Hey there,
Hope you all well!
Today morning our customers started to reporting about missing incoming emails since yesetrday around 17:00.
Today morning my colleague logged into the PMG server on terminal and restarterd the postfix service and it looked like solved the problem.
However I started to investigate what whas the issue here, i found that the postfix service running since 1 week 6 days:
"
root@mailfilter:~# systemctl status postfix
● postfix.service - Postfix Mail Transport Agent
Loaded: loaded (/lib/systemd/system/postfix.service; enabled; preset: enabled)
Active: active (exited) since Tue 2025-09-23 10:29:25 CEST; 1 week 6 days ago
Docs: man
ostfix(1)
Process: 2228956 ExecStart=/bin/true (code=exited, status=0/SUCCESS)
Main PID: 2228956 (code=exited, status=0/SUCCESS)
CPU: 931us
Sep 23 10:29:25 mailfilter systemd[1]: Starting postfix.service - Postfix Mail Transport Agent...
Sep 23 10:29:25 mailfilter systemd[1]: Finished postfix.service - Postfix Mail Transport Agent.
"
After that I started to check the logs, especially the mail.log and found this:
"
root@mailfilter:~# head -102334 /var/log/mail.log | tail -10
2025-10-06T13:15:50.992295+02:00 mailfilter postfix/smtpd[2625794]: connect from m32-82.mailgun.net[69.72.32.82]
2025-10-06T13:15:51.697591+02:00 mailfilter postfix/smtpd[2625794]: SSL_accept error from m32-82.mailgun.net[69.72.32.82]: -1
2025-10-06T13:15:51.697697+02:00 mailfilter postfix/smtpd[2625794]: warning: TLS library problem: error:0A000412:SSL routines::sslv3 alert bad certificate:../ssl/record/rec_layer_s3.c:1605:SSL alert number 42:
2025-10-06T13:15:51.697740+02:00 mailfilter postfix/smtpd[2625794]: lost connection after STARTTLS from m32-82.mailgun.net[69.72.32.82]
2025-10-06T13:15:51.697778+02:00 mailfilter postfix/smtpd[2625794]: disconnect from m32-82.mailgun.net[69.72.32.82] ehlo=1 starttls=0/1 commands=1/2
2025-10-07T09:15:40.272550+02:00 mailfilter postfix/postscreen[2617971]: CONNECT from [212.6.174.181]:34245 to [10.31.60.5]:25
2025-10-07T09:15:44.523356+02:00 mailfilter postfix/postscreen[2617971]: CONNECT from [94.143.107.87]:56950 to [10.31.60.5]:25
2025-10-07T09:15:44.606558+02:00 mailfilter postfix/postscreen[2617971]: CONNECT from [209.85.208.175]:53479 to [10.31.60.5]:25
2025-10-07T09:15:44.642134+02:00 mailfilter postfix/postscreen[2617971]: CONNECT from [40.93.64.69]:46005 to [10.31.60.5]:25
2025-10-07T09:15:44.659799+02:00 mailfilter postfix/postscreen[2617971]: PASS OLD [212.6.174.181]:34245
"
After this I started to get the journalctl logs and found that ther is no more log for that day, its just ended at Oct 06 13:15:52:
"
root@mailfilter:~# journalctl -xe --since "2025-10-06 13:15:50" --until "2025-10-06 23:59:00" | cat
Oct 06 13:15:50 mailfilter postfix/postscreen[2617971]: CONNECT from [69.72.32.82]:57434 to [10.31.60.5]:25
Oct 06 13:15:50 mailfilter postfix/postscreen[2617971]: PASS OLD [69.72.32.82]:57434
Oct 06 13:15:50 mailfilter postfix/smtpd[2625794]: connect from m32-82.mailgun.net[69.72.32.82]
Oct 06 13:15:51 mailfilter postfix/smtpd[2625794]: SSL_accept error from m32-82.mailgun.net[69.72.32.82]: -1
Oct 06 13:15:51 mailfilter postfix/smtpd[2625794]: warning: TLS library problem: error:0A000412:SSL routines::sslv3 alert bad certificate:../ssl/record/rec_layer_s3.c:1605:SSL alert number 42:
Oct 06 13:15:51 mailfilter postfix/smtpd[2625794]: lost connection after STARTTLS from m32-82.mailgun.net[69.72.32.82]
Oct 06 13:15:51 mailfilter postfix/smtpd[2625794]: disconnect from m32-82.mailgun.net[69.72.32.82] ehlo=1 starttls=0/1 commands=1/2
Oct 06 13:15:52 mailfilter postfix/postscreen[2617971]: CONNECT from [212.6.174.181]:34245 to [10.31.60.5]:25
root@mailfilter:~#
"
Can you help to investigate more deeply to understand the situation?
Please let me know if I can provide more information about the situation.
Thanks in advance,
Zoltan Helembai
Hope you all well!
Today morning our customers started to reporting about missing incoming emails since yesetrday around 17:00.
Today morning my colleague logged into the PMG server on terminal and restarterd the postfix service and it looked like solved the problem.
However I started to investigate what whas the issue here, i found that the postfix service running since 1 week 6 days:
"
root@mailfilter:~# systemctl status postfix
● postfix.service - Postfix Mail Transport Agent
Loaded: loaded (/lib/systemd/system/postfix.service; enabled; preset: enabled)
Active: active (exited) since Tue 2025-09-23 10:29:25 CEST; 1 week 6 days ago
Docs: man
ostfix(1)Process: 2228956 ExecStart=/bin/true (code=exited, status=0/SUCCESS)
Main PID: 2228956 (code=exited, status=0/SUCCESS)
CPU: 931us
Sep 23 10:29:25 mailfilter systemd[1]: Starting postfix.service - Postfix Mail Transport Agent...
Sep 23 10:29:25 mailfilter systemd[1]: Finished postfix.service - Postfix Mail Transport Agent.
"
After that I started to check the logs, especially the mail.log and found this:
"
root@mailfilter:~# head -102334 /var/log/mail.log | tail -10
2025-10-06T13:15:50.992295+02:00 mailfilter postfix/smtpd[2625794]: connect from m32-82.mailgun.net[69.72.32.82]
2025-10-06T13:15:51.697591+02:00 mailfilter postfix/smtpd[2625794]: SSL_accept error from m32-82.mailgun.net[69.72.32.82]: -1
2025-10-06T13:15:51.697697+02:00 mailfilter postfix/smtpd[2625794]: warning: TLS library problem: error:0A000412:SSL routines::sslv3 alert bad certificate:../ssl/record/rec_layer_s3.c:1605:SSL alert number 42:
2025-10-06T13:15:51.697740+02:00 mailfilter postfix/smtpd[2625794]: lost connection after STARTTLS from m32-82.mailgun.net[69.72.32.82]
2025-10-06T13:15:51.697778+02:00 mailfilter postfix/smtpd[2625794]: disconnect from m32-82.mailgun.net[69.72.32.82] ehlo=1 starttls=0/1 commands=1/2
2025-10-07T09:15:40.272550+02:00 mailfilter postfix/postscreen[2617971]: CONNECT from [212.6.174.181]:34245 to [10.31.60.5]:25
2025-10-07T09:15:44.523356+02:00 mailfilter postfix/postscreen[2617971]: CONNECT from [94.143.107.87]:56950 to [10.31.60.5]:25
2025-10-07T09:15:44.606558+02:00 mailfilter postfix/postscreen[2617971]: CONNECT from [209.85.208.175]:53479 to [10.31.60.5]:25
2025-10-07T09:15:44.642134+02:00 mailfilter postfix/postscreen[2617971]: CONNECT from [40.93.64.69]:46005 to [10.31.60.5]:25
2025-10-07T09:15:44.659799+02:00 mailfilter postfix/postscreen[2617971]: PASS OLD [212.6.174.181]:34245
"
After this I started to get the journalctl logs and found that ther is no more log for that day, its just ended at Oct 06 13:15:52:
"
root@mailfilter:~# journalctl -xe --since "2025-10-06 13:15:50" --until "2025-10-06 23:59:00" | cat
Oct 06 13:15:50 mailfilter postfix/postscreen[2617971]: CONNECT from [69.72.32.82]:57434 to [10.31.60.5]:25
Oct 06 13:15:50 mailfilter postfix/postscreen[2617971]: PASS OLD [69.72.32.82]:57434
Oct 06 13:15:50 mailfilter postfix/smtpd[2625794]: connect from m32-82.mailgun.net[69.72.32.82]
Oct 06 13:15:51 mailfilter postfix/smtpd[2625794]: SSL_accept error from m32-82.mailgun.net[69.72.32.82]: -1
Oct 06 13:15:51 mailfilter postfix/smtpd[2625794]: warning: TLS library problem: error:0A000412:SSL routines::sslv3 alert bad certificate:../ssl/record/rec_layer_s3.c:1605:SSL alert number 42:
Oct 06 13:15:51 mailfilter postfix/smtpd[2625794]: lost connection after STARTTLS from m32-82.mailgun.net[69.72.32.82]
Oct 06 13:15:51 mailfilter postfix/smtpd[2625794]: disconnect from m32-82.mailgun.net[69.72.32.82] ehlo=1 starttls=0/1 commands=1/2
Oct 06 13:15:52 mailfilter postfix/postscreen[2617971]: CONNECT from [212.6.174.181]:34245 to [10.31.60.5]:25
root@mailfilter:~#
"
Can you help to investigate more deeply to understand the situation?
Please let me know if I can provide more information about the situation.
Thanks in advance,
Zoltan Helembai
Last edited: