Path: csiph.com!news.samoylyk.net!gothmog.csi.it!bofh.it!news.nic.it!robomod From: Michael Grant Newsgroups: linux.debian.user Subject: sendmail and starttls failing Date: Sun, 30 Jun 2024 18:00:01 +0200 Message-ID: X-Mailbox-Line: From debian-user-request@lists.debian.org Sun Jun 30 15:51:47 2024 Old-Return-Path: X-Amavis-Spam-Status: No, score=-12.8 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FOURLA=0.1, LDO_WHITELIST=-5, PGPSIGNATURE=-5, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no X-Policyd-Weight: NOT_IN_SBL_XBL_SPAMHAUS=-1.5 CL_IP_EQ_FROM_MX=-3.1; rate: -4.6 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="L/a28/45Cn4tB8Cl" Content-Disposition: inline X-Virus-Status: Clean X-Bitdefender-Scanner: Clean, Agent: BitDefender Milter 3.1.7 on strange.networkguild.org, sigver: 7.97062 X-Bitdefender-Spam: No (0) X-Bitdefender-Spamstamp: Build: [Engines: 2.18.2.1544, Dats: 871106, Stamp: 3], Multi: [Enabled, t: (0.000004,0.009935)], BW: [Enabled, t: (0.000004), whitelisted: mgrant@grant.org], APM: [Enabled, Score: 500, t: (0.002898,0.000081), Flags: BA7B0291; NN_F_GRANT; NN_GLAD_TO_MEET_ADN; NN_EXEC_H_MAIL_LINK_HAS_IP; NN_LEGIT_SUMM_400_WORDS; NN_LEGIT_MAILING_LIST_TO; NN_LEGIT_TO_RECEIVED_ADN], RTDA: [Disabled], total: 0(775) X-Bitdefender-Cf-Stamp: none X-Mailing-List: archive/latest/812756 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/ZoF_AKIArZXpqhqd@grant.org Approved: robomod@news.nic.it Lines: 85 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Sun, 30 Jun 2024 11:51:28 -0400 X-Original-Message-ID: Xref: csiph.com linux.debian.user:270665 --L/a28/45Cn4tB8Cl Content-Type: text/plain; charset=us-ascii Content-Disposition: inline After an update today, sendmail is refusing to accept mail. I'm seeing this in the logs: STARTTLS=read, info: fds=9/4, err=2 Here's the full log from when I try to send a message through my server with authentication: Jun 30 11:42:59 bottom sm-mta[18852]: NOQUEUE: connect from [1.2.3.4] Jun 30 11:42:59 bottom sm-mta[18852]: AUTH: available mech=DIGEST-MD5 CRAM-MD5, allowed mech=EXTERNAL Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: Milter (clamav): init success to negotiate Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: Milter (spamassassin): init success to negotiate Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: Milter (opendkim): init success to negotiate Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: Milter: connect to filters Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: milter=clamav, action=connect, continue Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: milter=spamassassin, action=connect, continue Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: milter=opendkim, action=connect, continue Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: --- 220 bottom.networkguild.org ESMTP Sendmail 8.17.1.9/8.17.1.9/Debian-2+deb12u2; Sun, 30 Jun 2024 11:42:59 -0400; (No UCE/UBE) logging access from: [1.2.3.4](FAIL)-[1.2.3.4] Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: <-- EHLO [1.2.3.4] Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: milter=spamassassin, action=helo, continue Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: --- 250-bottom.networkguild.org Hello [1.2.3.4], pleased to meet you Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: --- 250-ENHANCEDSTATUSCODES Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: --- 250-PIPELINING Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: --- 250-EXPN Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: --- 250-VERB Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: --- 250-8BITMIME Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: --- 250-SIZE Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: --- 250-STARTTLS Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: --- 250-DELIVERBY Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: --- 250 HELP Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: <-- STARTTLS Jun 30 11:42:59 bottom sm-mta[18852]: engine=(null), path=(null), ispre=0, pre=0, initialized=0 Jun 30 11:42:59 bottom sm-mta[18852]: tls_srv_features=(null), relay=[1.2.3.4] [1.2.3.4] Jun 30 11:42:59 bottom sm-mta[18852]: tls_srv_features=empty, stat=0, relay=[1.2.3.4] [1.2.3.4] Jun 30 11:42:59 bottom sm-mta[18852]: 45UFgx2h018852: --- 220 2.0.0 Ready to start TLS Jun 30 11:42:59 bottom sm-mta[18852]: STARTTLS=server, info: fds=9/4, err=2 Jun 30 11:43:00 bottom sm-mta[18852]: STARTTLS=server, get_verify: 0 get_peer: 0x0 Jun 30 11:43:00 bottom sm-mta[18852]: STARTTLS=server, relay=[1.2.3.4], version=TLSv1.2, verify=NOT, cipher=ECDHE-RSA-AES256-GCM-SHA384, bits=256/256 Jun 30 11:43:00 bottom sm-mta[18852]: STARTTLS=server, cert-subject=, cert-issuer=, verifymsg=ok Jun 30 11:43:00 bottom sm-mta[18852]: AUTH: available mech=DIGEST-MD5 CRAM-MD5 LOGIN PLAIN, allowed mech=EXTERNAL Jun 30 11:43:00 bottom sm-mta[18852]: STARTTLS=read, info: fds=9/4, err=2 Jun 30 11:43:00 bottom sm-mta[18852]: 45UFgx2h018852: <-- EHLO [1.2.3.4] Jun 30 11:43:00 bottom sm-mta[18852]: 45UFgx2i018852: milter=spamassassin, action=helo, continue Jun 30 11:43:00 bottom sm-mta[18852]: 45UFgx2i018852: --- 250-bottom.networkguild.org Hello [1.2.3.4], pleased to meet you Jun 30 11:43:00 bottom sm-mta[18852]: 45UFgx2i018852: --- 250-ENHANCEDSTATUSCODES Jun 30 11:43:00 bottom sm-mta[18852]: 45UFgx2i018852: --- 250-PIPELINING Jun 30 11:43:00 bottom sm-mta[18852]: 45UFgx2i018852: --- 250-EXPN Jun 30 11:43:00 bottom sm-mta[18852]: 45UFgx2i018852: --- 250-VERB Jun 30 11:43:00 bottom sm-mta[18852]: 45UFgx2i018852: --- 250-8BITMIME Jun 30 11:43:00 bottom sm-mta[18852]: 45UFgx2i018852: --- 250-SIZE Jun 30 11:43:00 bottom sm-mta[18852]: 45UFgx2i018852: --- 250-DELIVERBY Jun 30 11:43:00 bottom sm-mta[18852]: 45UFgx2i018852: --- 250 HELP Jun 30 11:43:00 bottom sm-mta[18852]: STARTTLS=read, info: fds=9/4, err=2 My cert for bottom.networkguild.org is still valid. Err=2 is generaly some sort of file-not-found error, but what file or file descriptor went bad? --L/a28/45Cn4tB8Cl Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEDXVee01gWrPIdWPRwgRAue7sYQMFAmaBfv0ACgkQwgRAue7s YQPD6g//QUOm1ZGSzSM1iYctjlizn6w2zq+gsB/G+FDQVpJ9+xpYIGem+6NbBNCe wqBgVap2EFOmFM4v5HWjMfCNVxkIX/0iNO7POCbJ5EGp8dJ+oNnkSBlSVZuaSKFA D9Wjy7UE0XyzymEupQKcGh5zM1hKyHpHqDuvDjggAE3A+3Uoi2dk7n7U3ciPmF+L v4DxBLr3KbX6nB7WVMYrSPabzFZT6XnBvU7Kvxi4qvqasqZA/gLwr1v6mX9Mr48Q 8Ho4rA/l9kO6LH1W7G+78Wbv38w8be0/97DEIu6i1x0NmMET71MT/RT0ljY+eZ6/ EfnEiMfs6xrWzcd6eSfWOPe6C28lSeBd/hhse85pq3qFZ46XOCa2evMxfi5bFrpq E/dErrL7U5dE/FQfLKhk/ekwJ0aEt4bsYMYqpHEzhL2UJvGLtnXIDmWUR04lXEMJ GC4WkCoUlIcTgnmiJ4cwRRxZ6TFfTxrKVBnPBk+5TyTuwAaXpnGRqCxOsrXpno2/ /wrkLajYFQnqyaJae9WYWURXZCsNTUKmwJk8rO0VaOiU87kReH8W1n716o80UbvD 1mQTJ6qoZRfXBFsprTEdXhXfmC3Jp9inn+jnd8Kz/oYa/TkKZe40WdJp4ghUuTiu iQ1BipG/alMWoADcPjuzdlHW+NWMRN9ZZ16ViNnr0Z5zDUW7Vyg= =ConM -----END PGP SIGNATURE----- --L/a28/45Cn4tB8Cl--