Re: [AMaViS-user] MTA-BLOCKED?
Luis Daniel, > It's really strange > if I upgrade to amavis 2.5.4rc1 this error hapens, if I downgrade tol 2.5.2 > not, but I have the dbm bug. As mouss indicated, the first thing to do is check what port is dedicated to what, otherwise your amavisd may be trying to talk to another amavisd child process, instead of feeding checked mail back to Postfix. What is on 10024? What is on 10025? Where is a Postfix reentry port (master.cf)? Does that port accept mail (telnet)? Where is amavisd feeding its checked mail to ($forward_method, $notify_method)? Mark - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] MTA-BLOCKED?
It's really strange if I upgrade to amavis 2.5.4rc1 this error hapens, if I downgrade tol 2.5.2 not, but I have the dbm bug. I was wondering if someone has perl-modules requisites (with version) this amavis is running unther Mandriva 2007.1 (april 2007), and of course, It has been a year of upgrades. Regards to all. LD Le Friday 14 March 2008 13:23:30 mouss, vous avez écrit : > Mark Martinec wrote: > > Luis Daniel, > > > >> I was debugging amavisd and I found this: > >> brandmauer amavis[6320]: (06320-02-3) TIMING [total 45329 ms] - SMTP > >> pre-DATA-flush: 403 (1%)1, SMTP DATA: 62 (0%)1, check_init: 126 (0%)1, > >> digest_hdr: 2 (0%)1, digest_body: 9 (0%)1, gen_mail_id: 8 (0%)1, > >> mime_decode: 205 (0%)2, get-file-type1: 363 (1%)3, decompose_part: 107 > >> (0%)3, > >> parts_decode: 0 (0%)3, check_header: 91 (0%)3, AV-scan-1: 1290 (3%)6, > >> spam-wb-list: 2435 (5%)11, SA parse: 26 (0%)11, SA check: 4243 (9%)21, > >> update_cache: 32 (0%)21, decide_mail_destiny: 35 (0%)21, fwd-connect: > >> 362 (1%)22, fwd-xforward: 69 (0%)22, fwd-mail-pip: 179 (0%)22, > >> fwd-rcpt-pip: 32 (0%)22, fwd-data-chkpnt: 46 (0%)22, write-header: 11 > >> (0%)22, > >> fwd-data-contents: 0 (0%)22, fwd-end-chkpnt: 34549 (76%)99, prepare-dsn: > >> 91 (0%)99, main_log_entry: 86 (0%)99, update_snmp: 280 (1%)100, SMTP > >> pre-response: 22 (0%)100, SMTP response: 69 (0%)100, unlink-1-files: 94 > >> (0%) 100, rundown: 1 (0%)100 > >> > >> lok at this: fwd-end-chkpnt: 34549 (76%)99 > >> to high value, what should I do then? > > > > Yes, it is pretty high, Postfix is taking 34 seconds to respond > > to end-of-message. Perhaps you have not disabled header of body > > checks in MTA on the re-entry path (port 10025) and you have > > complex or poorly written regexp-based header/body checks there. > > Or it could be some disk I/O problem. > > note that his amavisd-new is listening on 10025 (see his telnet > transcript). not sure where he forwards mail (10026?) and what is done > there... > > > > - > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2008. > http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ > ___ > AMaViS-user mailing list > AMaViS-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/amavis-user > AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 > AMaViS-HowTos:http://www.amavis.org/howto/ - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] MTA-BLOCKED?
Mark Martinec wrote: > Luis Daniel, > > >> I was debugging amavisd and I found this: >> brandmauer amavis[6320]: (06320-02-3) TIMING [total 45329 ms] - SMTP >> pre-DATA-flush: 403 (1%)1, SMTP DATA: 62 (0%)1, check_init: 126 (0%)1, >> digest_hdr: 2 (0%)1, digest_body: 9 (0%)1, gen_mail_id: 8 (0%)1, >> mime_decode: 205 (0%)2, get-file-type1: 363 (1%)3, decompose_part: 107 >> (0%)3, >> parts_decode: 0 (0%)3, check_header: 91 (0%)3, AV-scan-1: 1290 (3%)6, >> spam-wb-list: 2435 (5%)11, SA parse: 26 (0%)11, SA check: 4243 (9%)21, >> update_cache: 32 (0%)21, decide_mail_destiny: 35 (0%)21, fwd-connect: 362 >> (1%)22, fwd-xforward: 69 (0%)22, fwd-mail-pip: 179 (0%)22, fwd-rcpt-pip: 32 >> (0%)22, fwd-data-chkpnt: 46 (0%)22, write-header: 11 (0%)22, >> fwd-data-contents: 0 (0%)22, fwd-end-chkpnt: 34549 (76%)99, prepare-dsn: 91 >> (0%)99, main_log_entry: 86 (0%)99, update_snmp: 280 (1%)100, SMTP >> pre-response: 22 (0%)100, SMTP response: 69 (0%)100, unlink-1-files: 94 >> (0%) 100, rundown: 1 (0%)100 >> >> lok at this: fwd-end-chkpnt: 34549 (76%)99 >> to high value, what should I do then? >> > > Yes, it is pretty high, Postfix is taking 34 seconds to respond > to end-of-message. Perhaps you have not disabled header of body > checks in MTA on the re-entry path (port 10025) and you have > complex or poorly written regexp-based header/body checks there. > Or it could be some disk I/O problem. > note that his amavisd-new is listening on 10025 (see his telnet transcript). not sure where he forwards mail (10026?) and what is done there... - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] MTA-BLOCKED?
Luis Daniel, > I was debugging amavisd and I found this: > brandmauer amavis[6320]: (06320-02-3) TIMING [total 45329 ms] - SMTP > pre-DATA-flush: 403 (1%)1, SMTP DATA: 62 (0%)1, check_init: 126 (0%)1, > digest_hdr: 2 (0%)1, digest_body: 9 (0%)1, gen_mail_id: 8 (0%)1, > mime_decode: 205 (0%)2, get-file-type1: 363 (1%)3, decompose_part: 107 > (0%)3, > parts_decode: 0 (0%)3, check_header: 91 (0%)3, AV-scan-1: 1290 (3%)6, > spam-wb-list: 2435 (5%)11, SA parse: 26 (0%)11, SA check: 4243 (9%)21, > update_cache: 32 (0%)21, decide_mail_destiny: 35 (0%)21, fwd-connect: 362 > (1%)22, fwd-xforward: 69 (0%)22, fwd-mail-pip: 179 (0%)22, fwd-rcpt-pip: 32 > (0%)22, fwd-data-chkpnt: 46 (0%)22, write-header: 11 (0%)22, > fwd-data-contents: 0 (0%)22, fwd-end-chkpnt: 34549 (76%)99, prepare-dsn: 91 > (0%)99, main_log_entry: 86 (0%)99, update_snmp: 280 (1%)100, SMTP > pre-response: 22 (0%)100, SMTP response: 69 (0%)100, unlink-1-files: 94 > (0%) 100, rundown: 1 (0%)100 > > lok at this: fwd-end-chkpnt: 34549 (76%)99 > to high value, what should I do then? Yes, it is pretty high, Postfix is taking 34 seconds to respond to end-of-message. Perhaps you have not disabled header of body checks in MTA on the re-entry path (port 10025) and you have complex or poorly written regexp-based header/body checks there. Or it could be some disk I/O problem. Mark - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] MTA-BLOCKED?
Luis Daniel Lucio Quiroz wrote: > I also got: > > Mar 13 11:54:00 brandmauer amavis[24026]: (24026-01) (!!)TROUBLE in > process_request: Error writing a SMTP response to the socket: Broken pipe at > (eval 41) line 874, line 4. > > at my /var/log/mail/error.log > > Port 10025 is open: > > [EMAIL PROTECTED] dieu]# telnet localhost 10025 > Trying 127.0.0.1... > Connected to brandmauer.insys-corp.com.mx (127.0.0.1). > Escape character is '^]'. > 220 [127.0.0.1] ESMTP amavisd-new service ready > This is amavisd-new. now try to connect to port 10026 instead. > EHLO elmo.yahoo.com > 250-[127.0.0.1] > 250-VRFY > 250-PIPELINING > 250-SIZE > 250-ENHANCEDSTATUSCODES > 250-8BITMIME > 250-DSN > 250 XFORWARD NAME ADDR PROTO HELO > > RCPT dlucio500 5.5.2 Error: bad syntax > @okay.com.mx > > > QUIT > > > ^] > telnet> q > Connection closed. > - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] MTA-BLOCKED?
Hi Mark I was debugging amavisd and I found this: brandmauer amavis[6320]: (06320-02-3) TIMING [total 45329 ms] - SMTP pre-DATA-flush: 403 (1%)1, SMTP DATA: 62 (0%)1, check_init: 126 (0%)1, digest_hdr: 2 (0%)1, digest_body: 9 (0%)1, gen_mail_id: 8 (0%)1, mime_decode: 205 (0%)2, get-file-type1: 363 (1%)3, decompose_part: 107 (0%)3, parts_decode: 0 (0%)3, check_header: 91 (0%)3, AV-scan-1: 1290 (3%)6, spam-wb-list: 2435 (5%)11, SA parse: 26 (0%)11, SA check: 4243 (9%)21, update_cache: 32 (0%)21, decide_mail_destiny: 35 (0%)21, fwd-connect: 362 (1%)22, fwd-xforward: 69 (0%)22, fwd-mail-pip: 179 (0%)22, fwd-rcpt-pip: 32 (0%)22, fwd-data-chkpnt: 46 (0%)22, write-header: 11 (0%)22, fwd-data-contents: 0 (0%)22, fwd-end-chkpnt: 34549 (76%)99, prepare-dsn: 91 (0%)99, main_log_entry: 86 (0%)99, update_snmp: 280 (1%)100, SMTP pre-response: 22 (0%)100, SMTP response: 69 (0%)100, unlink-1-files: 94 (0%) 100, rundown: 1 (0%)100 lok at this: fwd-end-chkpnt: 34549 (76%)99 to high value, what should I do then? Regards, LD Le Thursday 13 March 2008 11:52:09 Mark Martinec, vous avez écrit : > Luis Daniel, > > > Sice we have an outstage of electricity, I gettint this advice at > > amavisd. Any comment, I havent see MTA-BLOCKED before. > > > > Mar 13 11:39:35 brandmauer amavis[20025]: (20025-06) Blocked MTA-BLOCKED, > > It means Postfix is not accepting (on port 10025) a checked message > back from amavisd. See Postfix log for a more detailed reason, > try telnetting to port 10025 and see if Postfix is accepting mail. > > Mark > > - > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2008. > http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ > ___ > AMaViS-user mailing list > AMaViS-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/amavis-user > AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 > AMaViS-HowTos:http://www.amavis.org/howto/ - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] MTA-BLOCKED?
I also got: Mar 13 11:54:00 brandmauer amavis[24026]: (24026-01) (!!)TROUBLE in process_request: Error writing a SMTP response to the socket: Broken pipe at (eval 41) line 874, line 4. at my /var/log/mail/error.log Port 10025 is open: [EMAIL PROTECTED] dieu]# telnet localhost 10025 Trying 127.0.0.1... Connected to brandmauer.insys-corp.com.mx (127.0.0.1). Escape character is '^]'. 220 [127.0.0.1] ESMTP amavisd-new service ready EHLO elmo.yahoo.com 250-[127.0.0.1] 250-VRFY 250-PIPELINING 250-SIZE 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 XFORWARD NAME ADDR PROTO HELO RCPT dlucio500 5.5.2 Error: bad syntax @okay.com.mx QUIT ^] telnet> q Connection closed. Le Thursday 13 March 2008 11:52:09 Mark Martinec, vous avez écrit : > Luis Daniel, > > > Sice we have an outstage of electricity, I gettint this advice at > > amavisd. Any comment, I havent see MTA-BLOCKED before. > > > > Mar 13 11:39:35 brandmauer amavis[20025]: (20025-06) Blocked MTA-BLOCKED, > > It means Postfix is not accepting (on port 10025) a checked message > back from amavisd. See Postfix log for a more detailed reason, > try telnetting to port 10025 and see if Postfix is accepting mail. > > Mark > > - > This SF.net email is sponsored by: Microsoft > Defy all challenges. Microsoft(R) Visual Studio 2008. > http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ > ___ > AMaViS-user mailing list > AMaViS-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/amavis-user > AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 > AMaViS-HowTos:http://www.amavis.org/howto/ - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] MTA-BLOCKED?
Luis Daniel, > Sice we have an outstage of electricity, I gettint this advice at amavisd. > Any comment, I havent see MTA-BLOCKED before. > Mar 13 11:39:35 brandmauer amavis[20025]: (20025-06) Blocked MTA-BLOCKED, It means Postfix is not accepting (on port 10025) a checked message back from amavisd. See Postfix log for a more detailed reason, try telnetting to port 10025 and see if Postfix is accepting mail. Mark - This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse012070mrt/direct/01/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] MTA-Blocked header question
Pascal, > >For some reason Postfix (or firewall) on 10.0.0.2 port 10026 is > >rejecting TCP connections. Try 'telnet 10.0.0.2 10026' from 10.0.0.3 > >and see what Postfix writes in its log. > > When telnetting it takes a while for the socket to connect, and then I get > after maybe 12-15 secs, > "Connected to 10.0.0.2. Escape character is '^]'." > And 5-10 seconds after that, I get the ESMTP banner... ... > I don't know what happens... would it be the time it takes for connecting? Yes, if it takes longer than 30 seconds for MTA to respond with a greeting to a connect from amavisd, then amavisd gives up and logs a 'Negative greeting: '. Timeouts are hard-wired for the moment in amavisd: my($smtp_connect_timeout) = 30; my($smtp_helo_timeout) = 300; my($smtp_xforward_timeout) = 300; my($smtp_mail_timeout) = 300; my($smtp_rcpt_timeout) = 300; my($smtp_data_init_timeout) = 120; my($smtp_data_xfer_timeout) = 180; my($smtp_data_done_timeout) = 600; my($smtp_quit_timeout) = 10; # 300 my($smtp_rset_timeout) = 20; Rather than fiddle with amavisd, it would be better to find out why Postfix is so terribly slow to respond. It could be a DNS issue, Postfix tries to do a reverse DNS lookup for 10.0.0.3, and it seems it does not get an answer. Fix your internal DNS resolving for starters (or disable DNS check in Postfix on a re-entry port, as a desperate measure). Mark - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] MTA-Blocked header question
Hi Mark and thanks for answering, > >For some reason Postfix (or firewall) on 10.0.0.2 port 10026 is >rejecting TCP connections. Try 'telnet 10.0.0.2 10026' from 10.0.0.3 >and see what Postfix writes in its log. When telnetting it takes a while for the socket to connect, and then I get after maybe 12-15 secs, "Connected to 10.0.0.2. Escape character is '^]'." And 5-10 seconds after that, I get the ESMTP banner... I entered manually an email and here's postfix's log... Aug 27 14:26:22 server postfix/smtpd[16460]: connect from unknown[10.0.0.3] Aug 27 14:26:57 server postfix/smtpd[16460]: EBE3D65FA8E: client=unknown[10.0.0.3] Aug 27 14:27:13 server postfix/smtpd[16460]: disconnect from unknown[10.0.0.3] Aug 27 14:26:57 server postfix/smtpd[16460]: EBE3D65FA8E: client=unknown[10.0.0.3] Aug 27 14:27:04 server postfix/cleanup[16274]: EBE3D65FA8E: message-id=<[EMAIL PROTECTED]> Aug 27 14:27:04 server postfix/qmgr[16187]: EBE3D65FA8E: from=<[EMAIL PROTECTED]>, size=342, nrcpt=1 (queue active) Aug 27 14:27:04 server postfix/pipe[16302]: EBE3D65FA8E: to=<[EMAIL PROTECTED]>, orig_to=, relay=cyrus, delay=14, status=sent (mail.mydomain.net) Aug 27 14:27:04 server postfix/qmgr[16187]: EBE3D65FA8E: removed I don't know what happens... would it be the time it takes for connecting? thanks in advance Pascal _ Enjoy The Show: Buskers & Street Performers http://search.live.com/images/results.aspx?q=Amuseurs+publics&mkt=fr-ca&FORM=SERNEP - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] MTA-Blocked header question
Pascal, > we are using amavisd on two computers, one with postfix and the other with > amavisd/ClamAV/SA > Here is the problem I seem to have. The spams which are above cutoff are > discarded successfully but the ones which are supposed to be good are not > forwarded to the first server. > Aug 26 20:26:59 releve amavis[953]: (00953-16) (!)FWD via SMTP: > <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, > 451 4.5.0 From MTA([10.0.0.2]:10026) during fwd-connect > (Negative greeting: at...) > First is 10.0.0.2 with postfix deamons on 25 and 1025 with content_filter > on, 10025 with content_filter off > > Second is 10.0.0.3 with amavisd on 10024. notify & forward method to > 10.0.0.2:10026 > Aug 26 20:26:59 releve amavis[953]: (00953-16) (!)FWD via SMTP: > <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, > 451 4.5.0 From MTA([10.0.0.2]:10026) during fwd-connect > (Negative greeting: at...) For some reason Postfix (or firewall) on 10.0.0.2 port 10026 is rejecting TCP connections. Try 'telnet 10.0.0.2 10026' from 10.0.0.3 and see what Postfix writes in its log. > 10.0.0.2:10026 inet n - n - - smtpd > -o content_filter= > -o smtpd_delay_reject=no > -o smtpd_client_restrictions=permit_mynetworks,reject > -o smtpd_helo_restrictions= > -o smtpd_sender_restrictions= > -o smtpd_recipient_restrictions=permit_mynetworks,reject > -o smtpd_data_restrictions=reject_unauth_pipelining > -o smtpd_end_of_data_restrictions= > -o smtpd_restriction_classes= > -o mynetworks=127.0.0.0/8,10.0.0.0/8 Appears fine. Check Postfix log. Mark - This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
