Koozali.org: home of the SME Server

Contribs.org Forums => General Discussion => Topic started by: erikja on October 03, 2006, 07:53:46 AM

Title: Which logfile shows it ?
Post by: erikja on October 03, 2006, 07:53:46 AM
Hi.

I would like to know which logfile that shows in and outgoing mails on my sme 7.0 server.

I have just set it up, and have sent a mail to a friend, but it would be nice to be able to view the in/outgoing activity.

TIA
Title: Re: Which logfile shows it ?
Post by: raem on October 04, 2006, 01:22:51 PM
erikja

/var/log/qmail/current
/var/log/qpsmtpd/current
/var/log/sqpsmtpd/current
Title: Re: Which logfile shows it ?
Post by: erikja on October 04, 2006, 02:56:27 PM
Quote from: "RayMitchell"
erikja

/var/log/qmail/current
/var/log/qpsmtpd/current
/var/log/sqpsmtpd/current



Thanks you very much for the reply.
Title: Re: Which logfile shows it ?
Post by: erikja on October 05, 2006, 10:09:42 AM
Quote from: "RayMitchell"
erikja

/var/log/qmail/current
/var/log/qpsmtpd/current
/var/log/sqpsmtpd/current



Hi again.

I now have looked through the maillogs. I should have mails to come in for eja@urbakken.dk, but cannot see them.

I hav eplaced them here:

For var/log/qmail/current:

http://img204.imageshack.us/my.php?image=qmailcurrentdn9.jpg

For /var/log/qpsmtpd/current:

http://img226.imageshack.us/my.php?image=qpsmtdpcurrentqw5.jpg


For /var/log/sqpsmtpd/current:

http://img226.imageshack.us/my.php?image=sqpsmtpdcurrentad8.jpg

What could be the reason, that I cannot see incoming mails ?
Title: Which logfile shows it ?
Post by: mmccarn on October 06, 2006, 03:08:30 AM
I downloaded collapse_qpsmtpd_conn from http://www.hjp.at/projekte/qpsmtpd/log-tools/ and use that to "watch" the qpsmtpd process.

By default, qpsmtpd breaks each message across many different lines in the log files, with the only way to know which lines go together being the 2nd column of the log file (which I think is the i-node number for the file holding the body of the message...).

collapse_qpsmtpd_conn reads the log file and collapses each message onto one line so you can more easily see what's going on
Title: Which logfile shows it ?
Post by: erikja on October 06, 2006, 06:36:18 AM
Quote from: "mmccarn"
I downloaded collapse_qpsmtpd_conn from http://www.hjp.at/projekte/qpsmtpd/log-tools/ and use that to "watch" the qpsmtpd process.

By default, qpsmtpd breaks each message across many different lines in the log files, with the only way to know which lines go together being the 2nd column of the log file (which I think is the i-node number for the file holding the body of the message...).

collapse_qpsmtpd_conn reads the log file and collapses each message onto one line so you can more easily see what's going on


Thanks for the reply. I'll try to download  the same one.
Title: Re: Which logfile shows it ?
Post by: CharlieBrady on October 07, 2006, 02:23:06 AM
Quote from: "erikja"

I now have looked through the maillogs. I should have mails to come in for eja@urbakken.dk, but cannot see them.


They will only come if DNS is correctly configured for urbakken.dk, and if your ISP allows inbound TCP port 25 to your server. Neither of those has anything to do with SME, and nothing will show up in your logs if they are wrong.

Check your DNS at dnsreport.com.

Looks to me that you have ClarkConnect installed, and your ISP is blocking port 25.
Title: Re: Which logfile shows it ?
Post by: erikja on October 07, 2006, 05:51:26 AM
Quote from: "CharlieBrady"
Quote from: "erikja"

I now have looked through the maillogs. I should have mails to come in for eja@urbakken.dk, but cannot see them.


They will only come if DNS is correctly configured for urbakken.dk, and if your ISP allows inbound TCP port 25 to your server. Neither of those has anything to do with SME, and nothing will show up in your logs if they are wrong.

Check your DNS at dnsreport.com.

Looks to me that you have ClarkConnect installed, and your ISP is blocking port 25.



Thanks for your reply. I can tell You, that the DNS should be ok. At the present I run the Clarkconnect alone, and are getting mails ok. I'm a member of a DNS supporter, where I have set up an MX record:

Code: [Select]
MX (@Vært -> A record mailserver)
Vært Mail udveksler Præference TTL Ændring
urbakken.dk mail.urbakken.dk 10 43200  
 
urbakken.dk backup-mx.post.tele.dk 20 43200  
 


This works fine with my Clarkconnect -alone-.
Title: Re: Which logfile shows it ?
Post by: raem on October 07, 2006, 06:44:02 AM
erikja

dnsreport.com shows:

Connect to mail servers ERROR: I could not complete a connection to one or more of your mailservers:
mail.urbakken.dk: Timed out [Last data sent: [Did not connect]]


Something is wrong and it could be as Charlie said, your ISP is blocking port 25
Title: Re: Which logfile shows it ?
Post by: erikja on October 07, 2006, 07:07:04 AM
Quote from: "RayMitchell"
erikja

dnsreport.com shows:

Connect to mail servers ERROR: I could not complete a connection to one or more of your mailservers:
mail.urbakken.dk: Timed out [Last data sent: [Did not connect]]


Something is wrong and it could be as Charlie said, your ISP is blocking port 25


Yes, my ISP is blocking port 25, but that should be fixed at my DNS provider:

Is there anything here, that seems to be wrong in this setup ?

http://img176.imageshack.us/my.php?image=dnsmt2.jpg



I can see, that if I used postfix I should put in a relayhost in /etc/postfix/main.cf and in relayhost = smtp.mail.dk

Where should that be placed in Qmail as I understand, that sme is running with ?
Title: Re: Which logfile shows it ?
Post by: raem on October 07, 2006, 10:48:08 AM
erikja

> my ISP is blocking port 25, but that should be fixed at my DNS provider:

As I understand it you need to ask your ISP to unblock port 25 or change to another ISP who does not block port 25.
Your DNS provider cannot "fix" a blocked port.
Title: Re: Which logfile shows it ?
Post by: erikja on October 07, 2006, 11:15:12 AM
Quote from: "RayMitchell"
erikja

> my ISP is blocking port 25, but that should be fixed at my DNS provider:

As I understand it you need to ask your ISP to unblock port 25 or change to another ISP who does not block port 25.
Your DNS provider cannot "fix" a blocked port.


Well the ISP will not unblock the service.

But a my domain urbakken.dk is hosted another place, I have done what the ISP tells us to do:

"To eleminate misuse of the mailserver , the TCP/25 (mailserver-port) is blocked in the ISP.s router, and therefore You have to setup in DNS a second mailserver (backup-mx.post.tele.dk). That should be done like this:

mail.domain.dk IN A x.x.x.x
domain.dk IN MX 10 mail.domain.dk
domain.dk IN MX 20 backup-mx.post.tele.dk

Also it is necessary to change the setup of You mailserver to use smart-host also called relay host

Using postfix it's done like this:

In /etc/postfix/main.cf

relayhost=smtp.mail.dk

Here's what's going on in my /var/log/maillog, BUT for Clarkconnect using postfix:


Code: [Select]
Oct  7 11:08:21 mail pop3-login: Login: eja [192.168.1.4]
Oct  7 11:09:09 mail fetchmail[26053]: awakened at Sat 07 Oct 2006 11:09:09 AM CEST
Oct  7 11:09:12 mail fetchmail[26053]: sleeping at Sat 07 Oct 2006 11:09:12 AM CEST
Oct  7 11:09:21 mail pop3-login: Login: eja [192.168.1.4]
Oct  7 11:09:27 mail postfix/smtpd[13227]: connect from backup-mx2.post.tele.dk[80.160.77.115]
Oct  7 11:09:27 mail postfix/smtpd[13227]: E3E5892943A: client=backup-mx2.post.tele.dk[80.160.77.115]
Oct  7 11:09:27 mail postfix/cleanup[13229]: E3E5892943A: message-id=<000001c6e9f0$4e329b00$0100007f@your-fsyly0jtwn>
Oct  7 11:09:31 mail postfix/qmgr[13952]: E3E5892943A: from=<william@perlite.biz>, size=26637, nrcpt=2 (queue active)
Oct  7 11:09:31 mail spamd[6963]: connection from localhost.localdomain [127.0.0.1] at port 51841
Oct  7 11:09:31 mail spamd[6963]: info: setuid to filter succeeded
Oct  7 11:09:31 mail spamd[6963]: processing message <000001c6e9f0$4e329b00$0100007f@your-fsyly0jtwn> for filter:429.
Oct  7 11:09:31 mail postfix/smtpd[13227]: disconnect from backup-mx2.post.tele.dk[80.160.77.115]
Oct  7 11:09:31 mail spamd[6963]: identified spam (6.2/4.0) for filter:429 in 0.1 seconds, 26295 bytes.
Oct  7 11:09:31 mail spamd[6963]: result: Y  6 - DATE_IN_PAST_06_12,DOMAIN_RATIO,EXTRA_MPART_TYPE,HTML_90_100,HTML_IMAGE_ONLY_08,HTML_MESSAGE,INFO_TLD,MIME_HTML_MOSTLY,MPART_ALT_DIFF scantime=0.1,size=26295,mid=<000001c6e9f0$4e329b00$0100007f@your-fsyly0jtwn>,autolearn=no
Oct  7 11:09:31 mail antispam: mail to copymail@urbakken.dk using low-to-medium: off
Oct  7 11:09:31 mail antispam: mail to copymail@urbakken.dk (Score: 7)
Oct  7 11:09:31 mail postfix/pickup[7800]: B20809294FC: uid=429 from=<william@perlite.biz>
Oct  7 11:09:31 mail postfix/cleanup[13229]: B20809294FC: message-id=<000001c6e9f0$4e329b00$0100007f@your-fsyly0jtwn>
Oct  7 11:09:31 mail postfix/pipe[13230]: E3E5892943A: to=<copymail@urbakken.dk>, relay=ccfilter, delay=4, status=sent (mail.urbakken.dk)
Oct  7 11:09:31 mail postfix/pipe[13230]: E3E5892943A: to=<erik@urbakken.dk>, relay=ccfilter, delay=4, status=sent (mail.urbakken.dk)
Oct  7 11:09:31 mail postfix/qmgr[13952]: E3E5892943A: removed
Oct  7 11:09:35 mail postfix/qmgr[13952]: B20809294FC: from=<william@perlite.biz>, size=27770, nrcpt=2 (queue active)
Oct  7 11:09:35 mail postfix/local[13269]: B20809294FC: to=<copymail@urbakken.dk>, relay=local, delay=4, status=sent (delivered to mailbox)
Oct  7 11:09:35 mail postfix/local[13270]: B20809294FC: to=<spam@urbakken.dk>, orig_to=<erik@urbakken.dk>, relay=local, delay=4, status=sent (delivered to mailbox)
Oct  7 11:09:35 mail postfix/qmgr[13952]: B20809294FC: removed
Oct  7 11:10:12 mail fetchmail[26053]: awakened at Sat 07 Oct 2006 11:10:12 AM CEST
Oct  7 11:10:15 mail fetchmail[26053]: sleeping at Sat 07 Oct 2006 11:10:15 AM CEST
Oct  7 11:10:21 mail pop3-login: Login: eja [192.168.1.4]
Oct  7 11:10:33 mail postfix/smtpd[13227]: connect from backup-mx1.post.tele.dk[80.160.77.99]
Oct  7 11:10:33 mail postfix/smtpd[13227]: 8E06692943A: client=backup-mx1.post.tele.dk[80.160.77.99]
Oct  7 11:10:33 mail postfix/cleanup[13229]: 8E06692943A: message-id=<20061007090711.24E433E929@mail.mikkelsenmedia.dk>
Oct  7 11:10:35 mail postfix/qmgr[13952]: 8E06692943A: from=<admin@mail.mikkelsenmedia.dk>, size=11059, nrcpt=2 (queue active)
Oct  7 11:10:35 mail postfix/smtpd[13227]: disconnect from backup-mx1.post.tele.dk[80.160.77.99]
Oct  7 11:10:35 mail spamd[7739]: connection from localhost.localdomain [127.0.0.1] at port 51843
Oct  7 11:10:35 mail spamd[7739]: info: setuid to filter succeeded
Oct  7 11:10:35 mail spamd[7739]: processing message <20061007090711.24E433E929@mail.mikkelsenmedia.dk> for filter:429.
Oct  7 11:10:35 mail spamd[7739]: clean message (1.6/4.0) for filter:429 in 0.2 seconds, 10870 bytes.
Oct  7 11:10:35 mail spamd[7739]: result: .  1 - AWL,HTML_FONT_BIG,HTML_MESSAGE,HTML_WEB_BUGS,IP_LINK_PLUS,MIME_HTML_ONLY,NORMAL_HTTP_TO_IP scantime=0.2,size


What do You think that I have to do ?
Title: Re: Which logfile shows it ?
Post by: raem on October 07, 2006, 12:53:42 PM
erikja

There is a smarthost setting in sme server which forces the sme smtp server to send mail via the ISP's mail server. See the email panel in  server manager. You need to use this when your ISP blocks outbound mail. eg add an entry for mail.myiSP.dk

See this thread for intersting discussion
http://forums.contribs.org/index.php?topic=33067.0

As you are talking about incoming email, I'm not sure this is what you want. You seem to want to setup up sme to receive mail on a different port than 25.

Please advise this.
Can you send mail to external email addresses OK from workstations on your LAN using the sme server smtp server ?
Can you send email using sme webmail ?
Can you receive email to any address on your server domain, either using webmail or a mail client on a workstation ?
Can you send email and receive it between workstations on your LAN ie from local users addresses to local users addresses ?
Title: Re: Which logfile shows it ?
Post by: erikja on October 07, 2006, 03:30:57 PM
Quote from: "RayMitchell"
erikja

There is a smarthost setting in sme server which forces the sme smtp server to send mail via the ISP's mail server. See the email panel in  server manager. You need to use this when your ISP blocks outbound mail. eg add an entry for mail.myiSP.dk

See this thread for intersting discussion
http://forums.contribs.org/index.php?topic=33067.0

As you are talking about incoming email, I'm not sure this is what you want. You seem to want to setup up sme to receive mail on a different port than 25.

Please advise this.
Can you send mail to external email addresses OK from workstations on your LAN using the sme server smtp server ?
Can you send email using sme webmail ?
Can you receive email to any address on your server domain, either using webmail or a mail client on a workstation ?
Can you send email and receive it between workstations on your LAN ie from local users addresses to local users addresses ?


Thanks for the reply, but I have to wait until I have setup my Clarkconnect to be my firewall, and then I will use the SME as my mailserver. I'll be back again then.
Title: Re: Which logfile shows it ?
Post by: CharlieBrady on October 07, 2006, 04:27:54 PM
Quote from: "RayMitchell"

As you are talking about incoming email, I'm not sure this is what you want. You seem to want to setup up sme to receive mail on a different port than 25.


I don't think so. My reading of what the ISP has said and of the CC logs is that the ISP is blocking inbound port 25 from the Internet, but is not blocking port 25 from their mail relay host. With DNS configured as it now is, mail will arrive, having been relayed by backup-mx.post.tele.dk (on standard port 25).

Note that some anti-spam measures won't be as effective when mail is relayed via a bakup MX.
Title: Re: Which logfile shows it ?
Post by: raem on October 07, 2006, 10:17:10 PM
Charlie

Thanks for that explanation, it makes sense of what is going on at the ISP.
Title: Re: Which logfile shows it ?
Post by: raem on October 08, 2006, 05:25:19 AM
erikja

Here are links to a Howtos which appear to fit your situation exactly

How to setup a backup mail server
http://sme.swerts-knudsen.dk/index.html?frame=http%3A//sme.swerts-knudsen.dk/howtos/howto_14.htm

How to setup a relay mail server
http://sme.swerts-knudsen.dk/index.html?frame=http%3A//sme.swerts-knudsen.dk/howtos/howto_15.htm
Title: Re: Which logfile shows it ?
Post by: CharlieBrady on October 08, 2006, 06:12:25 PM
Quote from: "RayMitchell"

Here are links to a Howtos which appear to fit your situation exactly


I don't think so Ray. My reading suggests that there is already a backup MX server set up via the ISP, and if you use that (as OP is already doing via DNS) then there is nothing further to do.