Prev: suppress NDRs from spoofed sender
Next: Exclude recipients from pre-queue spamass-milter checks?
From: Martijn de Munnik on 20 Jan 2010 04:56 Hi list, I have a problem with delivering mail to a host and get this error: host mx2.amsterdam.nl[145.222.14.10] said: 421 enepmx02.amsterdam.nl Error: timeout exceeded (in reply to end of DATA command) This error only seems to occur with 'large' mails. Currently I have a mail of ~600KB and ~8MB stuck in the queue. I don't think this is a postfix issue on our site but an issue with the mailserver on the other site. What can cause such issues? Thanks, Martijn -- YoungGuns Kasteleinenkampweg 7b 5222 AX 's-Hertogenbosch T. 073 623 56 40 F. 073 623 56 39 www.youngguns.nl KvK 18076568
From: Martijn de Munnik on 20 Jan 2010 05:10 On Wed, 20 Jan 2010 10:56:39 +0100, Martijn de Munnik <martijn(a)youngguns.nl> wrote: > Hi list, > > I have a problem with delivering mail to a host and get this error: > > host mx2.amsterdam.nl[145.222.14.10] said: 421 enepmx02.amsterdam.nl > Error: timeout exceeded (in reply to end of DATA command) > > This error only seems to occur with 'large' mails. Currently I have a > of ~600KB and ~8MB stuck in the queue. I don't think this is a postfix > issue on our site but an issue with the mailserver on the other site. What > can cause such issues? I tried the http://ftp.nluug.nl/mail/postfix/faq.html#timeouts Cisco PIX workaround but that doesn't make any difference? I think the remote site is running PIX: Connected to mx2.amsterdam.nl (145.222.14.10). Escape character is '^]'. 220 ********************************** postconf -n address_verify_map = btree:${data_directory}/verify alias_maps = hash:/opt/csw/etc/postfix/maps/aliases body_checks = regexp:/opt/csw/etc/postfix/maps/body_checks broken_sasl_auth_clients = yes command_directory = /opt/csw/sbin config_directory = /etc/postfix content_filter = amavisfeed:localhost:10024 daemon_directory = /opt/csw/libexec/postfix data_directory = /opt/csw/var/lib/postfix default_database_type = hash delay_warning_time = 4h disable_vrfy_command = yes header_checks = regexp:/opt/csw/etc/postfix/maps/header_checks home_mailbox = Maildir/ html_directory = /opt/csw/share/doc/postfix/html inet_interfaces = all mailbox_command = /opt/csw/bin/procmail-wrapper -o -a $DOMAIN -d $LOGNAME mailbox_size_limit = 0 mailq_path = /opt/csw/bin/mailq manpage_directory = /opt/csw/share/man maximal_backoff_time = 8000s maximal_queue_lifetime = 7d message_size_limit = 52428800 mime_header_checks = regexp:/opt/csw/etc/postfix/maps/mime_header_checks minimal_backoff_time = 1000s mydestination = $myhostname, localhost.$mydomain myhostname = stevie.youngguns.nl mynetworks_style = host myorigin = $myhostname newaliases_path = /opt/csw/bin/newaliases readme_directory = /opt/csw/share/doc/postfix/README_FILES receive_override_options = no_address_mappings recipient_delimiter = + relay_domains = slagenlandwonen.nl, wfcommunicatie.nl, gooischebrink.com, interjute.nl, melamo.nl, fair-play.nl, loopbaankamer.nl, ospl.nl, ospl.de, printcontrol.nl, dankers-schilderwerken.nl, promonta.nl, interim-denbosch.nl, vanherpt.biz, rodersana.nl relayhost = sample_directory = /opt/csw/share/doc/postfix/samples sendmail_path = /opt/csw/sbin/sendmail smtp_bind_address = 213.207.90.2 smtp_helo_timeout = 60s smtp_pix_workaround_delay_time = 10s smtp_send_xforward_command = yes smtp_skip_quit_response = yes smtp_tls_loglevel = 1 smtp_tls_security_level = may smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtpd_banner = $myhostname ESMTP smtpd_client_connection_count_limit = 10 smtpd_data_restrictions = reject_unauth_pipelining smtpd_delay_reject = yes smtpd_hard_error_limit = 12 smtpd_helo_required = yes smtpd_recipient_limit = 100 smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, check_client_access hash:/opt/csw/etc/postfix/maps/relay_access, reject_non_fqdn_recipient, reject_non_fqdn_sender, reject_unknown_sender_domain, reject_unauth_destination, reject_non_fqdn_helo_hostname, reject_rbl_client virbl.dnsbl.bit.nl, check_policy_service inet:127.0.0.1:12525, check_sender_mx_access cidr:/opt/csw/etc/postfix/maps/bogon_networks, check_client_access cidr:/opt/csw/etc/postfix/maps/drop, check_sender_mx_access cidr:/opt/csw/etc/postfix/maps/drop, check_sender_ns_access cidr:/opt/csw/etc/postfix/maps/drop, reject_unverified_recipient, check_client_access cidr:/opt/csw/etc/postfix/maps/dnswl_header, check_client_access cidr:/opt/csw/etc/postfix/maps/dnswl_permit, check_policy_service inet:127.0.0.1:10023 smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_type = dovecot smtpd_soft_error_limit = 3 smtpd_tls_cert_file = /home/yghosting/ssl/secure-youngguns-nl.pem smtpd_tls_key_file = /home/yghosting/ssl/secure-youngguns-nl.key smtpd_tls_loglevel = 1 smtpd_tls_security_level = may smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache soft_bounce = no strict_rfc821_envelopes = yes tls_random_source = dev:/dev/urandom transport_maps = hash:/opt/csw/etc/postfix/maps/transport unknown_address_reject_code = 550 unknown_hostname_reject_code = 550 unknown_local_recipient_reject_code = 550 unverified_recipient_reject_code = 550 virtual_alias_maps = hash:/opt/csw/etc/postfix/maps/virtual > > Thanks, > Martijn -- YoungGuns Kasteleinenkampweg 7b 5222 AX 's-Hertogenbosch T. 073 623 56 40 F. 073 623 56 39 www.youngguns.nl KvK 18076568
From: Martijn de Munnik on 20 Jan 2010 05:42 On Wed, 20 Jan 2010 11:10:50 +0100, Martijn de Munnik <martijn(a)youngguns.nl> wrote: > On Wed, 20 Jan 2010 10:56:39 +0100, Martijn de Munnik > <martijn(a)youngguns.nl> wrote: >> Hi list, >> >> I have a problem with delivering mail to a host and get this error: >> >> host mx2.amsterdam.nl[145.222.14.10] said: 421 enepmx02.amsterdam.nl >> Error: timeout exceeded (in reply to end of DATA command) I also found a mail in the queue to mx-cluster1.one.com with exactly the same problem, this mail is also ~600kb. >> >> This error only seems to occur with 'large' mails. Currently I have a >> of ~600KB and ~8MB stuck in the queue. I don't think this is a postfix >> issue on our site but an issue with the mailserver on the other site. > What >> can cause such issues? > > I tried the http://ftp.nluug.nl/mail/postfix/faq.html#timeouts Cisco PIX > workaround but that doesn't make any difference? I think the remote site is > running PIX: > > Connected to mx2.amsterdam.nl (145.222.14.10). > Escape character is '^]'. > 220 ********************************** > > postconf -n > > address_verify_map = btree:${data_directory}/verify > alias_maps = hash:/opt/csw/etc/postfix/maps/aliases > body_checks = regexp:/opt/csw/etc/postfix/maps/body_checks > broken_sasl_auth_clients = yes > command_directory = /opt/csw/sbin > config_directory = /etc/postfix > content_filter = amavisfeed:localhost:10024 > daemon_directory = /opt/csw/libexec/postfix > data_directory = /opt/csw/var/lib/postfix > default_database_type = hash > delay_warning_time = 4h > disable_vrfy_command = yes > header_checks = regexp:/opt/csw/etc/postfix/maps/header_checks > home_mailbox = Maildir/ > html_directory = /opt/csw/share/doc/postfix/html > inet_interfaces = all > mailbox_command = /opt/csw/bin/procmail-wrapper -o -a $DOMAIN -d $LOGNAME > mailbox_size_limit = 0 > mailq_path = /opt/csw/bin/mailq > manpage_directory = /opt/csw/share/man > maximal_backoff_time = 8000s > maximal_queue_lifetime = 7d > message_size_limit = 52428800 > mime_header_checks = regexp:/opt/csw/etc/postfix/maps/mime_header_checks > minimal_backoff_time = 1000s > mydestination = $myhostname, localhost.$mydomain > myhostname = stevie.youngguns.nl > mynetworks_style = host > myorigin = $myhostname > newaliases_path = /opt/csw/bin/newaliases > readme_directory = /opt/csw/share/doc/postfix/README_FILES > receive_override_options = no_address_mappings > recipient_delimiter = + > relay_domains = slagenlandwonen.nl, wfcommunicatie.nl, gooischebrink.com, > interjute.nl, melamo.nl, fair-play.nl, loopbaankamer.nl, ospl.nl, ospl.de, > printcontrol.nl, dankers-schilderwerken.nl, promonta.nl, > interim-denbosch.nl, vanherpt.biz, rodersana.nl > relayhost = > sample_directory = /opt/csw/share/doc/postfix/samples > sendmail_path = /opt/csw/sbin/sendmail > smtp_bind_address = 213.207.90.2 > smtp_helo_timeout = 60s > smtp_pix_workaround_delay_time = 10s > smtp_send_xforward_command = yes > smtp_skip_quit_response = yes > smtp_tls_loglevel = 1 > smtp_tls_security_level = may > smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache > smtpd_banner = $myhostname ESMTP > smtpd_client_connection_count_limit = 10 > smtpd_data_restrictions = reject_unauth_pipelining > smtpd_delay_reject = yes > smtpd_hard_error_limit = 12 > smtpd_helo_required = yes > smtpd_recipient_limit = 100 > smtpd_recipient_restrictions = permit_mynetworks, > permit_sasl_authenticated, check_client_access > hash:/opt/csw/etc/postfix/maps/relay_access, reject_non_fqdn_recipient, > reject_non_fqdn_sender, reject_unknown_sender_domain, > reject_unauth_destination, reject_non_fqdn_helo_hostname, > reject_rbl_client virbl.dnsbl.bit.nl, check_policy_service > inet:127.0.0.1:12525, check_sender_mx_access > cidr:/opt/csw/etc/postfix/maps/bogon_networks, check_client_access > cidr:/opt/csw/etc/postfix/maps/drop, check_sender_mx_access > cidr:/opt/csw/etc/postfix/maps/drop, check_sender_ns_access > cidr:/opt/csw/etc/postfix/maps/drop, reject_unverified_recipient, > check_client_access cidr:/opt/csw/etc/postfix/maps/dnswl_header, > check_client_access cidr:/opt/csw/etc/postfix/maps/dnswl_permit, > check_policy_service inet:127.0.0.1:10023 > smtpd_sasl_auth_enable = yes > smtpd_sasl_authenticated_header = yes > smtpd_sasl_local_domain = $myhostname > smtpd_sasl_path = private/auth > smtpd_sasl_security_options = noanonymous > smtpd_sasl_type = dovecot > smtpd_soft_error_limit = 3 > smtpd_tls_cert_file = /home/yghosting/ssl/secure-youngguns-nl.pem > smtpd_tls_key_file = /home/yghosting/ssl/secure-youngguns-nl.key > smtpd_tls_loglevel = 1 > smtpd_tls_security_level = may > smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache > soft_bounce = no > strict_rfc821_envelopes = yes > tls_random_source = dev:/dev/urandom > transport_maps = hash:/opt/csw/etc/postfix/maps/transport > unknown_address_reject_code = 550 > unknown_hostname_reject_code = 550 > unknown_local_recipient_reject_code = 550 > unverified_recipient_reject_code = 550 > virtual_alias_maps = hash:/opt/csw/etc/postfix/maps/virtual > > >> >> Thanks, >> Martijn -- YoungGuns Kasteleinenkampweg 7b 5222 AX 's-Hertogenbosch T. 073 623 56 40 F. 073 623 56 39 www.youngguns.nl KvK 18076568
From: Ansgar Wiechers on 20 Jan 2010 06:55 On 2010-01-20 Martijn de Munnik wrote: > I have a problem with delivering mail to a host and get this error: > > host mx2.amsterdam.nl[145.222.14.10] said: 421 enepmx02.amsterdam.nl > Error: timeout exceeded (in reply to end of DATA command) > > This error only seems to occur with 'large' mails. Currently I have a > mail of ~600KB and ~8MB stuck in the queue. I don't think this is a > postfix issue on our site but an issue with the mailserver on the > other site. What can cause such issues? AFAICS: slow connections, high connection concurrency (leaving little bandwidth per connection), proxy filter or policy service taking too long for checking the mail, etc. However, since the timeout occurs on the remote side, you should contact the administrator of that server about the issue. Regards Ansgar Wiechers -- "Abstractions save us time working, but they don't save us time learning." --Joel Spolsky
From: Wietse Venema on 20 Jan 2010 07:20 Martijn de Munnik: > Hi list, > > I have a problem with delivering mail to a host and get this error: > > host mx2.amsterdam.nl[145.222.14.10] said: 421 enepmx02.amsterdam.nl > Error: timeout exceeded (in reply to end of DATA command) > > This error only seems to occur with 'large' mails. Currently I have a mail > of ~600KB and ~8MB stuck in the queue. I don't think this is a postfix > issue on our site but an issue with the mailserver on the other site. What > can cause such issues? Record a tcpdump trace. The way the session fails will indicate the kind of problem (MTU, Window scaling, and so on). http://www.postfix.org/DEBUG_README.html Wietse
|
Next
|
Last
Pages: 1 2 3 Prev: suppress NDRs from spoofed sender Next: Exclude recipients from pre-queue spamass-milter checks? |