• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 387
  • Last Modified:

SuSe + Postfix ... lagged

Hello,

my problem is that the mailserver on my system isn't sending messages any more and as I can see it is lagged because of many mail queues.

/var/log/mail is showing many messages like:
---------------------------------------------------------------------------------------
Oct 29 01:51:23 myserver postfix/smtp[1476]: connect to angelfire.com[209.202.218.12]: Connection timed out (port 25)
Oct 29 01:51:23 myserver postfix/smtp[1476]: 87CD7490B7A: to=<earlnjoy@angelfire.com>, relay=none, delay=182366, status=deferred (...
Oct 29 01:51:23 myserver postfix/qmgr[1331]: 8DD4A492478: to=<dominicl@angelfire.com>, relay=none, delay=182037, status=deferred (...
Oct 29 01:51:24 myserver postfix/qmgr[1331]: 87D414945E9: to=<p.argo@angelfire.com>, relay=none, delay=179369, status=deferred (co...
Oct 29 01:51:24 myserver postfix/qmgr[1331]: CEC1E49D061: from=<wwwrun@myserver.mydomain.com>, size=6270, nrcpt=1 (queue active)...
Oct 29 01:51:24 myserver postfix/qmgr[1331]: DEFAD494934: from=<wwwrun@myserver.mydomain.com>, size=2377, nrcpt=1 (queue active)..
Oct 29 01:51:24 myserver postfix/qmgr[1331]: CE18449D2D2: from=<wwwrun@myserver.mydomain.com>, size=6272, nrcpt=1 (queue active)..
---------------------------------------------------------------------------------------

Otherwise "relay" is activated for security reasons and without AUTH nobody can send anything here.

Does anybody has an idea why this mailserver is doing so and how could I solve this problem?!

BlueJ
0
BlueJ
Asked:
BlueJ
  • 3
  • 3
1 Solution
 
grbladesCommented:
So 'mailq' shows many mails stuck in the queue?

You are relaying all email to a specific mail server?
What server are you using? Is it the angelfire.com mnetioned in the log above?
0
 
BlueJAuthor Commented:

Hello grblades,

With relaying, I meant the SMTP-auth.
I don't have any relay domains or relay hosts configured in main.cf

The restrictions configuration looks like:
----------------------------------------
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_client_restrictions =
strict_rfc821_envelopes = no
smtpd_recipient_restrictions = permit_sasl_authenticated, reject_unauth_destination
...
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
...
----------------------------------------

My server doesn't has anything with "angelfire.com" to do, it was just an example found in the logfile. They can be found many other hosts.

But what I notice that the most mails seems to be send with apache:
"Oct 30 01:04:54 p15125488 postfix/qmgr[23250]: 7447D492807: from=<wwwrun@myserver.mydomain.com>, size=6270, nrcpt=1 (queue active)"

Am I right ?

0
 
grbladesCommented:
Can you post the output of the 'mailq' command as this should show the reason why the emails were deferred.
0
Never miss a deadline with monday.com

The revolutionary project management tool is here!   Plan visually with a single glance and make sure your projects get done.

 
BlueJAuthor Commented:
I had to delete all my mails in queue because the postfix server was nearly stoned. They were over 300,000 mails in queue.

Now I have nothing in queue but the webserver-user "wwwrun" is still sending suspicious mails:

Nov  1 19:22:06 myserver postfix/pickup[31560]: 6969D49004C: uid=30 from=<wwwrun>
Nov  1 19:22:06 myserver postfix/cleanup[31765]: 6969D49004C: message-id=<20041101182206.6969D49004C@myserver.mydomain.com>
Nov  1 19:22:06 myserver postfix/qmgr[31561]: 209F8490041: skipped, still being delivered
Nov  1 19:22:06 myserver postfix/qmgr[31561]: 3E859490045: from=<admin@staffadministrator.com>, size=3316, nrcpt=2 (queue active)  
Nov  1 19:22:06 myserver postfix/qmgr[31561]: 6969D49004C: from=<wwwrun@myserver.mydomain.com>, size=625, nrcpt=1 (queue active)


In the apache logfiles is nothing unusual.



0
 
grbladesCommented:
What emails should apache be sending?
Is it a public webserver?
Are you sure you dont have a form2mail script configured insecurely which people are using to send spam?

Can you stop postfix delivering email and then look at one of the mails in the queue to see what it contains?
0
 
BlueJAuthor Commented:

Sorry for the late answer grblades, after I did a forced "flush" of the mailqueue the situation became normal.

Thanx
0

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now