SuSe + Postfix ... lagged

Hello,

my problem is that the mailserver on my system isn't sending messages any more and as I can see it is lagged because of many mail queues.

/var/log/mail is showing many messages like:
---------------------------------------------------------------------------------------
Oct 29 01:51:23 myserver postfix/smtp[1476]: connect to angelfire.com[209.202.218.12]: Connection timed out (port 25)
Oct 29 01:51:23 myserver postfix/smtp[1476]: 87CD7490B7A: to=<earlnjoy@angelfire.com>, relay=none, delay=182366, status=deferred (...
Oct 29 01:51:23 myserver postfix/qmgr[1331]: 8DD4A492478: to=<dominicl@angelfire.com>, relay=none, delay=182037, status=deferred (...
Oct 29 01:51:24 myserver postfix/qmgr[1331]: 87D414945E9: to=<p.argo@angelfire.com>, relay=none, delay=179369, status=deferred (co...
Oct 29 01:51:24 myserver postfix/qmgr[1331]: CEC1E49D061: from=<wwwrun@myserver.mydomain.com>, size=6270, nrcpt=1 (queue active)...
Oct 29 01:51:24 myserver postfix/qmgr[1331]: DEFAD494934: from=<wwwrun@myserver.mydomain.com>, size=2377, nrcpt=1 (queue active)..
Oct 29 01:51:24 myserver postfix/qmgr[1331]: CE18449D2D2: from=<wwwrun@myserver.mydomain.com>, size=6272, nrcpt=1 (queue active)..
---------------------------------------------------------------------------------------

Otherwise "relay" is activated for security reasons and without AUTH nobody can send anything here.

Does anybody has an idea why this mailserver is doing so and how could I solve this problem?!

BlueJ
BlueJAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

grbladesCommented:
So 'mailq' shows many mails stuck in the queue?

You are relaying all email to a specific mail server?
What server are you using? Is it the angelfire.com mnetioned in the log above?
0
BlueJAuthor Commented:

Hello grblades,

With relaying, I meant the SMTP-auth.
I don't have any relay domains or relay hosts configured in main.cf

The restrictions configuration looks like:
----------------------------------------
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_client_restrictions =
strict_rfc821_envelopes = no
smtpd_recipient_restrictions = permit_sasl_authenticated, reject_unauth_destination
...
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
...
----------------------------------------

My server doesn't has anything with "angelfire.com" to do, it was just an example found in the logfile. They can be found many other hosts.

But what I notice that the most mails seems to be send with apache:
"Oct 30 01:04:54 p15125488 postfix/qmgr[23250]: 7447D492807: from=<wwwrun@myserver.mydomain.com>, size=6270, nrcpt=1 (queue active)"

Am I right ?

0
grbladesCommented:
Can you post the output of the 'mailq' command as this should show the reason why the emails were deferred.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

BlueJAuthor Commented:
I had to delete all my mails in queue because the postfix server was nearly stoned. They were over 300,000 mails in queue.

Now I have nothing in queue but the webserver-user "wwwrun" is still sending suspicious mails:

Nov  1 19:22:06 myserver postfix/pickup[31560]: 6969D49004C: uid=30 from=<wwwrun>
Nov  1 19:22:06 myserver postfix/cleanup[31765]: 6969D49004C: message-id=<20041101182206.6969D49004C@myserver.mydomain.com>
Nov  1 19:22:06 myserver postfix/qmgr[31561]: 209F8490041: skipped, still being delivered
Nov  1 19:22:06 myserver postfix/qmgr[31561]: 3E859490045: from=<admin@staffadministrator.com>, size=3316, nrcpt=2 (queue active)  
Nov  1 19:22:06 myserver postfix/qmgr[31561]: 6969D49004C: from=<wwwrun@myserver.mydomain.com>, size=625, nrcpt=1 (queue active)


In the apache logfiles is nothing unusual.



0
grbladesCommented:
What emails should apache be sending?
Is it a public webserver?
Are you sure you dont have a form2mail script configured insecurely which people are using to send spam?

Can you stop postfix delivering email and then look at one of the mails in the queue to see what it contains?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
BlueJAuthor Commented:

Sorry for the late answer grblades, after I did a forced "flush" of the mailqueue the situation became normal.

Thanx
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Linux

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.