Topic: Trouble understanding qpsmtpd log output

[raem]

reboot13

> /sbin/e-smith/config setprop qpsmtpd RHSBL disable

Not quite right (disabled not disable - unless a typo)
You don't need the /sbin/e-smith/ part on sme7

config setprop qpsmtpd RHSBL disabled

and it should be followed by a

signal-event email-update

[CharlieBrady]

One of the problem domains seems to be UPS.com.

You've only shown us logs showing messages from messagelabs.com. But you also seem to have falsified your logs, which doesn't help us to diagnose the problem.

I have tried to disable spamd, clamd, etc... It didn't solve the 451's

The problem is the message not arriving, not anything you do with it after it arrives.

[reboot13]

Hi guys, thought the problem was resolved, but now it seems to be only temporary. As I had mentioned, there is a Sonicwall firewall appliance as the gateway to the internet. Could this cause my issues here?

Here are the log files again:

Code: [Select]


2007-02-05 13:09:26.107301500 21111 Accepted connection 2/40 from 216.82.240.83 / mail76.messagelabs.com
2007-02-05 13:09:26.107561500 21111 Connection from mail76.messagelabs.com [216.82.240.83]
2007-02-05 13:09:26.108248500 21111 running plugin (connect): peers
2007-02-05 13:09:26.108843500 21111 trying to get config for peers/0
2007-02-05 13:09:26.109130500 21111 loading plugins auth/auth_cvm_unix_local cvm_socket /var/lib/cvm/cvm-unix-local.socket enable_smtp no enable_ssmtp yes check_earlytalker count_unrecognized_commands 4 check_relay check_norelay whitelist_soft require_resolvable_fromhost check_basicheaders check_badmailfrom check_badrcptto_patterns check_badrcptto check_spamhelo check_goodrcptto extn - rcpt_ok virus/pattern_filter check=patterns action=deny tnef2mime spamassassin reject_threshold 12 munge_subject_threshold 5 virus/clamav clamscan_path=/usr/bin/clamdscan action=reject max_size=25000000 queue/qmail-queue from peers/0
2007-02-05 13:09:26.110260500 21111 check_earlytalker hooking connect
2007-02-05 13:09:26.110735500 21111 count_unrecognized_commands hooking unrecognized_command
2007-02-05 13:09:26.111208500 21111 check_relay hooking connect
2007-02-05 13:09:26.111682500 21111 check_norelay hooking connect
2007-02-05 13:09:26.112214500 21111 whitelist_soft hooking connect
2007-02-05 13:09:26.112393500 21111 whitelist_soft hooking helo
2007-02-05 13:09:26.112580500 21111 whitelist_soft hooking ehlo
2007-02-05 13:09:26.112762500 21111 whitelist_soft hooking mail
2007-02-05 13:09:26.112927500 21111 whitelist_soft hooking rcpt
2007-02-05 13:09:26.113288500 21111 require_resolvable_fromhost hooking mail
2007-02-05 13:09:26.113765500 21111 check_basicheaders hooking data_post
2007-02-05 13:09:26.114295500 21111 check_badmailfrom hooking rcpt
2007-02-05 13:09:26.114490500 21111 check_badmailfrom hooking mail
2007-02-05 13:09:26.114920500 21111 check_badrcptto_patterns hooking rcpt
2007-02-05 13:09:26.115378500 21111 check_badrcptto hooking rcpt
2007-02-05 13:09:26.115820500 21111 check_spamhelo hooking ehlo
2007-02-05 13:09:26.115994500 21111 check_spamhelo hooking helo
2007-02-05 13:09:26.116550500 21111 check_goodrcptto hooking rcpt
2007-02-05 13:09:26.116901500 21111 rcpt_ok hooking rcpt
2007-02-05 13:09:26.117497500 21111 virus::pattern_filter hooking data_post
2007-02-05 13:09:26.117974500 21111 tnef2mime hooking data_post
2007-02-05 13:09:26.118332500 21111 spamassassin hooking data_post
2007-02-05 13:09:26.118682500 21111 spamassassin hooking data_post
2007-02-05 13:09:26.118859500 21111 spamassassin hooking data_post
2007-02-05 13:09:26.119195500 21111 virus::clamav hooking data_post
2007-02-05 13:09:26.119816500 21111 queue::qmail_2dqueue hooking queue
2007-02-05 13:09:26.120356500 21111 Plugin peers, hook connect returned DECLINED,
2007-02-05 13:09:26.120509500 21111 running plugin (connect): check_earlytalker
2007-02-05 13:09:27.121466500 21111 check_earlytalker plugin: remote host said nothing spontaneous, proceeding
2007-02-05 13:09:27.121677500 21111 Plugin check_earlytalker, hook connect returned DECLINED,
2007-02-05 13:09:27.121820500 21111 running plugin (connect): check_relay
2007-02-05 13:09:27.122004500 21111 trying to get config for relayclients
2007-02-05 13:09:27.122451500 21111 trying to get config for morerelayclients
2007-02-05 13:09:27.122739500 21111 Plugin check_relay, hook connect returned DECLINED,
2007-02-05 13:09:27.122883500 21111 running plugin (connect): check_norelay
2007-02-05 13:09:27.123050500 21111 trying to get config for norelayclients
2007-02-05 13:09:27.123453500 21111 Plugin check_norelay, hook connect returned DECLINED,
2007-02-05 13:09:27.123598500 21111 running plugin (connect): whitelist_soft
2007-02-05 13:09:27.123787500 21111 trying to get config for whitelisthosts
2007-02-05 13:09:27.124023500 21111 Plugin whitelist_soft, hook connect returned DECLINED,
2007-02-05 13:09:27.124195500 21111 trying to get config for smtpgreeting
2007-02-05 13:09:27.124528500 21111 220 server.alumicorwpg.com ESMTP
2007-02-05 13:09:27.124736500 21111 trying to get config for timeoutsmtpd
2007-02-05 13:09:27.124938500 21111 trying to get config for timeout
2007-02-05 13:09:27.327357500 21111 dispatching HELO mail76.messagelabs.com
2007-02-05 13:09:27.327651500 21111 running plugin (helo): whitelist_soft
2007-02-05 13:09:27.327832500 21111 trying to get config for whitelisthelo
2007-02-05 13:09:27.328077500 21111 Plugin whitelist_soft, hook helo returned DECLINED,
2007-02-05 13:09:27.328236500 21111 running plugin (helo): check_spamhelo
2007-02-05 13:09:27.328407500 21111 trying to get config for badhelo
2007-02-05 13:09:27.328806500 21111 Plugin check_spamhelo, hook helo returned DECLINED,
2007-02-05 13:09:27.328999500 21111 trying to get config for me
2007-02-05 13:09:27.329328500 21111 250 alumicorwpg.com Hi mail76.messagelabs.com [216.82.240.83]; I am so happy to meet you.
2007-02-05 13:09:27.516151500 21111 dispatching MAIL FROM:<Heath_Warner@Indalex.com>
2007-02-05 13:09:27.516482500 21111 full from_parameter: FROM:<Heath_Warner@Indalex.com>
2007-02-05 13:09:27.516625500 21111 from email address : [<Heath_Warner@Indalex.com>]
2007-02-05 13:09:27.517280500 21111 running plugin (mail): whitelist_soft
2007-02-05 13:09:27.517505500 21111 trying to get config for whitelistsenders
2007-02-05 13:09:27.517954500 21111 Plugin whitelist_soft, hook mail returned DECLINED,
2007-02-05 13:09:27.518099500 21111 running plugin (mail): require_resolvable_fromhost
2007-02-05 13:09:27.518311500 21111 trying to get config for invalid_resolvable_fromhost
2007-02-05 13:09:27.519475500 21111 trying to get config for require_resolvable_fromhost
2007-02-05 13:09:28.472615500 21111 Plugin require_resolvable_fromhost, hook mail returned DECLINED,
2007-02-05 13:09:28.472768500 21111 running plugin (mail): check_badmailfrom
2007-02-05 13:09:28.472958500 21111 trying to get config for badmailfrom
2007-02-05 13:09:28.473340500 21111 Plugin check_badmailfrom, hook mail returned DECLINED,
2007-02-05 13:09:28.473533500 21111 getting mail from <Heath_Warner@Indalex.com>
2007-02-05 13:09:28.473696500 21111 250 <Heath_Warner@Indalex.com>, sender OK - how exciting to get mail from you!
2007-02-05 13:09:28.683044500 21111 dispatching RCPT TO:<mike@alumicorwpg.com>
2007-02-05 13:09:28.683320500 21111 to email address : [<mike@alumicorwpg.com>]
2007-02-05 13:09:28.683612500 21111 running plugin (rcpt): whitelist_soft
2007-02-05 13:09:28.683806500 21111 trying to get config for whitelistrcpt
2007-02-05 13:09:28.684048500 21111 Plugin whitelist_soft, hook rcpt returned DECLINED,
2007-02-05 13:09:28.684199500 21111 running plugin (rcpt): check_badmailfrom
2007-02-05 13:09:28.684389500 21111 Plugin check_badmailfrom, hook rcpt returned DECLINED,
2007-02-05 13:09:28.684529500 21111 running plugin (rcpt): check_badrcptto_patterns
2007-02-05 13:09:28.684708500 21111 trying to get config for badrcptto_patterns
2007-02-05 13:09:28.685204500 21111 Plugin check_badrcptto_patterns, hook rcpt returned DECLINED,
2007-02-05 13:09:28.685350500 21111 running plugin (rcpt): check_badrcptto
2007-02-05 13:09:28.685527500 21111 trying to get config for badrcptto
2007-02-05 13:09:28.686115500 21111 Plugin check_badrcptto, hook rcpt returned DECLINED,
2007-02-05 13:09:28.686266500 21111 running plugin (rcpt): check_goodrcptto
2007-02-05 13:09:28.686467500 21111 check_goodrcptto plugin: stripping '-' extensions
2007-02-05 13:09:28.686624500 21111 trying to get config for goodrcptto
2007-02-05 13:09:28.688250500 21111 check_goodrcptto plugin: address includes extn '-', checking users: mike
2007-02-05 13:09:28.689245500 21111 Plugin check_goodrcptto, hook rcpt returned DECLINED,
2007-02-05 13:09:28.689391500 21111 running plugin (rcpt): rcpt_ok
2007-02-05 13:09:28.689579500 21111 trying to get config for me
2007-02-05 13:09:28.689742500 21111 trying to get config for rcpthosts
2007-02-05 13:09:28.690219500 21111 Plugin rcpt_ok, hook rcpt returned OK,
2007-02-05 13:09:28.690407500 21111 250 <mike@alumicorwpg.com>, recipient ok
2007-02-05 13:09:28.878890500 21111 dispatching RCPT TO:<ken@alumicorwpg.com>
2007-02-05 13:09:28.879125500 21111 to email address : [<ken@alumicorwpg.com>]
2007-02-05 13:09:28.879358500 21111 running plugin (rcpt): whitelist_soft
2007-02-05 13:09:28.879545500 21111 trying to get config for whitelistrcpt
2007-02-05 13:09:28.879808500 21111 Plugin whitelist_soft, hook rcpt returned DECLINED,
2007-02-05 13:09:28.879951500 21111 running plugin (rcpt): check_badmailfindalexrom
2007-02-05 13:09:28.880151500 21111 Plugin check_badmailfrom, hook rcpt returned DECLINED,
2007-02-05 13:09:28.880295500 21111 running plugin (rcpt): check_badrcptto_patterns
2007-02-05 13:09:28.880469500 21111 trying to get config for badrcptto_patterns
2007-02-05 13:09:28.880752500 21111 Plugin check_badrcptto_patterns, hook rcpt returned DECLINED,
2007-02-05 13:09:28.880894500 21111 running plugin (rcpt): check_badrcptto
2007-02-05 13:09:28.881070500 21111 trying to get config for badrcptto
2007-02-05 13:09:28.881392500 21111 Plugin check_badrcptto, hook rcpt returned DECLINED,
2007-02-05 13:09:28.881533500 21111 running plugin (rcpt): check_goodrcptto
2007-02-05 13:09:28.881703500 21111 check_goodrcptto plugin: stripping '-' extensions
2007-02-05 13:09:28.881853500 21111 trying to get config for goodrcptto
2007-02-05 13:09:28.882451500 21111 check_goodrcptto plugin: address includes extn '-', checking users: ken
2007-02-05 13:09:28.883296500 21111 Plugin check_goodrcptto, hook rcpt returned DECLINED,
2007-02-05 13:09:28.883440500 21111 running plugin (rcpt): rcpt_ok
2007-02-05 13:09:28.883607500 21111 trying to get config for me
2007-02-05 13:09:28.883770500 21111 trying to get config for rcpthosts
2007-02-05 13:09:28.884008500 21111 Plugin rcpt_ok, hook rcpt returned OK,
2007-02-05 13:09:28.884185500 21111 250 <ken@alumicorwpg.com>, recipient ok
2007-02-05 13:09:29.079229500 21111 dispatching RCPT TO:<shaun@alumicorwpg.com>
2007-02-05 13:09:29.079472500 21111 to email address : [<shaun@alumicorwpg.com>]
2007-02-05 13:09:29.079694500 21111 running plugin (rcpt): whitelist_soft
2007-02-05 13:09:29.079878500 21111 trying to get config for whitelistrcpt
2007-02-05 13:09:29.080149500 21111 Plugin whitelist_soft, hook rcpt returned DECLINED,
2007-02-05 13:09:29.080296500 21111 running plugin (rcpt): check_badmailfrom
2007-02-05 13:09:29.080484500 21111 Plugin check_badmailfrom, hook rcpt returned DECLINED,
2007-02-05 13:09:29.080629500 21111 running plugin (rcpt): check_badrcptto_patterns
2007-02-05 13:09:29.080801500 21111 trying to get config for badrcptto_patterns
2007-02-05 13:09:29.081087500 21111 Plugin check_badrcptto_patterns, hook rcpt returned DECLINED,
2007-02-05 13:09:29.081239500 21111 running plugin (rcpt): check_badrcptto
2007-02-05 13:09:29.081412500 21111 trying to get config for badrcptto
2007-02-05 13:09:29.081722500 21111 Plugin check_badrcptto, hook rcpt returned DECLINED,
2007-02-05 13:09:29.081865500 21111 running plugin (rcpt): check_goodrcptto
2007-02-05 13:09:29.082042500 21111 check_goodrcptto plugin: stripping '-' extensions
2007-02-05 13:09:29.082198500 21111 trying to get config for goodrcptto
2007-02-05 13:09:29.082771500 21111 check_goodrcptto plugin: address includes extn '-', checking users: shaun
2007-02-05 13:09:29.083994500 21111 Plugin check_goodrcptto, hook rcpt returned DECLINED,
2007-02-05 13:09:29.084143500 21111 running plugin (rcpt): rcpt_ok
2007-02-05 13:09:29.084314500 21111 trying to get config for me
2007-02-05 13:09:29.084476500 21111 trying to get config for rcpthosts
2007-02-05 13:09:29.084703500 21111 Plugin rcpt_ok, hook rcpt returned OK,
2007-02-05 13:09:29.084879500 21111 250 <shaun@alumicorwpg.com>, recipient ok
2007-02-05 13:09:29.281670500 21111 dispatching DATA
2007-02-05 13:09:29.281977500 21111 354 go ahead
2007-02-05 13:09:29.282184500 21111 trying to get config for databytes
2007-02-05 13:09:29.282524500 21111 max_size: 15000000 / size: 0
2007-02-05 13:09:29.282832500 21111 trying to get config for timeout
2007-02-05 13:09:30.599959500 21111 spooling message to disk

2007-02-05 13:27:21.578952500 21111 max_size: 15000000 / size: 1004
2007-02-05 13:27:21.579199500 21111 trying to get config for me
2007-02-05 13:27:21.579861500 21111 451 Incomplete DATA

2007-02-05 13:27:22.132186500 3790 cleaning up after 21111


[CharlieBrady]

Hi guys, thought the problem was resolved, but now it seems to be only temporary. As I had mentioned, there is a Sonicwall firewall appliance as the gateway to the internet. Could this cause my issues here?

Yes, it could.  Or some other firewall is causing a problem. Your logs show signs of short packets arriving, but large packets not arriving.

Read http://www.phildev.net/mss/mss-talk.pdf and google for terms such as PMTU, DF, ICMP, "fragmentation required" and "mss clamping".