1

Topic: too many errors after EHLO ( Postfix logs )

======== Required information ====
- iRedMail version: 0.8.7
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):  MYSQL
- Linux/BSD distribution name and version: Centos 6.5
- Related log if you're reporting an issue:
====

Hi,

We are receiving some error logs from a specific IP address for one of our clients.  :

Oct  2 15:48:10 webmail postfix/smtpd[1790]: connect from hostname_of_ip_address [12.345.6.78]
Oct  2 15:48:25 webmail postfix/smtpd[1790]: too many errors after EHLO from hostname_of_ip_address[12.345.6.78]
Oct  2 15:48:25 webmail postfix/smtpd[1790]: disconnect from hostname_of_ip_address[12.345.6.78]
Oct  2 15:48:25 webmail postfix/smtpd[32362]: connect from hostname_of_ip_address[12.345.6.78]
Oct  2 15:48:38 webmail postfix/smtpd[32362]: too many errors after EHLO from hostname_of_ip_address[12.345.6.78]
Oct  2 15:48:38 webmail postfix/smtpd[32362]: disconnect from hostname_of_ip_address[12.345.6.78]

I am thinking maybe this error is related with to many multiple connections from the same IP Address
Anyone else saw this EHLO error logs ? smile

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: too many errors after EHLO ( Postfix logs )

Did this client use many different EHLO identities?

3

Re: too many errors after EHLO ( Postfix logs )

I am not sure about that..what are you mean exactly ??
There is around 30 users behind this IP address, each one has his own mailbox ( outlook imap or  pop account ).

4

Re: too many errors after EHLO ( Postfix logs )

If your clients have SMTP authentication enabled in their mail client applications (Outlook, Thunderbird, etc), Postfix won't check the HELO identities they sent. It might be caused by other problem. I suggest you check context log to figure it out.