Topic: Help! Outgoing Mail queueing & can't find reason

[NickCritten]

Hi All,

Firstly, I've searched the Forums and Bugtracker and not found anything that relates exactly to this problem.

It appears that any outgoing emails are being put into the queue, but the queue is not emptying.

I have compared the logs from one of my working servers to the one having this issue, and the only difference I can see is the following:

Non-Working:

Code: [Select]

@4000000045ddaa79233a8c0c new msg 14271619
@4000000045ddaa79233a97c4 info msg 14271619: bytes 995 from <admin@domain.co.uk> qp 5032 uid 453


Working

Code: [Select]

@4000000045dd9fe135f4957c new msg 4408802
@4000000045dd9fe135f4a134 info msg 4408802: bytes 803 from <admin@otherdomain.uk> qp 20514 uid 453
@4000000045dd9fe136e640ac starting delivery 177: msg 4408802 to remote nick.critten@somewhere.uk
@4000000045dd9fe136e6504c status: local 0/10 remote 1/20
@4000000045dd9fe137d68c4c delivery 177: success:139.1.150.165_accepted_message./Remote_host_said:_250_2.6.0__<20070222135119.8kats25nkggsgooc@10.139.251.141>_Queued_mail_for_delivery/
@4000000045dd9fe137d83614 status: local 0/10 remote 0/20
@4000000045dd9fe137d92074 end msg 4408802


As you can see, it isn't trying to deliver the email to the remote site.

Here is the qpsmtpd log for this:

Code: [Select]

@4000000045ddac0d0b0772bc 5139 Accepted connection 0/40 from 127.0.0.1 / localhost
@4000000045ddac0d0b0ec9a4 5139 Connection from localhost [127.0.0.1]
@4000000045ddac0d0b1d4894 5139 running plugin (connect): check_earlytalker
@4000000045ddac0e0b72d6ec 5139 check_earlytalker plugin: remote host said nothing spontaneous, proceeding
@4000000045ddac0e0b72e68c 5139 running plugin (connect): check_relay
@4000000045ddac0e0b72ea74 5139 running plugin (connect): check_norelay
@4000000045ddac0e0b82192c 5139 220 domain.co.uk ESMTP qpsmtpd 0.31.1 ready; send us your mail, but not your spam.
@4000000045ddac0e0b8d63cc 5139 dispatching EHLO localhost
@4000000045ddac0e0b960e8c 5139 running plugin (ehlo): check_spamhelo
@4000000045ddac0e0bb8a9ec 5139 250-domain.co.uk Hi localhost [127.0.0.1]
@4000000045ddac0e0bc25e4c 5139 250-PIPELINING
@4000000045ddac0e0bc76374 5139 250 8BITMIME
@4000000045ddac0e0e8c20f4 5139 dispatching MAIL FROM:<admin@domain.co.uk>
@4000000045ddac0e0e8c2cac 5139 full from_parameter: FROM:<admin@domain.co.uk>
@4000000045ddac0e0e8c347c 5139 from email address : [<admin@domain.co.uk>]
@4000000045ddac0e0e8c3864 5139 running plugin (mail): require_resolvable_fromhost
@4000000045ddac0e0e8c4034 5139 running plugin (mail): check_badmailfrom
@4000000045ddac0e0ea759b4 5139 getting mail from <admin@domain.co.uk>
@4000000045ddac0e0ea76184 5139 250 <admin@domain.co.uk>, sender OK - how exciting to get mail from you!
@4000000045ddac0e0f157d04 5139 dispatching RCPT TO:<ncritten@geemale.com>
@4000000045ddac0e0f1588bc 5139 to email address : [<ncritten@geemale.com>]
@4000000045ddac0e0f15908c 5139 running plugin (rcpt): check_badmailfrom
@4000000045ddac0e0f159474 5139 running plugin (rcpt): check_badrcptto_patterns
@4000000045ddac0e0f15985c 5139 running plugin (rcpt): check_badrcptto
@4000000045ddac0e0f159c44 5139 running plugin (rcpt): rcpt_ok
@4000000045ddac0e0f2ef48c 5139 250 <ncritten@geemale.com>, recipient ok
@4000000045ddac0e0f4f49e4 5139 dispatching DATA
@4000000045ddac0e0f4f559c 5139 354 go ahead
@4000000045ddac0e0f80410c 5139 spooling message to disk
@4000000045ddac0e0fcc9bec 5139 running plugin (data_post): check_basicheaders
@4000000045ddac0e0fcca7a4 5139 running plugin (data_post): tnef2mime
@4000000045ddac0e10fdccd4 5139 running plugin (data_post): spamassassin
@4000000045ddac120305375c 5139 spamassassin plugin: check_spam: No, hits=-1.5, required=5.0, tests=ALL_TRUSTED,BLANK_LINES_70_80,NO_REAL_NAME
@4000000045ddac12030546fc 5139 running plugin (data_post): virus::clamav
@4000000045ddac1204d27194 5139 virus::clamav plugin: clamscan results: /var/spool/qpsmtpd/1172155396:5139:0: Access denied. ERROR
@4000000045ddac1204d27d4c 5139 virus::clamav plugin: ClamAV error: /usr/bin/clamdscan --stdout  --disable-summary /var/spool/qpsmtpd/1172155396:5139:0 2>&1: 2
@4000000045ddac1204d2851c
@4000000045ddac12051e053c 5139 running plugin (queue): queue::qmail_2dqueue
@4000000045ddac12051e10f4 5143 queue::qmail_2dqueue plugin: (for 5139 ) Queuing qp 5143 to /var/qmail/bin/qmail-queue
@4000000045ddac120ecfcd2c 5139 250 Queued! 1172155400 qp 5143 <20070222144315.iyd9acwps0owogo8@zeus.domain.co.uk>
@4000000045ddac120ee96fac 5139 dispatching QUIT
@4000000045ddac120f18e41c 5139 221 domain.co.uk closing connection. Have a wonderful day.
@4000000045ddac120f18efd4 5139 click, disconnecting
@4000000045ddac130ada4454 4817 cleaning up after 5139
The only issue I can see here is an Access denied. ERROR during the clamav scan, but the email still gets queued!

Can anyone talk me through troubleshooting this please?
The Box in Question is a 7.0pre3 (Due for upgrade next week)

note: All FQDNs have been changed to protect my clients privacy.

Thanks in advance.

[byte]

Firstly, I've searched the Forums and Bugtracker and not found anything that relates exactly to this problem.

Nick you should know by now  any potential problems via Bug Tracker.

Can anyone talk me through troubleshooting this please?
The Box in Question is a 7.0pre3 (Due for upgrade next week)

Hmm 7.0pre3 that's unsupported and won't 100% upgrade to 7.0 final or latest 7.1, but report to bug tracker and the core dev's will decide.

[NickCritten]

Nick you should know by now Razz any potential problems via Bug Tracker.

Yeah I know, I Will do, it's just that this is quite urgent and I was hoping someone could talk me through troubleshooting this so that I have something to report to bugtracker other than "It Doesn't Work!"


Can anyone set me straight on one or two things though?

What daemon receives smtp messages? qmail / qpsmtpd
What daemon sends smtp messages out? qmail / qpsmtpd / something else

Where can I see the logs of the attempted outgoing SMTPdeliveries, because I'm not seeing them in either qmail or qpsmtp log files, and I know the server is trying to deliver them as I'm running iftop and can see 8 - 10 open SMTP sessions to our ISP's mail server.

Hmm 7.0pre3 that's unsupported and won't 100% upgrade to 7.0 final or latest 7.1, but report to bug tracker and the core dev's will decide.

*gulp* I thought all the Pre Final 7's could upgrade to 7.0
Oh Dear.

[mmccarn]

qpsmtpd accepts connections on port 25.
qmail delivers email to local mailboxes, internal servers, or external servers.

When I've had email queueing but not getting delivered it has been due either to overloaded hardware or to external tarpits.

I had at least one site where a system got hacked (not the SME server), the site got listed as an open relay, then all my outbound email stopped flowing.

If I rebooted, mail would flow for about 5 minutes, then stop.

Running netstat -an | grep :25 then using dnsstuff.com (along with other tools) to research the remote servers told me they were all tarpits.

Luckily, I was able to:
a) scrub the hacked computer
b) change the IP address my SME used for outbound email delivery

and things started flowing again...

[meanlocha]

i have been experiencing random  holdups on qpsmtpd for a while using
SME 7.1 and have just decided to investigate.  My quick fix
is to do:
service qpsmtpd stop
and
service qpsmtpd start
This usually solves the problem temporarily ....until the next time.

Anthony

[byte]

i have been experiencing random  holdups on qpsmtpd for a while using
SME 7.1 and have just decided to investigate.  My quick fix
is to do:
service qpsmtpd stop
and
service qpsmtpd start
This usually solves the problem temporarily ....until the next time.

Anthony

Anthony, have you raised this via the Bug Tracker? if not can you please do so then there won't be a "until the next time" - Thanks!