openSUSE admin

crameleon wrote in #note-1:

Is it saying metrics.i.o.o attempts STARTTLS against mx{1,2}?

Yes, that has to be it.

Don't we use plain text SMTP internally?

I thought so too. Right:

# 20200714 do not offer tls for internal connections.
smtpd_discard_ehlo_keyword_address_maps = lmdb:/etc/postfix/no-internal-tls

However, that file only recognises 192.168.x.x as being internal :-)

However, that file only recognises 192.168.x.x as being internal :-)

I don't think we should not offer TLS internally and did not know we previously had such a map.
I more thought that clients would in our default configuration not attempt TLS (something I would like to change at some point).
Will need to check what's different on metrics.i.o.o.

crameleon wrote in #note-3:

However, that file only recognises 192.168.x.x as being internal :-)

I don't think we should not offer TLS internally and did not know we previously had such a map.

I don't mind, but for internal traffic, it seems like a waste of cycles.

I more thought that clients would in our default configuration not attempt TLS (something I would like to change at some point).

The postfix default is not to use TLS, but I think it should be used when offered, so I generally add smtp_use_tls = yes. I think our default config is also smtp_use_tls = no

Will need to check what's different on metrics.i.o.o.

I expect you'll find smtp_use_tls = yes.

pjessen wrote in #note-4:

Will need to check what's different on metrics.i.o.o.

I expect you'll find smtp_use_tls = yes.

Hmm, no :

metrics (metrics.o.o):~ # postconf -n  smtp_use_tls
smtp_use_tls = no

Checking the log, metrics.i.o.o has not sent an email since 2022-02-17T15:18:00 - and here is no log activity from today.