Re: [vchkpw] indirect reasons for 5.7.1? - behavior confirmed

2004-04-05 Thread David Wolfskill
On Fri, Apr 02, 2004 at 10:14:26PM -0800, Kurt Bigler wrote:
>Thanks for your help, which lead to the resolution.  Still a mystery to me
>why a default SMTP answerer would respond with 5.7.1.  I inquired about that
>but got no reply yet.

Just a wild guess, but perhaps because the recipient addresses in
question were not being handled by the SMTP server in question.

Peace,
david
-- 
David H. Wolfskill [EMAIL PROTECTED]


Re: [vchkpw] indirect reasons for 5.7.1? - behavior confirmed

2004-04-03 Thread X-Istence
Kurt Bigler wrote:

The plot thickens.  sockstat produced no output, apparently a limitation of
the virtual server implementation.  Inquiring into this, the parent server
apparently had default processes answering (stupidly) when virtual server
email servers were not running.  The administrator fixed this with a quick
configuration change, and now everything behaves as expected.
Thanks for your help, which lead to the resolution.  Still a mystery to me
why a default SMTP answerer would respond with 5.7.1.  I inquired about that
but got no reply yet.
-Kurt



Well, that is an easy one, if they are running qmail as well, it would 
answer with a 5.7.1 meaning your domain is not in their rcpthosts.

X-Istence



Re: [vchkpw] indirect reasons for 5.7.1? - behavior confirmed

2004-04-02 Thread Kurt Bigler
on 4/2/04 6:24 PM, X-Istence <[EMAIL PROTECTED]> wrote:

> Kurt Bigler wrote:
> 
>> 
>> I confirmed that if I kill this process (line from ps output):
>> 
>> qmaild86243  0.0  0.1   904  360  ??  SNJ   3:05PM   0:00.09
>> tcpserver -v -H -R -lvps.breathsense.com -x
>> /var/vpopmail/etc/tcp.smtp.cdb -c200 -u1003 -g1001 0 25 fixcrio
>> /var/qmail/bin/qmail-smtpd
>> 
>> that incoming SMTP attempts are greeted by a 5.7.1 error.
>> 
>> Does anyone understand how this happens?
>> 
>> Thanks,
>> Kurt Bigler
> 
> Well, considering that is your SMTP service, it looks like another
> server on the same system is taking over, or you configured something wrong.
> 
> since its freebsd, take a look at:
> 
> sockstat -4, and look for port 25 and what process has it in use if you
> kill that process you mentioned.

The plot thickens.  sockstat produced no output, apparently a limitation of
the virtual server implementation.  Inquiring into this, the parent server
apparently had default processes answering (stupidly) when virtual server
email servers were not running.  The administrator fixed this with a quick
configuration change, and now everything behaves as expected.

Thanks for your help, which lead to the resolution.  Still a mystery to me
why a default SMTP answerer would respond with 5.7.1.  I inquired about that
but got no reply yet.

-Kurt



Re: [vchkpw] indirect reasons for 5.7.1? - behavior confirmed

2004-04-02 Thread X-Istence
Kurt Bigler wrote:



I confirmed that if I kill this process (line from ps output):

  qmaild86243  0.0  0.1   904  360  ??  SNJ   3:05PM   0:00.09
tcpserver -v -H -R -lvps.breathsense.com -x
/var/vpopmail/etc/tcp.smtp.cdb -c200 -u1003 -g1001 0 25 fixcrio
/var/qmail/bin/qmail-smtpd
that incoming SMTP attempts are greeted by a 5.7.1 error.

Does anyone understand how this happens?

Thanks,
Kurt Bigler




Well, considering that is your SMTP service, it looks like another 
server on the same system is taking over, or you configured something wrong.

since its freebsd, take a look at:

sockstat -4, and look for port 25 and what process has it in use if you 
kill that process you mentioned.

X-Istence


Re: [vchkpw] indirect reasons for 5.7.1? - behavior confirmed

2004-04-02 Thread Kurt Bigler
on 4/2/04 1:15 PM, Kurt Bigler <[EMAIL PROTECTED]> wrote:

> This is regarding qmail + vpopmail 5.3.12 running under tcpserver, on
> FreeBSD 4.6.1.
> 
> My server was bouncing *everything* with 5.7.1, that is including stuff that
> should have been delivered to domains hosted by my server.
> 
> I panicked and just rebooted my server (because reboot is very quick and it
> is the most reliable way to fix a bunch of things quickly without having to
> take time to identify a problem), and thus lost some of the evidence.
> 
> But I am suspicious based on previous expeirences that if a certain process
> dies that some process starts responding to all smtp requests with 5.7.1.
> Or is there any other obvious reason why qmail might go into a permanent
> 5.7.1 mode?
> 
> Thanks for any thoughts, and sorry to be so lacking in info.  I did do a
> quick ps when I discovered the problem and I'm pretty sure that the
> tcpserver process involving qmail-smtpd was probably not there.  I only
> remembered it should have been there after rebooting and doing another ps.
> Is there some default mode for smtp connections that takes over under such a
> circumstance?
> 
> Thanks,
> Kurt Bigler

I confirmed that if I kill this process (line from ps output):

  qmaild86243  0.0  0.1   904  360  ??  SNJ   3:05PM   0:00.09
tcpserver -v -H -R -lvps.breathsense.com -x
/var/vpopmail/etc/tcp.smtp.cdb -c200 -u1003 -g1001 0 25 fixcrio
/var/qmail/bin/qmail-smtpd

that incoming SMTP attempts are greeted by a 5.7.1 error.

Does anyone understand how this happens?

Thanks,
Kurt Bigler



Re: [vchkpw] indirect reasons for 5.7.1?

2004-04-02 Thread Kurt Bigler
on 4/2/04 2:05 PM, Kurt Bigler <[EMAIL PROTECTED]> wrote:

> on 4/2/04 1:53 PM, X-Istence <[EMAIL PROTECTED]> wrote:
> 
>> Kurt Bigler wrote:

>>> Thanks for any thoughts, and sorry to be so lacking in info.  I did do a
>>> quick ps when I discovered the problem and I'm pretty sure that the
>>> tcpserver process involving qmail-smtpd was probably not there.  I only
>>> remembered it should have been there after rebooting and doing another ps.
>>> Is there some default mode for smtp connections that takes over under such a
>>> circumstance?
>> 
>> Well, if your SMTP service was not there, your server could not be
>> accepting mail, thus there would be nothing to bounce. Thus it would not
>> be able to create 5.7.1 bounces in the first place.
> 
> I was wondering whether tcpserver on its own would start handling them if
> qmail-smtpd disappeared.  It seems to me tcpserver can do quite a few things
> on its own.  It would be very unfriendly if it were to do 5.7.1's rather
> than indicating a temporary failure though.

Oops sorry, I was thinking of inetd when I said "tcpserver" above.  Maybe
inetd provides some sort of default coverage for a port that no other
process is watching?

-Kurt

> 
> Thanks,
> Kurt Bigler
> 
> 



Re: [vchkpw] indirect reasons for 5.7.1?

2004-04-02 Thread Kurt Bigler
on 4/2/04 1:53 PM, X-Istence <[EMAIL PROTECTED]> wrote:

> Kurt Bigler wrote:
>> This is regarding qmail + vpopmail 5.3.12 running under tcpserver, on
>> FreeBSD 4.6.1.
>> 
>> My server was bouncing *everything* with 5.7.1, that is including stuff that
>> should have been delivered to domains hosted by my server.
> 
> 5.7.1 can mean a domain is not on your rcpthosts list.
> /var/control/rcpthosts

No, rcpthosts was fine (or rebooting would have been vanishingly unlikely to
fix it).

>> I panicked and just rebooted my server (because reboot is very quick and it
>> is the most reliable way to fix a bunch of things quickly without having to
>> take time to identify a problem), and thus lost some of the evidence.
> 
> Reboot should be your last thing to try, what if it was more serious and
> the box never came back up?

Everything else *seemed* fine.  Reboot has proven very reliable.  It is a
virtual server with the parent (?) server monitored/maintained by my
provider, which makes a bit of a difference.  Every moment lost not
identifying the problem is a liability, so I used reboot to compensate for
my lack of ready knowledge.  In this particular case it turned out to be a
good thing, but I hope to work now to reduce the chance of it happening
again.

>> But I am suspicious based on previous expeirences that if a certain process
>> dies that some process starts responding to all smtp requests with 5.7.1.
>> Or is there any other obvious reason why qmail might go into a permanent
>> 5.7.1 mode?
> 
> Check rcpthosts, restart qmail-smtpd, only things that would affect a
> 5.7.1. Which means permanent error, or permanent not allowed.

Yes, I am thinking of having the server monitor and restart these things
automatically.  I know some people don't like that approach, but I don't
have 24/7 staff coverage (just me who sleeps long hours).

>> Thanks for any thoughts, and sorry to be so lacking in info.  I did do a
>> quick ps when I discovered the problem and I'm pretty sure that the
>> tcpserver process involving qmail-smtpd was probably not there.  I only
>> remembered it should have been there after rebooting and doing another ps.
>> Is there some default mode for smtp connections that takes over under such a
>> circumstance?
> 
> Well, if your SMTP service was not there, your server could not be
> accepting mail, thus there would be nothing to bounce. Thus it would not
> be able to create 5.7.1 bounces in the first place.

I was wondering whether tcpserver on its own would start handling them if
qmail-smtpd disappeared.  It seems to me tcpserver can do quite a few things
on its own.  It would be very unfriendly if it were to do 5.7.1's rather
than indicating a temporary failure though.

Thanks,
Kurt Bigler



Re: [vchkpw] indirect reasons for 5.7.1?

2004-04-02 Thread X-Istence
Kurt Bigler wrote:
This is regarding qmail + vpopmail 5.3.12 running under tcpserver, on
FreeBSD 4.6.1.
My server was bouncing *everything* with 5.7.1, that is including stuff that
should have been delivered to domains hosted by my server.
5.7.1 can mean a domain is not on your rcpthosts list. 
/var/control/rcpthosts

I panicked and just rebooted my server (because reboot is very quick and it
is the most reliable way to fix a bunch of things quickly without having to
take time to identify a problem), and thus lost some of the evidence.
Reboot should be your last thing to try, what if it was more serious and 
the box never came back up?

But I am suspicious based on previous expeirences that if a certain process
dies that some process starts responding to all smtp requests with 5.7.1.
Or is there any other obvious reason why qmail might go into a permanent
5.7.1 mode?
Check rcpthosts, restart qmail-smtpd, only things that would affect a 
5.7.1. Which means permanent error, or permanent not allowed.

Thanks for any thoughts, and sorry to be so lacking in info.  I did do a
quick ps when I discovered the problem and I'm pretty sure that the
tcpserver process involving qmail-smtpd was probably not there.  I only
remembered it should have been there after rebooting and doing another ps.
Is there some default mode for smtp connections that takes over under such a
circumstance?
Well, if your SMTP service was not there, your server could not be 
accepting mail, thus there would be nothing to bounce. Thus it would not 
be able to create 5.7.1 bounces in the first place.

Thanks,
Kurt Bigler





[vchkpw] indirect reasons for 5.7.1?

2004-04-02 Thread Kurt Bigler
This is regarding qmail + vpopmail 5.3.12 running under tcpserver, on
FreeBSD 4.6.1.

My server was bouncing *everything* with 5.7.1, that is including stuff that
should have been delivered to domains hosted by my server.

I panicked and just rebooted my server (because reboot is very quick and it
is the most reliable way to fix a bunch of things quickly without having to
take time to identify a problem), and thus lost some of the evidence.

But I am suspicious based on previous expeirences that if a certain process
dies that some process starts responding to all smtp requests with 5.7.1.
Or is there any other obvious reason why qmail might go into a permanent
5.7.1 mode?

Thanks for any thoughts, and sorry to be so lacking in info.  I did do a
quick ps when I discovered the problem and I'm pretty sure that the
tcpserver process involving qmail-smtpd was probably not there.  I only
remembered it should have been there after rebooting and doing another ps.
Is there some default mode for smtp connections that takes over under such a
circumstance?

Thanks,
Kurt Bigler