Package: debian-edu-config Version: 2.11.56+deb11u2 Severity: serious Control: found -1 2.12.15Reporting this for d-e-c in bullseye, it seems to apply to d-e-c in unstable, as well.
When a client on the Debian Edu network (.intern, 10.0.0.0/8) tries to send system mails to postoffice.intern aka TJENER, then exim4 on TJENER won't accept these SMTP connects without proper authentication:
2022-01-13 16:27:13 H=dlw-102.intern (dlw-102) [10.1.1.2] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256 CV=no F=<root@postoffice.intern> rejected RCPT <root@postoffice.intern>: SMTP server requires authentication. Check your SMTP client configuration. 2022-01-13 16:27:13 H=dlw-102.intern (dlw-102) [10.1.1.2] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256 CV=no F=<> rejected RCPT <root@postoffice.intern>: SMTP server requires authentication. Check your SMTP client configuration. 2022-01-13 16:29:55 H=dlw-104.intern (dlw-104) [10.1.1.4] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256 CV=no F=<root@postoffice.intern> rejected RCPT <root@postoffice.intern>: SMTP server requires authentication. Check your SMTP client configuration. 2022-01-13 16:29:56 H=dlw-104.intern (dlw-104) [10.1.1.4] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256 CV=no F=<> rejected RCPT <root@postoffice.intern>: SMTP server requires authentication. Check your SMTP client configuration. 2022-01-13 16:29:58 H=dlw-103.intern (dlw-103) [10.1.1.3] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256 CV=no F=<root@postoffice.intern> rejected RCPT <root@postoffice.intern>: SMTP server requires authentication. Check your SMTP client configuration. 2022-01-13 16:29:58 H=dlw-103.intern (dlw-103) [10.1.1.3] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256 CV=no F=<> rejected RCPT <root@postoffice.intern>: SMTP server requires authentication. Check your SMTP client configuration. 2022-01-13 16:30:55 H=dlw-116.intern (dlw-116) [10.1.1.16] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256 CV=no F=<root@postoffice.intern> rejected RCPT <root@postoffice.intern>: SMTP server requires authentication. Check your SMTP client configuration. 2022-01-13 16:30:55 H=dlw-116.intern (dlw-116) [10.1.1.16] X=TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256 CV=no F=<> rejected RCPT <root@postoffice.intern>: SMTP server requires authentication. Check your SMTP client configuration.
This clobbers log files on the server and also on all clients (connection failures reported every n minutes).
Greets, Mike -- DAS-NETZWERKTEAM c\o Technik- und Ökologiezentrum Eckernförde Mike Gabriel, Marienthaler Str. 17, 24340 Eckernförde mobile: +49 (1520) 1976 148 landline: +49 (4351) 850 8940 GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de
Attachment:
pgpqaImKmh1e3.pgp
Description: Digitale PGP-Signatur