Axigen Community Forum

  • If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Announcement

Collapse
No announcement yet.

SSL alert remote undefined:fatal:handshake

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

    SSL alert remote undefined:fatal:handshake

    Running Axigen X2 on CentOS 7.5

    I have been seeing SMTP-OUT send failures in my maillog since installing Axigen almost a year ago. These are from yesterday:

    Nov 19 04:04:37 mail Axigen[1328]: SMTP-OUT:00000020: Set mail state to SEND FAILURE
    Nov 19 12:04:48 mail Axigen[1328]: SMTP-OUT:00000025: Set mail state to SEND FAILURE
    Nov 19 20:04:57 mail Axigen[1328]: SMTP-OUT:0000002D: Set mail state to SEND FAILURE


    Digging through the logs the failures always seem to be an attempt by the server to "phone home":

    Nov 19 04:04:37 mail Axigen[1328]: SMTP-OUT:00000020: Relay mail 33124A: connecting to 193.230.245.6:25
    Nov 19 04:04:37 mail Axigen[1328]: SMTP-OUT:00000020: Relay mail 33124A: connected to 193.230.245.6:25
    Nov 19 04:04:37 mail Axigen[1328]: SMTP-OUT:00000020: SSL error remote 193.230.245.6:25, SSL_connect:failed in SSLv2/v3 read server hello A
    Nov 19 04:04:37 mail Axigen[1328]: SMTP-OUT:00000020: SSL alert remote 193.230.245.6:25, undefined:fatal:handshake failure
    Nov 19 04:04:37 mail Axigen[1328]: SMTP-OUT:00000020: SSL error remote 193.230.245.6:25, SSL_connect:failed in SSLv2/v3 read server hello A
    Nov 19 04:04:37 mail Axigen[1328]: ERROR: SSL_connect error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
    Nov 19 04:04:37 mail Axigen[1328]: SMTP-OUT:00000020: Unable to perform STARTTLS
    Nov 19 04:04:37 mail Axigen[1328]: SMTP-OUT:00000020: Disconnected from 193.230.245.6
    Nov 19 04:04:37 mail Axigen[1328]: SMTP-OUT:00000020: Relay mail 33124A: no more relays for axigen.com
    Nov 19 04:04:37 mail Axigen[1328]: SMTP-OUT:00000020: Delivery attempt completed for mail 33124A; 1 recipients remaining; reschedule for delivery
    Nov 19 04:04:37 mail Axigen[1328]: SMTP-OUT:00000020: Set mail state to SEND FAILURE


    C:\>nslookup 193.230.245.6
    Name: node6.axigen.com
    Address: 193.230.245.6


    As documented in the log excerpt above, all three errors are related to attempting to send (then retries of) the same message. This begs a couple of questions (in order of importance):
    1. What information is the server trying to phone home with?
    2. Is the SSL connect / handshake failure something to worry about?
    Thanks...

    #2
    Hello,

    Thank you for your detailed report and the opportunity to bring some lights on this subject.

    As mentioned in the Privacy Policy document (available online here) Axigen is sending periodical messages which contains general statistics data regarding each server.

    1.1. Software Product use

    When you are using the Software Product on your computer, server or servers, it periodically sends to us general information, such as the list and the number of domains, number of mailboxes, mailing lists used, the usage of add-ons and internal features, the languages used by the users (in aggregated form ? in total and and per-domain), etc.

    No end-user identifiable information is sent as part of these statistics collection process.

    We collect such information solely for statistical purposes as to be able to develop the Software Product and design related customized offers by reference to your needs.

    If you wish to inspect the content of the statistics, you can enable a carbon copy to an email address of your choosing from within the configuration of our Software Product.
    The Privacy Policy document is mentioned each time you are installing / upgrading Axigen, through the license screen you have to acknowledge before continuing the procedure.The license details are saved also on disk in /opt/axigen/share/doc/LICENSE file
    Privacy Policy

    Your privacy is very important to us. The Privacy Policy indicates the terms,
    conditions and grounds for which information might be collected when using the
    Software Product or accessing our WebSite. See more on our WebSite:
    https://www.axigen.com/legal/privacy-policy/.
    Now, based on your report we have made some changes on our mail gateways so you should not have any similar problems in the future.

    HTH,
    Ioan

    Comment


      #3
      Just one more note: similar information could be obtained via WebAdmin interface > Global Settings > General > Statistics, from where you could also configure the CC address for the periodical messages.

      Comment


        #4
        Thank you for clarifying this. I am happy to provide that information in exchange for access to the software. Unfortunately the "Send a copy" entry seems to be disabled in my UI, so it won't let me enter anything in it. Am I missing something?

        Thanks...

        Comment


          #5
          Hello,

          Most probably there is an UI bug - please disable "Send a copy" option and Save. Afterwards please enable "Send a copy" option + add the email address you like to receive a copy of these messages and choose to Save again.

          HTH,
          Ioan

          Comment


            #6
            AxigenStats.jpg

            I apologize if I'm being dense; but I don't see an option to disable the "Send a copy" setting...

            Thanks...

            Comment


              #7
              Hello,

              No problems - could you check your axigen.cfg for the following parameters and set them accordingly?

              Code:
              sendStatisticsEmail = yes
              postmasterStatisticsEmailAddress = "your@email.address"
              As usual, after any change into the axigen.cfg please restart your Axigen service and check if all is fine now.

              HTH,
              Ioan
              Last edited by indreias; December 11th, 2018, 01:46 PM.

              Comment


                #8
                That did resolve the issue with entering an address in the "send a copy" entry.

                Thanks...

                Comment

                Working...
                X