:36 Connected: session:7F979BB224B8 216.34.181.88:37325
> 192.168.69.246:25 > 192.168.69.246:125
2016-01-31 19:51:36 216.34.181.88 info: got STARTTLS request from
216.34.181.88
2016-01-31 19:51:36 216.34.181.88 error: Couldn't upgrade to TLS for
client 216.34.181.88: SSL accept attempt failed error:1408F10B:SSL
routines:SSL3_GET_RECORD:wrong version number

  Are this an error caused bu:
1. Client/MUA
2. Sending MTA
3. ASSP
4. Receiving MTA

  Is the connection dropped? Or re-negotiated?

- --
James Moe
moe dot james at sohnen-moe dot com
520.743.3936
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEUEARECAAYFAlavvC4ACgkQzTcr8Prq0ZO2ZwCcCHFt8hEnMaxAGj/JEgowO/vd
ONAAkgJfyngXvM+KUFOi/A0teoo2rPc=
=MkYj
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: TLS error

James Moe-2
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/01/2016 01:12 PM, James Moe wrote:
> 2016-01-31 19:51:36 216.34.181.88 error: Couldn't upgrade to TLS
> for client 216.34.181.88: SSL accept attempt failed
> error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number
>
> Are this an error caused by: 1. Client/MUA 2. Sending MTA 3. ASSP
> 4. Receiving MTA
>
> Is the connection dropped? Or re-negotiated?
>
  Does anyone know?

- --
James Moe
moe dot james at sohnen-moe dot com
520.743.3936
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEARECAAYFAlayS+4ACgkQzTcr8Prq0ZM9hACglRF7U5Z5GMv/DXrtlVyhnaQz
/ToAnijyIvxX8tAjwmua0rRev0Seibl6
=rMM8
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: TLS error

James Moe-2
In reply to this post by James Moe-2
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/01/2016 01:12 PM, James Moe wrote:
> assp 2.4.7 (16004) I have been seeing these error messages:
>
  Here is a complete session. I am guessing that the
"SSL3_GET_RECORD:wrong version number" message is an ASSP generated
message rather than the destination MTA.


2016-02-03 13:18:47 Connected: session:7F0F4C4689F0
217.174.253.118:48210 > 192.168.69.246:25 > 192.168.69.246:125
2016-02-03 13:18:47 217.174.253.118 info: got STARTTLS request from
217.174.253.118
2016-02-03 13:18:48 217.174.253.118 error: Couldn't upgrade to TLS for
client 217.174.253.118: SSL accept attempt failed error:1408F10B:SSL
routines:SSL3_GET_RECORD:wrong version number
2016-02-03 13:19:18 Connected: session:7F0F507F23A8 217.69.76.57:37215
> 192.168.69.246:25 > 192.168.69.246:125

  ---- wait for it ----

2016-02-03 13:23:47 Disconnected: session:7F0F4C4689F0 217.174.253.118
- - processing time 300 seconds
2016-02-03 13:23:47 Connected: session:7F0F4E02B868
217.174.253.118:48562 > 192.168.69.246:25 > 192.168.69.246:125
2016-02-03 13:23:48 31028-04699 217.174.253.118 info: found message
size announcement: 2.79 kByte
2016-02-03 13:23:48 31028-04699 [isbounce] 217.174.253.118 bounce
message detected
2016-02-03 13:23:50 31028-04699 217.174.253.118 to:
[hidden email] Bayesian Check  - Prob: 0.00000 => ham -
answer/query relation: 100%
2016-02-03 13:23:50 31028-04699 217.174.253.118 to:
[hidden email] info: found bounced sender: <> and
recipient: <[hidden email]> without valid MSGID-signature
2016-02-03 13:23:50 31028-04699 [MSGID-sig] 217.174.253.118 to:
[hidden email]  MSGID-sig check failed for bounce sender
2016-02-03 13:23:50 31028-04699 [MSGID-sig][isbounce] 217.174.253.118
to: [hidden email] [spam found] (MSGID-sig check failed
for bounce sender ) [Warning message 1aQd7p 0004Wi Ln delayed 24 hours];
2016-02-03 13:23:50 31028-04699 217.174.253.118 to:
[hidden email] info: PB-IP-Score for '217.174.253.0' is
25, added 25 in this session
2016-02-03 13:23:50 Finished message - received DATA size: 2.20 kByte
- - sent DATA size: 0 Byte
2016-02-03 13:23:50 Disconnected: session:7F0F4E02B868 217.174.253.118
- - processing time 3 seconds


- --
James Moe
moe dot james at sohnen-moe dot com
520.743.3936
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEARECAAYFAlaycrkACgkQzTcr8Prq0ZOvfgCgjVSIx/X9f9VU+38W1c8qLz5w
62EAn2FCPvQsOYVp0V+cPX7AgyAh8u4f
=8ZPh
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: TLS error

Thomas Eckardt/eck
The error is an OpenSSL error (caused by the openssl lib - used by
Net::SSLeay).
The connected client tries to negotiate an unsupported protocol (for
example: MTA(client) tries SSLv3 - the minimum level in your config is
TLSv1).
If the connection is droped or not depends on the sending MTA. ASSP sends
the error to the peer. It will accept a new negotiation request as well as
proceed in plain TCP.

Thomas


Von:    James Moe <[hidden email]>
An:     For Users of ASSP <[hidden email]>
Datum:  03.02.2016 22:38
Betreff:        Re: [Assp-user] TLS error



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/01/2016 01:12 PM, James Moe wrote:
> assp 2.4.7 (16004) I have been seeing these error messages:
>
  Here is a complete session. I am guessing that the
"SSL3_GET_RECORD:wrong version number" message is an ASSP generated
message rather than the destination MTA.


2016-02-03 13:18:47 Connected: session:7F0F4C4689F0
217.174.253.118:48210 > 192.168.69.246:25 > 192.168.69.246:125
2016-02-03 13:18:47 217.174.253.118 info: got STARTTLS request from
217.174.253.118
2016-02-03 13:18:48 217.174.253.118 error: Couldn't upgrade to TLS for
client 217.174.253.118: SSL accept attempt failed error:1408F10B:SSL
routines:SSL3_GET_RECORD:wrong version number
2016-02-03 13:19:18 Connected: session:7F0F507F23A8 217.69.76.57:37215
> 192.168.69.246:25 > 192.168.69.246:125

  ---- wait for it ----

2016-02-03 13:23:47 Disconnected: session:7F0F4C4689F0 217.174.253.118
- - processing time 300 seconds
2016-02-03 13:23:47 Connected: session:7F0F4E02B868
217.174.253.118:48562 > 192.168.69.246:25 > 192.168.69.246:125
2016-02-03 13:23:48 31028-04699 217.174.253.118 info: found message
size announcement: 2.79 kByte
2016-02-03 13:23:48 31028-04699 [isbounce] 217.174.253.118 bounce
message detected
2016-02-03 13:23:50 31028-04699 217.174.253.118 to:
[hidden email] Bayesian Check  - Prob: 0.00000 => ham -
answer/query relation: 100%
2016-02-03 13:23:50 31028-04699 217.174.253.118 to:
[hidden email] info: found bounced sender: <> and
recipient: <[hidden email]> without valid MSGID-signature
2016-02-03 13:23:50 31028-04699 [MSGID-sig] 217.174.253.118 to:
[hidden email]  MSGID-sig check failed for bounce sender
2016-02-03 13:23:50 31028-04699 [MSGID-sig][isbounce] 217.174.253.118
to: [hidden email] [spam found] (MSGID-sig check failed
for bounce sender ) [Warning message 1aQd7p 0004Wi Ln delayed 24 hours];
2016-02-03 13:23:50 31028-04699 217.174.253.118 to:
[hidden email] info: PB-IP-Score for '217.174.253.0' is
25, added 25 in this session
2016-02-03 13:23:50 Finished message - received DATA size: 2.20 kByte
- - sent DATA size: 0 Byte
2016-02-03 13:23:50 Disconnected: session:7F0F4E02B868 217.174.253.118
- - processing time 3 seconds


- --
James Moe
moe dot james at sohnen-moe dot com
520.743.3936
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iEYEARECAAYFAlaycrkACgkQzTcr8Prq0ZOvfgCgjVSIx/X9f9VU+38W1c8qLz5w
62EAn2FCPvQsOYVp0V+cPX7AgyAh8u4f
=8ZPh
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user






DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************


------------------------------------------------------------------------------
Site24x7 APM Insight: Get Deep Visibility into Application Performance
APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month
Monitor end-to-end web transactions and take corrective actions now
Troubleshoot faster and improve end-user experience. Signup Now!
http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user