Solved

SuSe + Postfix ... lagged

Posted on 2004-10-28
373 Views
Last Modified: 2013-12-16
Hello,

my problem is that the mailserver on my system isn't sending messages any more and as I can see it is lagged because of many mail queues.

/var/log/mail is showing many messages like:
---------------------------------------------------------------------------------------
Oct 29 01:51:23 myserver postfix/smtp[1476]: connect to angelfire.com[209.202.218.12]: Connection timed out (port 25)
Oct 29 01:51:23 myserver postfix/smtp[1476]: 87CD7490B7A: to=<earlnjoy@angelfire.com>, relay=none, delay=182366, status=deferred (...
Oct 29 01:51:23 myserver postfix/qmgr[1331]: 8DD4A492478: to=<dominicl@angelfire.com>, relay=none, delay=182037, status=deferred (...
Oct 29 01:51:24 myserver postfix/qmgr[1331]: 87D414945E9: to=<p.argo@angelfire.com>, relay=none, delay=179369, status=deferred (co...
Oct 29 01:51:24 myserver postfix/qmgr[1331]: CEC1E49D061: from=<wwwrun@myserver.mydomain.com>, size=6270, nrcpt=1 (queue active)...
Oct 29 01:51:24 myserver postfix/qmgr[1331]: DEFAD494934: from=<wwwrun@myserver.mydomain.com>, size=2377, nrcpt=1 (queue active)..
Oct 29 01:51:24 myserver postfix/qmgr[1331]: CE18449D2D2: from=<wwwrun@myserver.mydomain.com>, size=6272, nrcpt=1 (queue active)..
---------------------------------------------------------------------------------------

Otherwise "relay" is activated for security reasons and without AUTH nobody can send anything here.

Does anybody has an idea why this mailserver is doing so and how could I solve this problem?!

BlueJ
0
Question by:BlueJ
    6 Comments
     
    LVL 36

    Expert Comment

    by:grblades
    So 'mailq' shows many mails stuck in the queue?

    You are relaying all email to a specific mail server?
    What server are you using? Is it the angelfire.com mnetioned in the log above?
    0
     

    Author Comment

    by:BlueJ

    Hello grblades,

    With relaying, I meant the SMTP-auth.
    I don't have any relay domains or relay hosts configured in main.cf

    The restrictions configuration looks like:
    ----------------------------------------
    smtpd_sender_restrictions = hash:/etc/postfix/access
    smtpd_client_restrictions =
    strict_rfc821_envelopes = no
    smtpd_recipient_restrictions = permit_sasl_authenticated, reject_unauth_destination
    ...
    smtpd_sasl_auth_enable = yes
    smtpd_sasl_security_options = noanonymous
    ...
    ----------------------------------------

    My server doesn't has anything with "angelfire.com" to do, it was just an example found in the logfile. They can be found many other hosts.

    But what I notice that the most mails seems to be send with apache:
    "Oct 30 01:04:54 p15125488 postfix/qmgr[23250]: 7447D492807: from=<wwwrun@myserver.mydomain.com>, size=6270, nrcpt=1 (queue active)"

    Am I right ?

    0
     
    LVL 36

    Expert Comment

    by:grblades
    Can you post the output of the 'mailq' command as this should show the reason why the emails were deferred.
    0
     

    Author Comment

    by:BlueJ
    I had to delete all my mails in queue because the postfix server was nearly stoned. They were over 300,000 mails in queue.

    Now I have nothing in queue but the webserver-user "wwwrun" is still sending suspicious mails:

    Nov  1 19:22:06 myserver postfix/pickup[31560]: 6969D49004C: uid=30 from=<wwwrun>
    Nov  1 19:22:06 myserver postfix/cleanup[31765]: 6969D49004C: message-id=<20041101182206.6969D49004C@myserver.mydomain.com>
    Nov  1 19:22:06 myserver postfix/qmgr[31561]: 209F8490041: skipped, still being delivered
    Nov  1 19:22:06 myserver postfix/qmgr[31561]: 3E859490045: from=<admin@staffadministrator.com>, size=3316, nrcpt=2 (queue active)  
    Nov  1 19:22:06 myserver postfix/qmgr[31561]: 6969D49004C: from=<wwwrun@myserver.mydomain.com>, size=625, nrcpt=1 (queue active)


    In the apache logfiles is nothing unusual.



    0
     
    LVL 36

    Accepted Solution

    by:
    What emails should apache be sending?
    Is it a public webserver?
    Are you sure you dont have a form2mail script configured insecurely which people are using to send spam?

    Can you stop postfix delivering email and then look at one of the mails in the queue to see what it contains?
    0
     

    Author Comment

    by:BlueJ

    Sorry for the late answer grblades, after I did a forced "flush" of the mailqueue the situation became normal.

    Thanx
    0

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Cisco Complete Network Certification Training

    If you’re an IT engineer or technician, it's time you take your career to the next level. This elite training bundle is brimming with all of the information you need to learn to sit for Cisco CNNA, CCNP, and CCENT certification exams.

    Daily system administration tasks often require administrators to connect remote systems. But allowing these remote systems to accept passwords makes these systems vulnerable to the risk of brute-force password guessing attacks. Furthermore there ar…
    Introduction We as admins face situation where we need to redirect websites to another. This may be required as a part of an upgrade keeping the old URL but website should be served from new URL. This document would brief you on different ways ca…
    Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
    Learn how to navigate the file tree with the shell. Use pwd to print the current working directory: Use ls to list a directory's contents: Use cd to change to a new directory: Use wildcards instead of typing out long directory names: Use ../ to move…

    846 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    9 Experts available now in Live!

    Get 1:1 Help Now