[qmailtoaster] ***SPAM*** R: [qmailtoaster] R: [qmailtoaster] SMTP Reject mail random
This is my actual tcp.smtp file at all. I know it seems impossible but my bck tcp.smtp file look like your. As I wrote we lower all the defence till last night because we have a lot of customer angry for not receiving mail and the sender did not receive error messages for a lot because the other smtp server try to send again the mail to us For simscan at the beginning of the evening we modify the simcontrol file so that he do not call clamav e SA. During the night we modify the tcp.smtp file to the one I post. At this moment we think to have only : Smtp ( with no restriction on badmailto nor badmailfrom ecc.) > chkuser ( that seems to do the right job) > qmail-queue > qmail-local . When messages arrive to the queue all go well and in the right Maildir without problem _ Da: Jake Vickers [mailto:j...@qmailtoaster.com] Inviato: venerdì 17 aprile 2009 13.55 A: qmailtoaster-list@qmailtoaster.com Oggetto: Re: [qmailtoaster] R: [qmailtoaster] SMTP Reject mail random Del Rosso Massimo wrote: Here a pice of smtp log regarding non delivered mail : 2009-04-17 13:26:17.684522500 tcpserver: pid 20047 from 83.7.88.135 2009-04-17 13:26:17.684651500 tcpserver: ok 20047 siderasrv1.sideranet.it:194.244.5.69:25 :83.7.88.135::2648 2009-04-17 13:26:17.917263500 rblsmtpd: 83.7.88.135 pid 20047: 451 http://www.spamhaus.org/query/bl?ip=83.7.88.135 2009-04-17 13:26:18.466013500 tcpserver: end 20047 status 0 2009-04-17 13:26:18.466017500 tcpserver: status: 5/1000 2009-04-17 13:26:18.500969500 tcpserver: status: 6/1000 2009-04-17 13:26:18.501207500 tcpserver: pid 20048 from 80.12.242.111 2009-04-17 13:26:18.501327500 tcpserver: ok 20048 siderasrv1.sideranet.it:194.244.5.69:25 :80.12.242.111::39897 2009-04-17 13:26:18.652400500 CHKUSER accepted sender: from <mailto:fidassi...@wanadoo.fr::> remote rcpt <> : sender accepted 2009-04-17 13:26:18.659036500 CHKUSER accepted rcpt: from <mailto:fidassi...@wanadoo.fr::> remote rcpt <mailto:a.spad...@mokalito.com> : found existing recipient 2009-04-17 13:26:20.403269500 tcpserver: status: 7/1000 2009-04-17 13:26:20.403515500 tcpserver: pid 20055 from 217.109.76.80 And nothing regarding it in send log. Yesterday night we try lowering all defence and we leave in tcp.smtp only : 127.:allow,RELAYCLIENT="" :allow Regarding RBL we think Is all OK because the mail pass the rbl check and chkuser see them and accept them. _ I hope that's not all of your tcp.smtp file It should look like this: 127.:allow,RELAYCLIENT="",DKSIGN="/var/qmail/control/domainkeys/%/private",R BLSMTPD="",NOP0FCHECK="1" :allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONG RCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan",DKSIGN="/var/qmail/contro l/domainkeys/%/private",NOP0FCHECK="1" When you say you "stopped simscan" what do you mean by this? Did you adjust the simcontrol file or remove the RPM? Or do you mean you removed it from the delivery chain in the tcp.smtp file?
[qmailtoaster] R: [qmailtoaster] SMTP Reject mail random
Here a piece of smtp log for a mail delivered : 2009-04-17 13:26:37.513429500 tcpserver: pid 20105 from 77.31.8.30 2009-04-17 13:26:37.513533500 tcpserver: ok 20105 siderasrv1.sideranet.it:194.244.5.69:25 :77.31.8.30::54518 2009-04-17 13:26:37.514922500 rblsmtpd: 77.31.8.30 pid 20105: 451 http://www.spamhaus.org/query/bl?ip=77.31.8.30 2009-04-17 13:26:37.923262500 tcpserver: status: 10/1000 2009-04-17 13:26:37.923490500 tcpserver: pid 20106 from 85.18.95.73 2009-04-17 13:26:37.923595500 tcpserver: ok 20106 siderasrv1.sideranet.it:194.244.5.69:25 :85.18.95.73::34080 2009-04-17 13:26:38.046942500 CHKUSER accepted sender: from remote rcpt <> : sender accepted 2009-04-17 13:26:38.053075500 CHKUSER accepted rcpt: from remote rcpt : found existing recipient 2009-04-17 13:26:40.011688500 tcpserver: end 20103 status 0 2009-04-17 13:26:40.011694500 tcpserver: status: 9/1000 2009-04-17 13:26:41.462456500 tcpserver: end 20104 status 0 2009-04-17 13:26:41.462461500 tcpserver: status: 8/1000 2009-04-17 13:26:41.990755500 tcpserver: end 17517 status 256 2009-04-17 13:26:41.990761500 tcpserver: status: 7/1000 2009-04-17 13:26:42.907526500 tcpserver: end 20105 status 0 Here a piece of send log regarding the mail : 2009-04-17 13:25:20.407374500 info msg 17154036: bytes 5163 from qp 19938 uid 89 2009-04-17 13:25:20.486463500 starting delivery 116: msg 17154036 to local impresarusconi.it-carlo.rusc...@impresarusconi.it 2009-04-17 13:25:20.486485500 status: local 1/10 remote 0/509 2009-04-17 13:25:20.501974500 delivery 116: success: did_0+0+1/ 2009-04-17 13:25:20.502200500 status: local 0/10 remote 0/509 2009-04-17 13:25:20.502270500 end msg 17154036 Here a pice of smtp log regarding non delivered mail : 2009-04-17 13:26:17.684522500 tcpserver: pid 20047 from 83.7.88.135 2009-04-17 13:26:17.684651500 tcpserver: ok 20047 siderasrv1.sideranet.it:194.244.5.69:25 :83.7.88.135::2648 2009-04-17 13:26:17.917263500 rblsmtpd: 83.7.88.135 pid 20047: 451 http://www.spamhaus.org/query/bl?ip=83.7.88.135 2009-04-17 13:26:18.466013500 tcpserver: end 20047 status 0 2009-04-17 13:26:18.466017500 tcpserver: status: 5/1000 2009-04-17 13:26:18.500969500 tcpserver: status: 6/1000 2009-04-17 13:26:18.501207500 tcpserver: pid 20048 from 80.12.242.111 2009-04-17 13:26:18.501327500 tcpserver: ok 20048 siderasrv1.sideranet.it:194.244.5.69:25 :80.12.242.111::39897 2009-04-17 13:26:18.652400500 CHKUSER accepted sender: from remote rcpt <> : sender accepted 2009-04-17 13:26:18.659036500 CHKUSER accepted rcpt: from remote rcpt : found existing recipient 2009-04-17 13:26:20.403269500 tcpserver: status: 7/1000 2009-04-17 13:26:20.403515500 tcpserver: pid 20055 from 217.109.76.80 And nothing regarding it in send log. Yesterday night we try lowering all defence and we leave in tcp.smtp only : 127.:allow,RELAYCLIENT="" :allow Regarding RBL we think Is all OK because the mail pass the rbl check and chkuser see them and accept them. _ Da: Jake Vickers [mailto:j...@qmailtoaster.com] Inviato: venerdì 17 aprile 2009 12.42 A: qmailtoaster-list@qmailtoaster.com Oggetto: Re: [qmailtoaster] SMTP Reject mail random Del Rosso Massimo wrote: Hi to all, It s one day and one night we are working o a server that seem to reject mail random. In detail we are an ISP and we notice that some mail of customer are not delivered to Maildir. The problem is that if the message reach the queue all will gone but a lot of good mail do not. We stop simscan and with it calm and SA. We delete the rule of badmailto and badmailfrom. We have only rbl and chkuser. Any Idea ? We need more details than that. What shows in the logs? What does your tcp.smtp file look like? Are they being blocked by your RBL?
[qmailtoaster] SMTP Reject mail random
Hi to all, It' s one day and one night we are working o a server that seem to reject mail random. In detail we are an ISP and we notice that some mail of customer are not delivered to Maildir. The problem is that if the message reach the queue all will gone but a lot of good mail do not. We stop simscan and with it calm and SA. We delete the rule of badmailto and badmailfrom. We have only rbl and chkuser. Any Idea ?
