From: Thanachit Vichianchay on
Hi, all

My Postfix is configured as an email gateway for a domain.
and enable SMTP Authentication, TLS encryption to enhance the security of
email traffic.
but I get many of these warnings in my postfix log.

May 6 12:55:42 mailscan1 postfix/smtpd[19482]: [ID 947731 mail.warning]
warning: network_biopair_interop: error reading 5 bytes from the network:
Connection reset by peer

I try to read the document about postfix TLS but I'm still confuse. and I
want to know

*1. What is the cause of these warnings?, Is it a kind of an error?
2. What is effect of this warning? , eg, the email is dropped while
establish the SMTP connection.
3. How could fix this warning? or some docs or papers to looking for.?*

and here, the output from postconf -n.

alias_database = dbm:/etc/postfix/chaokhunaliases
alias_maps = dbm:/etc/postfix/chaokhunaliases
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
html_directory = no
inet_interfaces = all
mail_owner = postfix
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
mydestination = mailscan.kmitl.ac.th, kmitl.ac.th, localhost
mydomain = kmitl.ac.th
myhostname = mailscan.kmitl.ac.th
mynetworks = cidr:/etc/postfix/network_table
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = no
recipient_delimiter = +
relayhost = [161.246.254.133]
sample_directory = /etc/postfix
sendmail_path = /usr/lib/sendmail
setgid_group = postdrop
smtp_tls_note_starttls_offer = yes
smtp_use_tls = yes
smtpd_banner = $myhostname ESMTP
smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks,
reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_tls_cert_file = /etc/postfix/certs/mailscan.crt
smtpd_tls_key_file = /etc/postfix/certs/mailscan.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
swap_bangpath = yes
tls_random_source = dev:/dev/urandom
transport_maps = $default_database_type:$config_directory/transportList
unknown_local_recipient_reject_code = 450


Thanks,

Thanachit. Vic
--
¸¹ªÔµ ÇÔàªÕÂéÒÂ
Thanachit Vichianchay
Junior, Faculty of Information Technology
King Mongkut's Institute of Technology Ladkrabang