Hallo, Björn,
vielen Dank für Ihren Tipp ! Die /var/log/maillog sieht so aus:
Feb 27 09:25:29 intranator postfix/smtpd[13656]: connect from intranator.domain.tld[127.0.0.1]
Feb 27 09:25:29 intranator postfix/smtpd[13656]: disconnect from intranator.domain.tld[127.0.0.1]
Feb 27 09:27:29 intranator postfix/smtpd[13703]: connect from intranator.domain.tld[127.0.0.1]
Feb 27 09:27:29 intranator postfix/smtpd[13703]: disconnect from intranator.domain.tld[127.0.0.1]
...
So geht es im 2-Minuten-Abstand weiter. (domain.tld ist Platzhalter für unser internes Netz).
Die /var/log/messages sieht so aus:
Feb 27 09:53:08 intranator pop30[9365]: starttls: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits reused) no authentication
Feb 27 09:53:08 intranator pop30[9365]: login: [192.168.0.160] werner PLAIN+TLS User logged in
Feb 27 09:53:22 intranator named[1896]: client 127.0.0.1#48811: view forward_fallback: RFC 1918 response from Internet for 2.0.168.192.in-addr.arpa
Feb 27 09:54:00 intranator connd[2257]: [connection_manager] online mode set to always online
Feb 27 09:54:00 intranator connd[2257]: [connection_manager] still use P1 as default provider
Feb 27 09:54:00 intranator connd[2257]: [connection_manager] don't update connections for online mode as connection [P1] is manually dialed
Feb 27 09:54:03 intranator connd[2257]: [connection_manager] online mode set to always online
Feb 27 09:54:03 intranator connd[2257]: [connection_manager] don't update connections for online mode as connection [P1] is manually dialed
Feb 27 09:54:05 intranator named[1896]: client 127.0.0.1#47383: view forward_fallback: RFC 1918 response from Internet for 2.0.168.192.in-addr.arpa
Feb 27 09:54:06 intranator lmtpunix[15186]: Delivered: <cmu-lmtpd-15186-1235724846-0@intranator.domain.tld> to mailbox: user.cyrus
Feb 27 09:54:08 intranator named[1896]: client 127.0.0.1#35696: view forward_fallback: RFC 1918 response from Internet for 160.0.168.192.in-addr.arpa
Feb 27 09:54:08 intranator pop30[9365]: starttls: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits reused) no authentication
Feb 27 09:54:08 intranator pop30[9365]: login: [192.168.0.160] werner PLAIN+TLS User logged in
Feb 27 09:55:08 intranator named[1896]: client 127.0.0.1#47175: view forward_fallback: RFC 1918 response from Internet for 160.0.168.192.in-addr.arpa
Feb 27 09:55:08 intranator pop30[12273]: starttls: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits reused) no authentication
Feb 27 09:55:08 intranator pop30[12273]: login: [192.168.0.160] werner PLAIN+TLS User logged in
Feb 27 09:55:22 intranator named[1896]: client 127.0.0.1#49824: view forward_fallback: RFC 1918 response from Internet for 2.0.168.192.in-addr.arpa
Feb 27 09:55:22 intranator kernel: DENY IN=ppp0 OUT= MAC= SRC=77.113.247.171 DST=93.104.56.31 LEN=64 TOS=0x00 PREC=0x00 TTL=120 ID=59477 DF PROTO=TCP SPT=1661 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0
Feb 27 09:55:25 intranator kernel: DENY IN=ppp0 OUT= MAC= SRC=77.113.247.171 DST=93.104.56.31 LEN=64 TOS=0x00 PREC=0x00 TTL=120 ID=59498 DF PROTO=TCP SPT=1661 DPT=445 WINDOW=65535 RES=0x00 SYN URGP=0
Feb 27 09:56:05 intranator named[1896]: client 127.0.0.1#46399: view forward_fallback: RFC 1918 response from Internet for 2.0.168.192.in-addr.arpa
Feb 27 09:56:06 intranator lmtpunix[15334]: Delivered: <cmu-lmtpd-15334-1235724966-0@intranator.domain.tld> to mailbox: user.cyrus
Feb 27 09:56:08 intranator named[1896]: client 127.0.0.1#55826: view forward_fallback: RFC 1918 response from Internet for 160.0.168.192.in-addr.arpa
Feb 27 09:56:08 intranator pop30[12273]: starttls: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits reused) no authentication
Feb 27 09:56:08 intranator pop30[12273]: login: [192.168.0.160] werner PLAIN+TLS User logged in
Feb 27 09:57:08 intranator named[1896]: client 127.0.0.1#58115: view forward_fallback: RFC 1918 response from Internet for 160.0.168.192.in-addr.arpa
Feb 27 09:57:08 intranator pop30[9365]: starttls: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits reused) no authentication
Feb 27 09:57:08 intranator pop30[9365]: login: [192.168.0.160] werner PLAIN+TLS User logged in
Feb 27 09:57:22 intranator named[1896]: client 127.0.0.1#56207: view forward_fallback: RFC 1918 response from Internet for 2.0.168.192.in-addr.arpa
Feb 27 09:57:23 intranator kernel: DENY IN=ppp0 OUT= MAC= SRC=93.104.126.186 DST=93.104.56.31 LEN=52 TOS=0x00 PREC=0x00 TTL=63 ID=19478 DF PROTO=TCP SPT=21706 DPT=445 WINDOW=60352 RES=0x00 SYN URGP=0
Feb 27 09:57:32 intranator named[1896]: client 127.0.0.1#60460: view forward_fallback: RFC 1918 response from Internet for 160.0.168.192.in-addr.arpa
Leider kann ich keine signifikate Veränderung erkennen, wenn ich die fragliche Funktion auslöse. Um ehrlich zu sein: Ich kann gar keine Veränderung erkennen.
Auch treten die Zeilen "starttls: TLSv1 with cipher ...no authentication" unabhängig von dem "Problem" auf.
Sorry, ich bin etwas ratlos ...
Danke für jeden Tipp; viele Grüße,
Werner