From: jpyrczak@gmail.com on 2 Apr 2006 19:12 I have seen something like this in the postings, but nothing seems to show a resolution to my problem so here it is: Everything was working ok, until I changed the internal MTA that our spamfilter machine is relaying to from 10.0.0.2 to 10.0.0.12 and I changed the "DS" "FallbackMXhost" and "FallbackSmartHost" IP in my /etc/mail/ sendmail.cf (to the new 10.0.0.12 internal MTA) and changed my mailertable entry to the firewall that forwards our smtp to the externally exposed spamfilter machine. Yet it looks like between 5 to 10% of our email is getting the error "sn=5.0.0, stat=Service unavailable" as shown below. Apr 2 04:28:02 spamfilter sendmail[20501]: k32ARdoF020223: to=<user(a)mydomain.com>, delay=00:00:22, xdelay=00:00:00, mailer=relay, pri=121175, relay=10.0.0.12 [10.0.0.12], dsn=5.0.0, stat=Service unavailable Apr 2 04:28:02 spamfilter sendmail[20501]: k32ARdoF020223: k32AS2rG020501: DSN: Service unavailable Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501: to=user(a)mydomain.com, delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=32554, relay=10.0.0.12 [10.0.0.12], dsn=5.0.0, stat=Service unavailable Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501: k32AS2rH020501: return to sender: Service unavailable Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rH020501: to=user(a)mydomain.com, delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=33578, relay=10.0.0.12 [10.0.0.12], dsn=5.0.0, stat=Service unavailable Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501: Losing ../qfk32AS2rG020501: savemail panic Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501: SYSERR(root): savemail: cannot save rejected email anywhere The fire is getting hot as I am on the second week of this and people (including my boss, Pres., VP, and the CFO) along with paying clients are getting upset. Please help or advise if you can please. Joe Pyrczak System Administrator (and Pariah is I do not get this fixed)
From: Alton Yu on 2 Apr 2006 21:38 jpyrczak(a)gmail.com wrote: > I have seen something like this in the postings, but nothing seems to > show a resolution to my problem so here it is: > > Everything was working ok, until I changed the internal MTA that our > spamfilter machine is relaying to from 10.0.0.2 to 10.0.0.12 and I > changed the "DS" "FallbackMXhost" and "FallbackSmartHost" IP in my > /etc/mail/ sendmail.cf (to the new 10.0.0.12 internal MTA) and changed > my mailertable entry to the firewall that forwards our smtp to the > externally exposed spamfilter machine. Yet it looks like between 5 to > 10% of our email is getting the error "sn=5.0.0, stat=Service > unavailable" as shown below. Can you change it back? > Apr 2 04:28:02 spamfilter sendmail[20501]: k32ARdoF020223: > to=<user(a)mydomain.com>, delay=00:00:22, xdelay=00:00:00, mailer=relay, > pri=121175, relay=10.0.0.12 [10.0.0.12], dsn=5.0.0, stat=Service > unavailable > Apr 2 04:28:02 spamfilter sendmail[20501]: k32ARdoF020223: > k32AS2rG020501: DSN: Service unavailable > Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501: > to=user(a)mydomain.com, delay=00:00:00, xdelay=00:00:00, mailer=relay, > pri=32554, relay=10.0.0.12 [10.0.0.12], dsn=5.0.0, stat=Service > unavailable > Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501: > k32AS2rH020501: return to sender: Service unavailable > Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rH020501: > to=user(a)mydomain.com, delay=00:00:00, xdelay=00:00:00, mailer=relay, > pri=33578, relay=10.0.0.12 [10.0.0.12], dsn=5.0.0, stat=Service > unavailable > Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501: Losing > ./qfk32AS2rG020501: savemail panic > Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501: > SYSERR(root): savemail: cannot save rejected email anywhere Do 90-95% of the mails that relay to 10.0.0.12 actually go through? You probably want more verbose logging than this. You can set LogLevel to 12 or 15. > The fire is getting hot as I am on the second week of this and people > (including my boss, Pres., VP, and the CFO) along with paying clients > are getting upset. Please help or advise if you can please. > > Joe Pyrczak > System Administrator (and Pariah is I do not get this fixed) Good luck man! Alton
From: Per Hedeland on 3 Apr 2006 03:11 In article <1144019576.693403.289880(a)v46g2000cwv.googlegroups.com> "jpyrczak(a)gmail.com" <jpyrczak(a)gmail.com> writes: > >Apr 2 04:28:02 spamfilter sendmail[20501]: k32ARdoF020223: >to=<user(a)mydomain.com>, delay=00:00:22, xdelay=00:00:00, mailer=relay, >pri=121175, relay=10.0.0.12 [10.0.0.12], dsn=5.0.0, stat=Service >unavailable This normally means that 10.0.0.12 rejected the message for some (often spam-filter-related) reason. The reason will be in the logs of 10.0.0.12 (assuming it is running sendmail), and in the bounce that is generated: >Apr 2 04:28:02 spamfilter sendmail[20501]: k32ARdoF020223: >k32AS2rG020501: DSN: Service unavailable >Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501: >to=user(a)mydomain.com, delay=00:00:00, xdelay=00:00:00, mailer=relay, >pri=32554, relay=10.0.0.12 [10.0.0.12], dsn=5.0.0, stat=Service >unavailable But sendmail tries to send the bounce to the same host (due to your SMART_HOST setting), and it is rejected too... >Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501: Losing >./qfk32AS2rG020501: savemail panic >Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501: >SYSERR(root): savemail: cannot save rejected email anywhere This should result in sendmail leaving the message in the local queue, with the queue file renamed to Qfk32AS2rG020501 to prevent further processing (data file is dfk32AS2rG020501 as ususal). So, check the logs on 10.0.0.12, check those "suspended" files in the local queue, and if neither of those has any info, try sniffing the traffic to capture a session. --Per Hedeland per(a)hedeland.org
From: jpyrczak@gmail.com on 3 Apr 2006 14:38 Thanks for the reply, I can not change the MTA address to the old one as the version of GroupWise 7 (on the 10.0.0.12 server) we are running internally is far newer now. The old version on the original server (10.0.0.2 Groupwise 5.5EP) would mess everyone up and no doubt email would be lost. :( Our 10.0.0.2 server is being used for internal DNS before it checks the external DNS servers for our provider. I changed the log level to 15 and and getting lots of activity. Do I need to worry about "Milter: no active filter" error messages? Don't those apply only if you are using TLS? Yes about 90% or more of the email is getting where it needs to go, hitting our gateway, being scanner and handled over to 10.0.0.12. I am getting the odd: Apr 2 09:53:36 spamfilter sendmail[2002]: k32FrZNE002002: Losing ../qfk32FrZNE002002: savemail panic Apr 2 09:53:36 spamfilter sendmail[2002]: k32FrZNE002002: SYSERR(root): savemail: cannot save rejected email anywhere after the "Service unavailable" occasionally and do have full permissions to the spool directory and plenty of disk space. No disk errors at all.
|
Pages: 1 Prev: Sendmail 8.13.6 - Resource temporarily unavailable Next: dbm map "Alias0": unsafe map file |