Prev: Force Delivery Failure
Next: Cannot send any mail - lost connection after EHLO
From: Mehul Ved on 19 Dec 2009 18:58
Hi,
The machine has been running fine since past few months, Yesterday
suddenly it stopped sending and receiving mails. Checking the log
shows that the time changes by +5.5 hours when sendmail is
(re)started. +5.5 is the difference between GMT and the timezone for
the server which is set to IST.
One of the suggestions was that this could be caused by chroot but I
checked /etc/postfix/master.cf but I see 'n' for chroot for all the
lines.
Where can I check/correct the time offset with sendmail.
Also, 'ps aux' does not show any sendmail processes running most of
the time and qshape shows a growing mail in the active queue.
pflogsumm shows that only a few emails from the queue are sent
sporadically during the day.

From: Noel Jones on 19 Dec 2009 20:04
On 12/19/2009 5:58 PM, Mehul Ved wrote:
> Hi,
> The machine has been running fine since past few months, Yesterday
> suddenly it stopped sending and receiving mails. Checking the log
> shows that the time changes by +5.5 hours when sendmail is
> (re)started. +5.5 is the difference between GMT and the timezone for
> the server which is set to IST.
> One of the suggestions was that this could be caused by chroot but I
> checked /etc/postfix/master.cf but I see 'n' for chroot for all the
> lines.
> Where can I check/correct the time offset with sendmail.
> Also, 'ps aux' does not show any sendmail processes running most of
> the time and qshape shows a growing mail in the active queue.
> pflogsumm shows that only a few emails from the queue are sent
> sporadically during the day.

You'll need to share details of your config and unaltered log
entries showing the problem.

http://www.postfix.org/DEBUG_README.html#mail

-- Noel Jones

From: Mehul Ved on 20 Dec 2009 04:08
On Sun, Dec 20, 2009 at 6:34 AM, Noel Jones <njones(a)megan.vbhcs.org> wrote:
> You'll need to share details of your config and unaltered log entries
> showing the problem.
>
> http://www.postfix.org/DEBUG_README.html#mail

Here's the logs which shows the time mismatch http://pastebin.ca/1720853

$ postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
home_mailbox = Maildir/
html_directory = no
inet_interfaces = all
mail_owner = postfix
mailbox_command =
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mydestination = /etc/postfix/local-host-names
myhostname = www.progresspartners.co.in
mynetworks = 127.0.0.0/8
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.3.3/README_FILES
sample_directory = /usr/share/doc/postfix-2.3.3/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtp_tls_note_starttls_offer = yes
smtp_use_tls = yes
smtpd_recipient_restrictions =
permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /etc/postfix/ssl/smtpd.crt
smtpd_tls_key_file = /etc/postfix/ssl/smtpd.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom
unknown_local_recipient_reject_code = 550

$ qshape | head
T 5 10 20 40 80 160 320 640 1280 1280+
TOTAL 6598 3 15 17 45 125 293 372 366 1417 3945
www.progresspartners.co.in 5537 3 14 16 44 118 285 288 352 1222 3195
localhost.localdomain 668 0 0 0 0 0 0 57 0 136 475
saswatabanerjee.com 72 0 0 1 1 1 2 2 10 14 41
coatingspl.co.in 37 0 0 0 0 0 0 0 0 9 28
mipak.co.in 36 0 0 0 0 0 0 3 0 1 32
gmail.com 32 0 0 0 0 1 2 2 1 8 18
rediffmail.com 17 0 0 0 0 1 0 1 0 2 13
yahoo.com 12 0 0 0 0 0 1 1 0 2 8

$ qshape -s | head
T 5 10 20 40 80 160 320 640 1280 1280+
TOTAL 4631 3 7 9 25 111 205 257 200 1066 2748
hitechplast.co.in 997 0 3 1 3 30 41 65 38 257 559
www.progresspartners.co.in 673 0 0 0 0 0 0 57 0 139 477
clearplastics.co.in 327 0 1 0 7 11 21 19 10 101 157
alerts.kotak.com 139 0 0 0 0 0 67 0 0 0 72
MAILER-DAEMON 104 0 0 1 0 0 2 24 3 19 55
progresspartners.co.in 85 0 0 1 0 4 4 0 7 30 39
gmail.com 70 0 0 0 0 0 0 4 2 13 51
mipak.co.in 58 0 0 0 0 1 0 2 0 6 49

$ pflogsumm -d today /var/log/maillog

Postfix log summaries for Dec 19

Grand Totals
------------
messages

3112 received
684 delivered
12 forwarded
17 deferred (35 deferrals)
31 bounced
4319 rejected (86%)
0 reject warnings
0 held
0 discarded (0%)

54898k bytes received
142235k bytes delivered
446 senders
225 sending hosts/domains
362 recipients
89 recipient hosts/domains


Per-Hour Traffic Summary
time received delivered deferred bounced rejected
--------------------------------------------------------------------
0000-0100 207 361 14 3 70
0100-0200 157 63 0 16 133
0200-0300 83 0 0 0 239
0300-0400 67 0 0 0 241
0400-0500 64 0 0 0 177
0500-0600 32 0 0 0 194
0600-0700 51 0 0 0 217
0700-0800 41 0 0 0 213
0800-0900 46 0 0 0 189
0900-1000 136 0 0 0 219
1000-1100 304 91 14 10 251
1100-1200 215 0 0 0 219
1200-1300 331 0 0 0 470
1300-1400 336 74 5 1 309
1400-1500 359 95 2 1 330
1500-1600 331 0 0 0 406
1600-1700 302 0 0 0 363
1700-1800 50 0 0 0 79
1800-1900 0 0 0 0 0
1900-2000 0 0 0 0 0
2000-2100 0 0 0 0 0
2100-2200 0 0 0 0 0
2200-2300 0 0 0 0 0
2300-2400 0 0 0 0 0

From: Wietse Venema on 20 Dec 2009 09:25
Mehul Ved:
[ Charset ISO-8859-1 unsupported, converting... ]
> On Sun, Dec 20, 2009 at 6:34 AM, Noel Jones <njones(a)megan.vbhcs.org> wrote:
> > You'll need to share details of your config and unaltered log entries
> > showing the problem.
> >
> > http://www.postfix.org/DEBUG_README.html#mail
>
> Here's the logs which shows the time mismatch http://pastebin.ca/1720853

DO NOT run postfix in verbose mode unless asked to do so.

Wietse

From: Noel Jones on 20 Dec 2009 18:57
On 12/20/2009 3:08 AM, Mehul Ved wrote:
>> You'll need to share details of your config and unaltered log entries
>> showing the problem.
>>
>> http://www.postfix.org/DEBUG_README.html#mail
>
> Here's the logs which shows the time mismatch http://pastebin.ca/1720853

Your original complaint is that postfix is not sending or
receiving mail. The only evidence I see of that in the log
file is

Dec 19 21:21:42 www postfix/smtpd[18342]: NOQUEUE: reject:
RCPT from unknown[190.2.225.89]: 550 5.1.1
<ndhe(a)hitechplast.net>: Recipient address rejected: User
unknown in local recipient table;
from=<moonlito7(a)riscy.monsanto.com> to=<ndhe(a)hitechplast.


So...
1. TURN OFF VERBOSE LOGGING
2. show some evidence of postfix not sending or receiving mail.
3. show the contents of master.cf

I see that postdrop and smtpd log time differently. Although
this is somewhat annoying, it rarely leads to any operational
problems. What leads you to believe this causes a problem
with accepting or delivering mail?

Turn off verbose logging and show some more logs. Don't show
verbose logs unless you are specifically asked for them.
99.9% of postfix problems are easily diagnosed with normal
logging.
http://www.postfix.org/DEBUG_README.html

>
> $ postconf -n
> smtp_use_tls = yes

This parameter is deprecated. Replace it with
smtp_tls_security_level = may
http://www.postfix.org/TLS_README.html
but this won't cause problems except in rare cases where the
receiving system offers STARTTLS but the receiver's TLS
doesn't work.

> smtpd_recipient_restrictions =
> permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination

OK.

> smtpd_use_tls = yes

This parameter is deprecated. Replace it with
smtpd_tls_security_level = may
http://www.postfix.org/TLS_README.html
but this won't cause problems except in rare cases where the
sender has a broken TLS implementation.

> $ qshape | head
> T 5 10 20 40 80 160 320 640 1280 1280+
> TOTAL 6598 3 15 17 45 125 293 372 366 1417 3945
> www.progresspartners.co.in 5537 3 14 16 44 118 285 288 352 1222 3195
> localhost.localdomain 668 0 0 0 0 0 0 57 0 136 475

Looks like a lot of deferred mail, even for localhost.
Without corresponding logging, this is meaningless.

> $ pflogsumm -d today /var/log/maillog
>
> Per-Hour Traffic Summary
> time received delivered deferred bounced rejected
> --------------------------------------------------------------------
> 0000-0100 207 361 14 3 70
> 0100-0200 157 63 0 16 133
> 0200-0300 83 0 0 0 239
> 0300-0400 67 0 0 0 241
> 0400-0500 64 0 0 0 177
> 0500-0600 32 0 0 0 194
> 0600-0700 51 0 0 0 217
> 0700-0800 41 0 0 0 213
> 0800-0900 46 0 0 0 189
> 0900-1000 136 0 0 0 219
> 1000-1100 304 91 14 10 251
> 1100-1200 215 0 0 0 219
> 1200-1300 331 0 0 0 470
> 1300-1400 336 74 5 1 309
> 1400-1500 359 95 2 1 330
> 1500-1600 331 0 0 0 406
> 1600-1700 302 0 0 0 363

Curious. This shows mail being received, but very few
delivery attempts. Logs?

Are you using a content_filter or Mailscanner software? Any
upgrades run on this server recently? Any obvious signs of
postfix trouble?
http://www.postfix.org/DEBUG_README.html#logging


-- Noel Jones

 |  Next  |  Last
Pages: 1 2 3 4
Prev: Force Delivery Failure
Next: Cannot send any mail - lost connection after EHLO