Kopano Postfix TLS problem

Hello together,

since a while I am running UCS Server with kopano. Everything worked nice, But since saturday I cant get and send email anymore.
I updated on thursday to the newest available versions:
WebApp:
3.3.0.610-25.1
Kopano Core:
8.3.1-35
Z-Push:
2.3.6+0

After uptdate everything was working. But on late friday or saturday it stopped working

In my mail.log following appears:


Jun 19 07:53:40 s1 postfix/qmgr[2991]: 4DDBC2C1C4E: to=<stefan@semsa.de>, relay=none, delay=25665, delays=25664/0.29/0/0, dsn=4.3.0, status=                                                                   deferred (mail transport unavailable)
Jun 19 07:53:40 s1 postfix/qmgr[2991]: CF5322C1C50: to=<root@s1.semsa.de>, orig_to=<root>, relay=none, delay=517, delays=517/0.33/0/0, dsn=4                                                                   .3.0, status=deferred (mail transport unavailable)
Jun 19 07:53:40 s1 postfix/qmgr[2991]: 211482C1C4D: to=<root@s1.semsa.de>, orig_to=<root>, relay=none, delay=2317, delays=2316/0.4/0/0, dsn=                                                                   4.3.0, status=deferred (mail transport unavailable)
Jun 19 07:53:41 s1 postfix/qmgr[2991]: 93E542C1C0A: to=<sandra@semsa.de>, relay=none, delay=75979, delays=75979/0.46/0/0, dsn=4.3.0, status=                                                                   deferred (mail transport unavailable)
Jun 19 07:54:03 s1 postfix/anvil[5067]: statistics: max connection rate 1/60s for (25:192.168.88.5) at Jun 19 07:50:43
Jun 19 07:54:03 s1 postfix/anvil[5067]: statistics: max connection count 1 for (25:192.168.88.5) at Jun 19 07:50:43
Jun 19 07:54:03 s1 postfix/anvil[5067]: statistics: max cache size 1 at Jun 19 07:50:43
Jun 19 07:57:00 s1 postfix/scache[5779]: statistics: start interval Jun 19 07:53:40
Jun 19 07:57:00 s1 postfix/scache[5779]: statistics: domain lookup hits=0 miss=2 success=0%
Jun 19 07:57:44 s1 fetchmail[3076]: 249 Nachrichten (249 gesehene) für sandra.soellner@gmx.de bei imap.gmx.net.
Jun 19 07:57:44 s1 fetchmail[3076]: 5180 Nachrichten (5180 gesehene) für s.soellner@gmail.com bei imap.gmail.com.
Jun 19 07:58:40 s1 postfix/qmgr[2991]: 640112C1C43: from=<root@s1.semsa.de>, size=1432, nrcpt=1 (queue active)
Jun 19 07:58:40 s1 postfix/qmgr[2991]: 55D732C0C17: from=<bounce-mc.us7_21433583.304501-s.soellner=gmail.com@mail249.atl171.mcdlv.net>, size=75727, nrcpt=1 (queue active)
Jun 19 07:58:40 s1 postfix/qmgr[2991]: E234A2C0C1B: from=<3Os9DWQcLALcklobmivvlrqrYb.Zlj@scoutcamp.bounces.google.com>, size=64770, nrcpt=1 (queue active)
Jun 19 07:58:40 s1 postfix/qmgr[2991]: EF9102C1C36: from=<root@s1.semsa.de>, size=1432, nrcpt=1 (queue active)
Jun 19 07:58:40 s1 postfix/smtp[6375]: 640112C1C43: to=<root@s1.semsa.de>, orig_to=<root>, relay=127.0.0.1[127.0.0.1]:10024, delay=8915, delays=8915/0.02/0/0, dsn=4.7.4, status=deferred (TLS is required, but was not offered by host 127.0.0.1[127.0.0.1])
Jun 19 07:58:40 s1 postfix/smtp[6376]: 55D732C0C17: to=<stefan@semsa.de>, relay=127.0.0.1[127.0.0.1]:10024, delay=235686, delays=235686/0.03/0/0, dsn=4.7.4, status=deferred (TLS is required, but was not offered by host 127.0.0.1[127.0.0.1])
Jun 19 07:58:40 s1 postfix/smtp[6375]: E234A2C0C1B: to=<stefan@semsa.de>, relay=127.0.0.1[127.0.0.1]:10024, delay=235685, delays=235685/0.1/0/0, dsn=4.7.4, status=deferred (TLS is required, but was not offered by host 127.0.0.1[127.0.0.1])
Jun 19 07:58:40 s1 postfix/smtp[6376]: EF9102C1C36: to=<root@s1.semsa.de>, orig_to=<root>, relay=127.0.0.1[127.0.0.1]:10024, delay=21514, delays=21514/0.13/0/0, dsn=4.7.4, status=deferred (TLS is required, but was not offered by host 127.0.0.1[127.0.0.1])

What can I do?

Best regards,
Stefan

Please run

ucr set mail/postfix/tls/client/level=none
postfix reload

until we have found a better solution.

Greetings
Daniel

THX,

it is working again!

Stefan

A bug fix has been released: http://errata.software-univention.de/ucs/4.2/49.html
Please update and return the UCR variable to its default:

ucr set mail/postfix/tls/client/level=may
postfix reload
univention-upgrade

Greetings
Daniel Tröder

Mastodon