Path: ...!2.eu.feeder.erje.net!feeder.erje.net!eternal-september.org!feeder3.eternal-september.org!news.eternal-september.org!.POSTED!not-for-mail
From: Marco Moock <mm+usenet-es@dorfdsl.de>
Newsgroups: comp.mail.sendmail
Subject: Re: STS causes mail to be deferred
Date: Fri, 27 Dec 2024 20:38:57 +0100
Organization: A noiseless patient Spider
Lines: 35
Message-ID: <20241227203857.7c97ea22@ryz.dorfdsl.de>
References: <20241227172622.75142a39@ryz.dorfdsl.de>
	<vkmrm5$q6d$1@news.misty.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Injection-Date: Fri, 27 Dec 2024 20:38:58 +0100 (CET)
Injection-Info: dont-email.me; posting-host="9021a6446f65d334fbd9b603263f1bf0";
	logging-data="3946128"; mail-complaints-to="abuse@eternal-september.org";	posting-account="U2FsdGVkX19mjmRM51bzMb2uJLOU1+bF"
Cancel-Lock: sha1:knXR2X0Bb3tAkkHnAYPB33K/VcY=
Bytes: 2291

On 27.12.2024 13:29 Uhr Claus A=C3=9Fmann wrote:

> Marco Moock  wrote:
>=20
> > I see that some mail is being deferred to MS and Gmail. If I disable
> > sts, the mail goes out. =20
>=20
> What is logged in that case?

E.g.

root@srv1:~# journalctl -S 2024-12-24 -t sm-mta -t sendmail |grep 389237=20
Dec 26 13:02:01 srv1 sm-mta[389237]: STARTTLS=3Dclient, relay=3Dmicrosoft-c=
om.mail.protection.outlook.com., version=3DTLSv1.3, verify=3DFAIL, cipher=
=3DTLS_AES_256_GCM_SHA384, bits=3D256/256
Dec 26 13:02:01 srv1 sm-mta[389237]: ruleset=3Dtls_server, arg1=3DFAIL, rel=
ay=3Dmicrosoft-com.mail.protection.outlook.com, reject=3D403 4.7.0 authenti=
cation failed
Dec 26 13:02:01 srv1 sm-mta[389237]: STARTTLS: read error=3Dgeneric SSL err=
or (-1), errno=3D9, get_error=3Derror:0A000126:SSL routines::unexpected eof=
 while reading, retry=3D99, ssl_err=3D1
Dec 26 13:02:01 srv1 sm-mta[389237]: 4BQ7S9xS386605: to=3D<itex-rua@microso=
ft.com>, delay=3D04:33:50, xdelay=3D00:00:01, mailer=3Desmtp, pri=3D2551890=
, relay=3Dmicrosoft-com.mail...ction.outlook.com. [IPv6:2a01:111:f403:f911:=
0:0:0:1], dsn=3D4.7.0, stat=3DDeferred: 403 4.7.0 authentication failed
root@srv1:~#=20

I can connect via openssl manually.

--=20
kind regards
Marco

Send spam to 1735302565muell@stinkedores.dorfdsl.de