Solved

Sendmail failure

Posted on 2004-04-15
5
798 Views
Last Modified: 2013-12-17
Apr 14 09:49:12 server sendmail[30802]: i3E1eriB030802: collect: premature EOM: unexpected close
Apr 14 09:49:12 server sendmail[30802]: i3E1eriB030802: collect: unexpected close on connection from [203.xxx.xxx.xxx], sender=<claudia@rising.com>
Apr 14 09:49:12 servser sendmail[30802]: i3E1eriB030802: from=<claudia@rising.com>, size=3, class=0, nrcpts=1, proto=ESMTP, daemon=MTA, relay=[203.xxx.xxx.xxx]


My platform is that a Exchange server auto forward a mail to Redhat sendmail server. But the Exchange server sometimes hold many mails on queue for last few weeks. In fact, the Exchange server likely waits first mail timeout, and then try second one again. So very slowly and mail delay.... :(

By the way I also found out the above error in maillog at the same time, What's happened ?


One more,
1. I make sure those are bulk mails by virus as "claudia@rising.com" & "nobody@www" (not existing)
2. Is it caused by sendmail itself (MailScanner installed in Redhat) ?


Help please ?


0
Comment
Question by:rhinoceros
  • 3
  • 2
5 Comments
 
LVL 40

Expert Comment

by:jlevie
ID: 10834280
It sounds like there's a network problem between the two systems or some internal problem on the exchange box. Figuring out where the problem lies will be key in solving it.

Does the Sendmail server have problems receiving mail from other servers?

What is the network topology? From the log it looks like the exchange box has a routable IP. Are both machines on the same LAN or is there a firewall in between?

Does the exchange server route all non-local mail to the sendmail box?
0
 
LVL 13

Author Comment

by:rhinoceros
ID: 10838837
1. I have two Exchange servers on two different sites (those servers are also forward a mail to Sendmail server), the case was happened from two servers for several times in last few weeks.

2.  (2 Exchange & 1 Sendmail) Three servers are located on different sites. Yes, I have software firewall on both Exchange servers, and 'firestarter' firewall installed on Sendmail server. And I did not change any configuration as before. But the case is not always happened. Today, all services are normally running. :(

3. I have used Exchange 'forward' function. That's mean when the users received a mail, which will auto forward one copy to Sendmail server.


I must find out the solution to avoid same case happen again. Thanks help.
0
 
LVL 40

Expert Comment

by:jlevie
ID: 10839000
If the condition comes and goes without any changes to the firewalls at any of the sites it beging to sound more like a marginal network link or an overloaded server. It is easy enough to check the sendmail server by running 'top' or executing 'uptime' and looking at the load average. Numbers in the 10+ range would be someting to become concerned about.

Transient network problems are more difficult to diagnose. One qualitative test is to do an FTP or scp upload from an exchange server that is having problems at various time when things are working properly to get a base line of the sort of bandwidth available and then to repeat the test when things aren't working well. If there's a significant difference is bandwidth available to scp/FTP when things are bad it could point to a problem with the Internet link at either end.
0
 
LVL 13

Author Comment

by:rhinoceros
ID: 11395317
--------------------- sendmail Begin ------------------------

Connections Rejected due to load average::
   Load Avg 12: 1 Times(s)

Unknown users:
   010986@mail.com: 2 Times(s)
   ator.com@mail.com: 3 Times(s)

Unknown hosts:
   dairy-farn.com.hk: 1 Times(s)

Did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA:
   203.xxx.xxx.xx    :   12 Time(s)
   203.xx.xxx.xx     :    5 Time(s)
   222.xxx.xxx.xxx   :    1 Time(s)

**Unmatched Entries**
  DSN: Return receipt: 12 Time(s)
  accepting connections again for daemon MTA: 1 Time(s)

---------------------- sendmail End -------------------------

I looked for something from log report, any hint?  If it is really overload, what I can do? Any configuration I can change?

In fact, the 'forward' function of Exchange server, which is only redirect the mail to other server (no filter). Therefore I believe that if the exchange is attacked by some bulk mails or virus, then Linux server is also attacked by those bulk mails to cause a large amount traffic at the same time...



0
 
LVL 40

Accepted Solution

by:
jlevie earned 100 total points
ID: 11406824
Well, the mail server is reaching a lod level occasionally that causes it to reject connections (one per the above), but that's not likely to be the cause of the queue backup on the exchange boxes.

The error messages in the question are more likely to be the result of some network problem or an issue on the exchange servers. From Sendmail's point of view it was the remote exchange box that dropped the connection. As mentioned that could be as a result of a network problem at Sendmail server or it could be a problem anywhere in the network path or at the exchange box. Capturing a sniffer trace at the sendmail server and at the exchange server when one of these errors is logged would probably reveal where the problem is.
0

Featured Post

Why spend so long doing email signature updates?

Do you spend loads of your time carrying out email signature updates? Not very interesting are they? Don’t let signature updates get you down. Let Exclaimer Cloud - Signatures for Office 365 make managing email signatures a breeze.

Join & Write a Comment

Nearly six years ago I was hired by a company to be their senior server engineer. One of my first projects was to implement Exchange Server 2007 on a Windows Server 2008 Single Copy Cluster for high availability. That was the easy part; read on to l…
Easy CSR creation in Exchange 2007,2010 and 2013
Familiarize people with the process of utilizing SQL Server stored procedures from within Microsoft Access. Microsoft Access is a very powerful client/server development tool. One of the SQL Server objects that you can interact with from within Micr…
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now