<html><head><style id="css_styles" type="text/css">blockquote.cite { margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc }
blockquote.cite2 {margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc; margin-top: 3px; padding-top: 0px; }
a img { border: 0px; }
li[style='text-align: center;'], li[style='text-align: right;'] { list-style-position: inside;}
body { font-family: Verdana; font-size: 10pt; }</style><style id="signatureStyle">#xe0a92887a4fe4c7 #xb2e8ae7503dd4b07b38f0e982be96b16 a{
color:#00E;
}
#xe0a92887a4fe4c7 #xb2e8ae7503dd4b07b38f0e982be96b16 a:visited{
color:#551A8B;
}
#xe0a92887a4fe4c7 #xb2e8ae7503dd4b07b38f0e982be96b16{
font-family:'Segoe UI';
font-size:12pt;
color:#000;
margin-left:0px;
margin-right:8px;
background-color:#FFF;
}
#xe0a92887a4fe4c7 #xb2e8ae7503dd4b07b38f0e982be96b16 p.MsoNormal{
margin:0cm 0cm 0.0001pt;
font-size:12pt;
font-family:'Times New Roman',serif;
}
#xe0a92887a4fe4c7 #xb2e8ae7503dd4b07b38f0e982be96b16 a:link{
color:blue;
text-decoration:underline;
}
#xe0a92887a4fe4c7 #xb2e8ae7503dd4b07b38f0e982be96b16 a:visited{
color:purple;
text-decoration:underline;
}
#xe0a92887a4fe4c7 #xb2e8ae7503dd4b07b38f0e982be96b16 p{
margin-right:0cm;
margin-left:0cm;
font-size:12pt;
font-family:'Times New Roman',serif;
}
#xe0a92887a4fe4c7 #xb2e8ae7503dd4b07b38f0e982be96b16 div.WordSection1{
page:WordSection1;
}</style></head><body bgcolor="#FFFFFF"><div style="font-family: Verdana; font-size: 10pt; font-style: normal; font-weight: normal; color: #000000">Hallo Gerald,</div><div style="font-family: Verdana; font-size: 10pt; font-style: normal; font-weight: normal; color: #000000"><br /></div><div style="font-family: Verdana; font-size: 10pt; font-style: normal; font-weight: normal; color: #000000">danke für den Input.</div><div style="font-family: Verdana; font-size: 10pt; font-style: normal; font-weight: normal; color: #000000">War kein Stress im System.</div><div style="font-family: Verdana; font-size: 10pt; font-style: normal; font-weight: normal; color: #000000">address_verify_poll_count = ${stress?1}${stress:3}<br />address_verify_poll_delay = 2s<br /></div><div style="font-family: Verdana; font-size: 10pt; font-style: normal; font-weight: normal; color: #000000"><br /></div><div style="font-family: Verdana; font-size: 10pt; font-weight: normal; color: rgb(0, 0, 0);"><i>"Wie werden die Empfänger überprüft und klappt das manuell ohne Verzögerung?"</i></div><div style="font-family: Verdana; font-size: 10pt; font-style: normal; font-weight: normal; color: #000000">Scheinbar durch den verify des Postfix. Was der genau macht wissen wir nicht</div><div style="font-family: Verdana; font-size: 10pt; font-style: normal; font-weight: normal; color: #000000"><br /></div><div style="font-family: Verdana; font-size: 10pt; font-style: normal; font-weight: normal; color: #000000">Wir glauben wir haben die Ursache, auch wenn etwas "komisch".</div><div style="font-family: Verdana; font-size: 10pt; font-style: normal; font-weight: normal; color: #000000"><br /></div><div style="font-family: Verdana; font-size: 10pt; font-style: normal; font-weight: normal; color: #000000">Wir haben die resolv.conf nun geändert. Es scheint behoben.</div><div style="font-family: Verdana; font-size: 10pt; font-style: normal; font-weight: normal; color: #000000">Wir hatten dort 4 Nameserver, wovon ggf. die letzten 2. plötzlich nicht mehr erreichbar sind (scheinbar über Nacht abgestellt vom RZ, auch wenn die meinen sie haben nichts abgestellt).<br /><br /></div><div style="font-family: Verdana; font-size: 10pt; font-style: normal; font-weight: normal; color: #000000">Wir haben auch wieder die reject_unverified_recipient aktiviert.<br />Seit 1h keine Fehler in den Logs.</div><div style="font-family: Verdana; font-size: 10pt; font-style: normal; font-weight: normal; color: #000000"><br /></div><div style="font-family: Verdana; font-size: 10pt; font-style: normal; font-weight: normal; color: #000000">Komisch ist, dass das Problem damit wirklich scheinbar zu tun hatte.<br />Wir gingen davon aus, dass wenn einer der DNS in der Liste nicht geht, wird einfach ein anderer genommen.<br />2/4 gingen auf jeden Fall (die 1. beiden).<br />Auch deuten die Logs ja nicht auf Probleme mit dem DNS.<br />Auch gingen von der Konsole (SSH) ja die DNS lookups problemlos.</div><div style="font-family: Verdana; font-size: 10pt; font-style: normal; font-weight: normal; color: #000000"><br /></div><div style="font-family: Verdana; font-size: 10pt; font-style: normal; font-weight: normal; color: #000000">Wir hoffen es lag wirklich daran.</div><div style="font-family: Verdana; font-size: 10pt; font-style: normal; font-weight: normal; color: #000000"><br /></div><div><br /></div>
<div>------ Originalnachricht ------</div>
<div>Von: "Gerald Galster" <<a href="mailto:list+postfixbuch@gcore.biz">list+postfixbuch@gcore.biz</a>></div>
<div>An: "Diskussionen und Support rund um Postfix" <<a href="mailto:postfixbuch-users@listen.jpberlin.de">postfixbuch-users@listen.jpberlin.de</a>></div>
<div>Gesendet: 19.06.2020 15:04:45</div>
<div>Betreff: Re: plötzlich sehr viele Recipient address rejected: unverified address: Address verification in progress</div><div><br /></div>
<div id="x982e23c360bb4e8" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><blockquote cite="4E883640-28EE-47C9-9734-60C077369AB9@gcore.biz" type="cite" class="cite2">
Hallo,<div class=""><br class="" /><div><blockquote type="cite" class=""><div class=""><div style="caret-color: rgb(0, 0, 0); font-family: Verdana; font-size: 13.333333015441895px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none;" class="">wir haben den<br class="" />reject_unverified_recipient im smtpd_recipient_restrictions = aktiviert:</div><div style="caret-color: rgb(0, 0, 0); font-family: Verdana; font-size: 13.333333015441895px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none;" class=""><br class="" /></div><div style="caret-color: rgb(0, 0, 0); font-family: Verdana; font-size: 13.333333015441895px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none;" class="">smtpd_recipient_restrictions = permit_mynetworks,<br class="" /> reject_unknown_recipient_domain,<br class="" /> reject_unknown_sender_domain,<br class="" /> reject_unlisted_sender,<br class="" /> reject_unlisted_recipient,<br class="" /> reject_non_fqdn_recipient,<br class="" /> reject_non_fqdn_sender,<br class="" /> permit_sasl_authenticated,<br class="" /> check_recipient_access hash:/etc/postfix/recipient_access_cpanel,<br class="" /> check_recipient_access hash:/etc/postfix/recipient_access,<br class="" /> check_policy_service unix:postgrey/socket,<br class="" /> #deaktiviert 19.06.20 da: Recipient address rejected: unverified address: Address verification in progress;<br class="" /> #reject_unverified_recipient,<br class="" /> reject_unauth_destination</div><div style="caret-color: rgb(0, 0, 0); font-family: Verdana; font-size: 13.333333015441895px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none;" class=""><br class="" /></div><div style="caret-color: rgb(0, 0, 0); font-family: Verdana; font-size: 13.333333015441895px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none;" class="">Seit Jahren ohne Probleme.<br class="" />Seit heute ca. 3 Uhr erhalten wir bei fast allen neuen Mails (es sind 9478 Einträge im log):</div><div style="caret-color: rgb(0, 0, 0); font-family: Verdana; font-size: 13.333333015441895px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration: none;" class="">cat /var/log/maillog |grep "Address verification in progress" |wc -l<br class="" /><br class="" />z.B.<br class="" /> NOQUEUE: reject: RCPT from<span class="Apple-converted-space"> </span><a href="http://mail-lj1-f169.google.com/" class="">mail-lj1-f169.google.com</a>[209.85.208.169]:<br class="" />450 4.1.1 <verschiedenste lokale mailadressen>: Recipient address rejected: unverified address: Address verification in progress; <br class="" /><br class="" /><br class="" />Was kann der Grund dafür sein?<br class="" /></div></div></blockquote><br class="" /></div><div><a href="http://www.postfix.org/postconf.5.html#address_verify_poll_count" class="">http://www.postfix.org/postconf.5.html#address_verify_poll_count</a></div><div><br class="" /></div><div>address_verify_poll_count (default: normal: 3, overload: 1)</div><div>Specify 1 to implement a crude form of greylisting, that is, always defer the first delivery request for a new address.</div><div><br class="" /></div><div># postconf | egrep address_verify_poll<br class="" />address_verify_poll_count = ${stress?{1}:{3}}<br class="" />address_verify_poll_delay = 3s<br class="" /><br class="" /></div><div>Was sagen diese Werte und war das System unter Stress?</div><div><br class="" /></div><div>Wie werden die Empfänger überprüft und klappt das manuell ohne Verzögerung?</div><div>Vielleicht gibt es Probleme mit einer Datenbank, einem weiteren Mailserver, Validierung über IMAP Server, RAID degraded, etc.</div><div><br class="" /></div><div>Außerdem werden die Daten auch zwischengespeichert, siehe CACHE CONTROLS in <a href="http://www.postfix.org/verify.8.html" class="">http://www.postfix.org/verify.8.html</a></div><div>Da die verify_db schon gelöscht und postfix neu gestartet wurde, liegt das Problem vermutlich anderswo.</div><div><br class="" /></div><div>Viele Grüße</div><div>Gerald Galster</div><br class="" /></div></blockquote></div>
</body></html>