Re: [Assp-test] Trouble with TLS or Workers

[Martin V. <Mar...@mh...>]

Hi,

I am again.

My STARTTLS Problem is not solved and sometimes the ASSP hangs on the first command.
Over the time all workers are in use and the ASSP stopped working vor me. 

...over 2 hours for one failed STARTTLS....

# TLS	WKR(Con)	Remote IP	HELO	From	Rcpt	CMD	RP/RY/NP/WL	SPAM/score	Bytes	Duration	Idle/Damping
1 __	6(1)	38.132.10.58	esa2.dsfw-outbound.c3s2.ip			STARTTLS	IN	no / 0	0	1466678923	8425
2 __	7(1)	94.140.120.13	vipfile24.ru			STARTTLS	IN	no / 		1466678923	8424

Only a restart work.

After I couldn´t find any solution for my STARTTLS Problem I would make that the workers timed out, but I already have set it up:

NumComWorkers:=7
ReservedOutboundWorkers:=0
autoRestartDiedThreads:=1
MaxFinConWaitTime:=45
MonitorMainThread:=1
EnableHighPerformance:=0
ThreadCycleTime:=3000
MaintThreadCycleTime:=3000
RebuildThreadCycleTime:=30
ThreadStackSize:=0
IOEngine:=0
MinPollTime:=2
WorkerCPUPriority:=0
asspCpuAffinity:=-1
PreAllocMem:=100000
FreeupMemoryGarbage:=1
ConnectionTransferTimeOut:=30

For my feeling I have this Issue since 2 or 3 month
Do I have a problem with my setup or what can I do for my problem?

Has anyone an idea?

Thank you
Regards
Martin

-----Ursprüngliche Nachricht-----
Von: Martin Voßloh [mailto:Mar...@mh...] 
Gesendet: Dienstag, 21. Juni 2016 09:58
An: ass...@li...
Betreff: [Assp-test] Trouble with TLS

ASSP version 2.5.2(16158)

Hello,

I have very often trouble with TLS and the hints from K Post by changing the Ciphers and so on are not fixing my problems.
The problems will shown in the SMTP Connection List:
# TLS	WKR(Con)	Remote IP	HELO	From	Rcpt	CMD	RP/RY/NP/WL	SPAM/score	Bytes	Duration	Idle/Damping
1 __	2(1)	10.10.10.10	mx.domain.de			STARTTLS	IN	no / 0	0	1466491847	1749

Sometimes the Duration time is growing up for more than 80 sessions over TLS.
Then no STARTTLS ist working and the SMTP Connection are blocked.

Is there any setting for "MAX Duration Time" so I could break up a session?
Some IP´s I have exclude from SSL-failed-Cache (noBanFailedSSLIP) but this has not helped.

Any idea?

Regards
Martin








------------------------------------------------------------------------------
Attend Shape: An AT&T Tech Expo July 15-16. Meet us at AT&T Park in San Francisco, CA to explore cutting-edge tech and listen to tech luminaries present their vision of the future. This family event has something for everyone, including kids. Get more information and register today.
http://sdm.link/attshape
_______________________________________________
Assp-test mailing list
Ass...@li...
https://lists.sourceforge.net/lists/listinfo/assp-test