Errors/timeouts on SMTP/S and IMAP/S connections from MacOS clients

[Philip Prindeville]

Hi all,

I’m running F20 on my mail server, and using sendmail, mimedefang, spamassassin, and
cyrus-imapd. Mimedefang passes messages to spamd via a socket for real-time scanning
during the DATA/ in filter_end(). phase. High spam scores cause the message to be bounced
(rejected).

Authentication is local based on sasldb2, so network authentication problems aren’t a
factor.

Everything was working fine until I recently updated from F19 to F20.

Now I’m seeing timeouts when submitting messages locally (outbound). Local submission is
on port 587, and no spamassassin scoring takes place on local submission.

I’m also seeing timeouts when doing IMAP/S copies into local mailboxes from external
mailboxes (i.e. served by a non-local IMAP server).

Lastly, I see about 1 in 5 outbound messages fail during the SSL negotiation phase.  If I
resubmit the message, it usually goes out the 2nd time:

Mar 20 11:51:20 localhost mimedefang.pl[8186]: relay: macmini.redfish-solutions.com
(192.168.1.38:55318 => 192.168.1.3:587)
Mar 20 11:51:20 localhost mimedefang.pl[7708]: helo: macmini.redfish-solutions.com
(192.168.1.38:55318) said "helo macmini.redfish-solutions.com"
Mar 20 11:52:20 localhost sendmail[8262]: STARTTLS=server, error: accept failed=0,
reason=unknown, SSL_error=6, errno=0, retry=-1, relay=macmini.redfish-solutions.com
[192.168.1.38]
Mar 20 11:52:20 localhost sendmail[8262]: s2KHpKv4008262: macmini.redfish-solutions.com
[192.168.1.38] did not issue MAIL/EXPN/VRFY/ETRN during connection to MSA
Mar 20 11:52:20 localhost mimedefang.pl[8186]: relay: macmini.redfish-solutions.com
(192.168.1.38:55326 => 192.168.1.3:587)
Mar 20 11:52:20 localhost sendmail[8264]: s2KHqKS9008264: macmini.redfish-solutions.com
[192.168.1.38] did not issue MAIL/EXPN/VRFY/ETRN during connection to MSA
Mar 20 11:52:35 localhost mimedefang.pl[8186]: relay: macmini.redfish-solutions.com
(192.168.1.38:55328 => 192.168.1.3:587)
Mar 20 11:52:35 localhost mimedefang.pl[7708]: helo: macmini.redfish-solutions.com
(192.168.1.38:55328) said "helo macmini.redfish-solutions.com"
Mar 20 11:52:35 localhost sendmail[8266]: STARTTLS=server,
relay=macmini.redfish-solutions.com [192.168.1.38], version=TLSv1/SSLv3, verify=NO,
cipher=AES128-SHA, bits=128/128
Mar 20 11:52:35 localhost mimedefang.pl[7708]: helo: macmini.redfish-solutions.com
(192.168.1.38:55328) said "helo macmini.redfish-solutions.com"
Mar 20 11:52:35 localhost sendmail[8266]: AUTH=server, relay=macmini.redfish-solutions.com
[192.168.1.38], authid=philipp, mech=CRAM-MD5, bits=0


I updated to F20 about the same time that I installed Mavericks (MacOS 10.9) on all of the
Apple clients.  It’s not clear which triggered the issue.

I’ve updated the SSL fix for MacOS that came out a couple of weeks ago, but this didn’t
resolve the issue.

Anyone else having problems with Mail.app MacOS clients talking to a Fedora mail server?

Thanks,

-Philip