<br><font size=2><tt>Hallo,</tt></font>
<br><font size=2><tt>stehe grad vor einem Problem, wo ich im Moment nicht weiss,</tt></font>
<br><font size=2><tt>wo ich da ansetzen kann. Als root bekomme ich Plötzlich</tt></font>
<br><font size=2><tt>(d.h. ohne Bewusst etwas geändert zu haben) folgende Mails,</tt></font>
<br><font size=2><tt>die allesamt ähnlich aufgebaut sind:</tt></font>
<br>
<br>
<br><font size=2><tt>Transcript of session follows.<br>
</tt></font>
<br><font size=2><tt>Out: 220 mx.assmann.de ESMTP Postfix<br>
In: HELO mail.werbeagentur.de<br>
Out: 250 mx.assmann.de<br>
In: MAIL FROM:<vorname.nachname@werbeagentur.de><br>
Out: 250 Ok<br>
In: RCPT TO:<user@assmann.de><br>
Out: 250 Ok<br>
In: DATA<br>
Out: 354 End data with <CR><LF>.<CR><LF><br>
Out: 451 Error: queue file write error<br>
In: QUIT<br>
Out: 221 Bye<br>
</tt></font>
<br>
<br><font size=2 face="sans-serif">Manchmal wird der 451-Fehler auch nach RCPT-TO schon angezeigt.</font>
<br><font size=2 face="sans-serif">Mit dem Verfügbaren Speicherplatz hat das aber wohl nichts zu tun.</font>
<br>
<br><font size=2 face="sans-serif">Im Logfile erhalte ich recht oft folgende Zeile:</font>
<br>
<br><font size=2><tt>Feb 19 13:33:14 Mafi postfix/smtpd[15541]: lost connection after RCPT from unknown[62.221.55.147]</tt></font>
<br>
<br><font size=2 face="sans-serif">und auch sehr oft:</font>
<br>
<br><font size=2><tt>Feb 19 13:27:34 Mafi postfix/smtpd[15168]: warning: lost connection with proxy 127.0.0.1:10024</tt></font>
<br>
<br><font size=2 face="sans-serif">An diesem Port lauscht mein Amavis, dabei fiel auf, dass meine Clam-Version ein</font>
<br><font size=2 face="sans-serif">wenig hinterherhängt (und das ist die einzige für mich nachvollziehbare "Änderung" gegenüber</font>
<br><font size=2 face="sans-serif">dem fehlerlosen Betrieb).</font>
<br><font size=2 face="sans-serif">Ich habe daraufhin den smtpd_proxy_timeout auf 300s gesetzt. Da dies keinen Erfolg</font>
<br><font size=2 face="sans-serif">brachte habe ich die timeouts von smptd_timeout und smtpd_policy_service_timeout erhöht.</font>
<br>
<br><font size=2 face="sans-serif">Dies brachte zumindest für eine gewisse Zeit Ruhe vor den root-Mails, aber im Log traten</font>
<br><font size=2 face="sans-serif">folgende Einträge auf</font>
<br><font size=2 face="sans-serif"> </font>
<br><font size=2><tt>Feb 19 16:29:05 Mafi postfix/smtpd[5087]: connect from mail.computer.de[212.144.99.16]<br>
Feb 19 16:29:05 Mafi postfix/smtpd[5143]: connect from bxm182.internet.tpnet.pl[83.18.246.12]<br>
Feb 19 16:29:06 Mafi postfix/smtpd[5088]: warning: connect to 127.0.0.1:10023: Connection refused<br>
Feb 19 16:29:06 Mafi postfix/smtpd[5088]: warning: problem talking to server 127.0.0.1:10023: Connection refused<br>
Feb 19 16:29:07 Mafi postfix/smtpd[5087]: warning: connect to 127.0.0.1:10023: Connection refused<br>
Feb 19 16:29:07 Mafi postfix/smtpd[5087]: warning: problem talking to server 127.0.0.1:10023: Connection refused<br>
Feb 19 16:29:07 Mafi postfix/smtpd[5088]: warning: connect to 127.0.0.1:10023: Connection refused<br>
Feb 19 16:29:07 Mafi postfix/smtpd[5088]: warning: problem talking to server 127.0.0.1:10023: Connection refused<br>
Feb 19 16:29:07 Mafi postfix/smtpd[5088]: NOQUEUE: reject: RCPT from 81-12-30-166.usuarios.recal.es[81.12.30.166]: 450 Server configuration problem; from=<epvcup@sampercj.com.br> to=<user@assmann.de> proto=SMTP helo=<81-12-30-166.usuarios.recal.es></tt></font>
<br>
<br><font size=2 face="sans-serif">Es kommen zwar noch Mail an und werden auch ausgeliefert, noch hat sich auch kein User gemeldet,</font>
<br><font size=2 face="sans-serif">aber ich glaube hier besteht Handlungsbedarf!</font>
<br>
<br><font size=2 face="sans-serif">Mein postconf -n:</font>
<br>
<br><font size=2><tt>alias_database = btree:/etc/aliases<br>
alias_maps = btree:/etc/aliases<br>
biff = no<br>
canonical_maps = btree:/etc/postfix/canonical<br>
command_directory = /usr/sbin<br>
config_directory = /etc/postfix<br>
content_filter = smtp:127.0.0.1:10024<br>
daemon_directory = /usr/lib/postfix<br>
debug_peer_level = 2<br>
debug_peer_list =<br>
default_database_type = btree<br>
defer_transports =<br>
disable_dns_lookups = no<br>
disable_mime_output_conversion = no<br>
html_directory = /usr/share/doc/packages/postfix/html<br>
inet_interfaces = 127.0.0.1 ::1<br>
inet_protocols = all<br>
mail_owner = postfix<br>
mail_spool_directory = /var/mail<br>
mailbox_command =<br>
mailbox_size_limit = 0<br>
mailbox_transport =<br>
mailq_path = /usr/bin/mailq<br>
manpage_directory = /usr/share/man<br>
masquerade_classes = envelope_sender, header_sender, header_recipient<br>
masquerade_domains =<br>
masquerade_exceptions = root<br>
message_size_limit = 12288000<br>
mydestination = $myhostname, localhost.$mydomain, localhost<br>
myhostname = mx.assmann.de<br>
mynetworks = 192.168.60.0/24, 127.0.0.0/8<br>
newaliases_path = /usr/bin/newaliases<br>
proxy_interfaces = 212.95.114.20<br>
queue_directory = /var/spool/postfix<br>
readme_directory = /usr/share/doc/packages/postfix/README_FILES<br>
relay_clientcerts = btree:/etc/postfix/relay_ccerts<br>
relay_domains = $mydestination, btree:/etc/postfix/relay_domains<br>
relay_recipient_maps = btree:/etc/postfix/relay_recipients<br>
relayhost =<br>
relocated_maps = btree:/etc/postfix/relocated<br>
sample_directory = /usr/share/doc/packages/postfix/samples<br>
sender_canonical_maps = btree:/etc/postfix/sender_canonical<br>
sendmail_path = /usr/sbin/sendmail<br>
setgid_group = maildrop<br>
smtp_sasl_auth_enable = no<br>
smtp_use_tls = no<br>
smtpd_client_restrictions =<br>
smtpd_helo_required = no<br>
smtpd_helo_restrictions =<br>
smtpd_policy_service_timeout = 300s<br>
smtpd_proxy_filter = 127.0.0.1:10024<br>
smtpd_proxy_timeout = 300s<br>
smtpd_recipient_restrictions = check_recipient_access btree:/etc/postfix/access_recipient-postmaster reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_invalid_hostname, check_client_access btree:/etc/postfix/access_client, check_recipient_access btree:/etc/postfix/access_recipient, check_sender_access btree:/etc/postfix/access_sender, permit_mynetworks, check_policy_service inet:127.0.0.1:10023 check_policy_service inet:127.0.0.1:12525 reject_unauth_destination, permit<br>
smtpd_sasl_auth_enable = no<br>
smtpd_sender_restrictions =<br>
smtpd_timeout = 450s<br>
smtpd_tls_CAfile = /etc/postfix/ssl/cacert.pem<br>
smtpd_tls_ask_ccert = yes<br>
smtpd_tls_cert_file = /etc/postfix/ssl/certs/postfixcert.pem<br>
smtpd_tls_key_file = /etc/postfix/ssl/certs/postfixkey.pem<br>
smtpd_tls_received_header = yes<br>
smtpd_use_tls = no<br>
soft_bounce = no<br>
strict_8bitmime = no<br>
strict_rfc821_envelopes = no<br>
tls_random_source = dev:/dev/urandom<br>
transport_maps = btree:/etc/postfix/transport, btree:/etc/postfix/relay_domains<br>
unknown_local_recipient_reject_code = 550<br>
virtual_alias_domains = btree:/etc/postfix/virtual</tt></font>
<br><font size=2><tt>virtual_alias_maps = btree:/etc/postfix/virtual</tt></font>
<br>
<br><font size=2 face="sans-serif">Was kann / soll / muss ich tun?</font>
<br>
<br><font size=2 face="sans-serif">MfGruß</font>
<br>
<br><font size=2 face="sans-serif">Marzel Heitmeyer</font>
<br>
<br>