[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1874
  • Last Modified:

mail dropped with internal error

Hi all,
My mail server start having mail with message saying (i change the ip for security reason).

Your mail 68.18.32.229:59431->26.66.141.81:25 is dropped for internal error.

I had about 2 of these per day, and they are real emails from people that we know. The sender of these emails are all from different domain. I could not find any similarities from any of these dropped emails.

I'm using Centos 4 with postfix + amavis-new + clamav + spamassissan. Everything is working just fine before last week.

I turn on debugging for the amavis-new log and couldn't find any kind of error message, beside of them say MIME type error (but this is only for one of the dropped mail).

I have no idea where to look. I don't even know if this error message is cause by my mail server or from outside.

somebody please help
thanx!!

kevin
0
andythedestroyer
Asked:
andythedestroyer
1 Solution
 
WizRd-LinuxCommented:
To start with look at the postfix log for clues, /var/log/maillog you may find something in here.  Internal Error would be one of a hundred things...

Does the socket for clamav exist and have the correct permissions?
0
 
Gabriel OrozcoSolution ArchitectCommented:
permissions on dirs/files, specially for clamav
a filesystem that got full? maybe /var?
0
 
andythedestroyerAuthor Commented:
ah...it turns out to be the AV scanner on the firewall. It keep dropping email with attachments  with an AV engine error. Juniper had fail on me yet again.

Thanx for all the help guys

Kevin
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
andythedestroyerAuthor Commented:
For those people who are having the same problem with their juniper firewall. I spoke with the juniper's engineer and they said just turn the AV fail-mode to permit traffic pass through. They don't really know why this is happening.


Kevin
0
 
yalovCommented:
Has this problem been fixed? Has enyone knows if Juniper had find a solution to the problem?
0
 
Computer101Commented:
PAQed with points refunded (250)

Computer101
EE Admin
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now