wrt: mail_version = 2.10.0

I am trying to understand the cause/causes of these log lines:

1) postfix/postscreen[####]: fatal: error [-30986] seeking
/var/lib/postfix/postscreen_cache.db: Success

2) postfix/master[4070]: warning: process
/usr/libexec/postfix/postscreen pid 4366 exit status 1

3) postfix/master[4070]: warning: /usr/libexec/postfix/postscreen: bad
command startup -- throttling

As in the context of these log lines:

Jun 14 12:40:47 mg08 postfix/postscreen[4366]: CONNECT from
[92.56.112.84]:1297 to [198.133.182.99]:25
Jun 14 12:40:47 mg08 postfix/postscreen[4366]: fatal: error [-30986]
seeking /var/lib/postfix/postscreen_cache.db: Success
Jun 14 12:40:47 mg08 postfix/dnsblog[4328]: addr 92.56.112.84 listed
by domain bl.spamcop.net as 127.0.0.2
Jun 14 12:40:47 mg08 postfix/dnsblog[4327]: addr 92.56.112.84 listed
by domain b.barracudacentral.org as 127.0.0.2
Jun 14 12:40:47 mg08 postfix/dnsblog[4329]: addr 92.56.112.84 listed
by domain dnsbl.sorbs.net as 127.0.0.6
Jun 14 12:40:48 mg08 postfix/master[4070]: warning: process
/usr/libexec/postfix/postscreen pid 4366 exit status 1
Jun 14 12:40:51 mg08 postfix/postscreen[4367]: CONNECT from
[5.46.134.65]:30669 to [198.133.182.99]:25
Jun 14 12:40:51 mg08 postfix/postscreen[4367]: fatal: error [-30986]
seeking /var/lib/postfix/postscreen_cache.db: Success
Jun 14 12:40:51 mg08 postfix/dnsblog[4330]: addr 5.46.134.65 listed by
domain b.barracudacentral.org as 127.0.0.2
Jun 14 12:40:52 mg08 postfix/master[4070]: warning: process
/usr/libexec/postfix/postscreen pid 4367 exit status 1
Jun 14 12:40:55 mg08 postfix/postscreen[4368]: CONNECT from
[216.211.163.156]:36611 to [198.133.182.99]:25
Jun 14 12:40:55 mg08 postfix/postscreen[4368]: fatal: error [-30986]
seeking /var/lib/postfix/postscreen_cache.db: Success
Jun 14 12:40:56 mg08 postfix/master[4070]: warning: process
/usr/libexec/postfix/postscreen pid 4368 exit status 1
Jun 14 12:40:56 mg08 postfix/postscreen[4369]: CONNECT from
[190.254.19.122]:18185 to [198.133.182.99]:25
Jun 14 12:40:56 mg08 postfix/postscreen[4369]: fatal: error reading
/var/lib/postfix/postscreen_cache.db: Unknown error
18446744073709520630
Jun 14 12:40:57 mg08 postfix/master[4070]: warning: process
/usr/libexec/postfix/postscreen pid 4369 exit status 1
Jun 14 12:40:57 mg08 postfix/master[4070]: warning:
/usr/libexec/postfix/postscreen: bad command startup -- throttling


The #1 line is confusing in having both the words "fatal" and
"Success". It seems I have seen that discussed in the group before,
(before I installed 2.10.0) but Google is not helping me find the discussion.

All these lines seem to be related to the cases of others who
have reported such errors associated to multiple postscreen processes.

In so far as I understand I do not think I have multiple postscreen processes.
I do recognize that I have 4 ethernet interfaces. eth0 which faces toward the
Internet. eth1 that faces toward CNM internal network. eth2 which is dedicated
to an interface to a filer system (not used by email). lo loopback.
Because I have no code in master.cf to address these interfaces, I think I
am not running multiple postscreen processes.

Here are the uncommented lines of the master.cf:

[root@mg08 log]# cat /etc/postfix/master.cf | grep -v "^#"
smtp      inet  n       -       -       -       1       postscreen
smtpd     pass  -       -       -       -       -       smtpd
dnsblog   unix  -       -       -       -       0       dnsblog
pickup    fifo  n       -       -       60      1       pickup
cleanup   unix  n       -       -       -       0       cleanup
qmgr      fifo  n       -       n       300     1       qmgr
rewrite   unix  -       -       -       -       -       trivial-rewrite
bounce    unix  -       -       -       -       0       bounce
defer     unix  -       -       -       -       0       bounce
trace     unix  -       -       -       -       0       bounce
verify    unix  -       -       -       -       1       verify
flush     unix  n       -       -       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
proxywrite unix -       -       n       -       1       proxymap
smtp      unix  -       -       -       -       -       smtp
relay     unix  -       -       -       -       -       smtp
showq     unix  n       -       -       -       -       showq
error     unix  -       -       -       -       -       error
retry     unix  -       -       -       -       -       error
discard   unix  -       -       -       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       -       -       -       lmtp
anvil     unix  -       -       -       -       1       anvil
scache    unix  -       -       -       -       1       scache
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient}
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix    -    n    n    -    2    pipe
  flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store
${nexthop} ${user} ${extension}
mailman   unix  -       n       n       -       -       pipe
  flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
  ${nexthop} ${user}

Aside Note: In the above, from uucp on down, I do not think I need ay of that
but I have hesitated to comment it out as it all exists in
/var/spool/postfix/private/.

Here is postconf -n output:

[root@mg08 log]# postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = yes
berkeley_db_read_buffer_size = 262144
biff = no
bounce_size_limit = 1
config_directory = /etc/postfix
default_process_limit = 400
header_checks = regexp:/etc/postfix/header_checks
inet_interfaces = $myhostname, localhost
inet_protocols = ipv4
mailbox_size_limit = 0
masquerade_domains = $mydomain, cnm.edu, nmvc.org, nmvirtualcollege.org
max_use = 100
message_size_limit = 26214400
mydestination = $myhostname, $mydomain, localhost.localdomain
mydomain = cnm.edu
mynetworks = 198.133.178.0/23, 198.133.182.0/24, 198.133.181.0/24,
198.133.180.0/24, 172.16.0.0/12, 192.168.0.0/16, 10.0.0.0/8,
127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128
notify_classes = resource, software
postscreen_access_list = permit_mynetworks,
cidr:/etc/postfix/postscreen_access.cidr
postscreen_dnsbl_action = enforce
postscreen_dnsbl_reply_map = texthash:/etc/postfix/dnsbl_reply
postscreen_dnsbl_sites = zen.spamhaus.net*2 b.barracudacentral.org*1
dnsbl.sorbs.net*1 bl.spamcop.net*1
postscreen_dnsbl_threshold = 2
readme_directory = no
recipient_delimiter = +
relay_domains =
relayhost =
smtp_host_lookup = dns, native
smtpd_banner = cnm.edu ESMTP
smtpd_client_restrictions = reject_unauth_pipelining
check_client_access hash:/etc/postfix/whitelist check_client_access
cidr:/etc/postfix/cidr-ip check_client_access hash:/etc/postfix/access
permit_mynetworks reject_rbl_client [key].zen.dq.spamhaus.net
reject_rbl_client b.barracudacentral.org reject_rbl_client
bl.spamcop.net reject_rbl_client dnsbl.sorbs.net
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks check_helo_access
hash:/etc/postfix/helo-ip reject_invalid_helo_hostname
reject_non_fqdn_helo_hostname
smtpd_recipient_restrictions = permit_mynetworks
reject_unknown_recipient_domain reject_unlisted_recipient
reject_non_fqdn_recipient reject_unknown_recipient_domain
smtpd_relay_restrictions = permit_mynetworks reject_unauth_destination
smtpd_sender_restrictions = check_sender_access
hash:/etc/postfix/whitelist check_sender_access
hash:/etc/postfix/greylist check_sender_access
hash:/etc/postfix/access permit_mynetworks reject_non_fqdn_sender
reject_unknown_sender_domain
smtpd_use_tls = no
virtual_alias_maps = hash:/etc/postfix/virtualaliases

Is there a configuration change I must make to eliminate the three
types of concerning lines?


--
Robert Lopez
Unix Systems Administrator
Central New Mexico Community College (CNM)
525 Buena Vista SE
Albuquerque, New Mexico 87106

Reply via email to