1

Topic: SSL_Accept error from unknown each 10sec

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 0.9.8
- Linux/BSD distribution name and version: Debian
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hello,

In my syslog, each 10sec, i have this message :

Sep 20 09:36:19 servername postfix/smtps/smtpd[25519]: SSL_accept error from unknown[54.39.45.84]: lost connection
Sep 20 09:36:19 servername postfix/smtps/smtpd[25519]: lost connection after CONNECT from unknown[54.39.45.84]
Sep 20 09:36:19 servername postfix/smtps/smtpd[25519]: disconnect from unknown[54.39.45.84] commands=0/0
Sep 20 09:36:19 servername postfix/smtps/smtpd[25519]: warning: hostname mail.rieckcrmtrack.info does not resolve to address 54.39.45.84
Sep 20 09:36:19 servername postfix/smtps/smtpd[25519]: connect from unknown[54.39.45.84]

my log are full of this message.. i tried to lock ip with ip tables but doesn't work..

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: SSL_Accept error from unknown each 10sec

Safe to ignore.

Seems this host is trying to connect to your server by smtp over SSL, but didn't support the ssl protocol/cipher offered by your server. It's very possible that this is a spammer or a cracker.