Koozali.org: home of the SME Server
Obsolete Releases => SME Server 7.x => Topic started by: sgt-spam on February 12, 2008, 07:25:21 PM
-
I'm having trouble with a network multi-function device on a remote subnet.
This 'problem' appeared, coincidentally, when we upgraded from NT4 to AD. I'm not convinced that upgrade is the problem, yet.
We have many multi-function devices on the local subnet that scan to our SME email server, and they work great. The device on the remote subnet, however, does not. It seems random as to whether a scan will go through or not.
The remote office is on a cable connection (~384kbps up) and uses terminal services to run a Windows business application.
Based on the qpsmtpd logs, it appears as if all the spam checking / rbl / etc. is taking a tad too long, and the mail server is dropping the connection. I suspect we do not have that problem locally because the network is so much faster. I also suspect that some messages are going through because mail load is low and that some are failing because mail load is high.
Armed with that, I thought adding the IP address to the spamassassin white list would aleviate the alleged time problem, but it has not. All connections appear to be examined in the same fashion...
My commands:
db spamassassin setprop wbl.global 10.0.1.95 White
expand-template /etc/mail/spamassassin/local.cf
svc -t /service/spamd
Also:
db spamassassin setprop wbl.global *@10.0.1.95 White
expand-template /etc/mail/spamassassin/local.cf
svc -t /service/spamd
My log snip:
2008-02-12 12:18:26.487462500 12097 Accepted connection 1/40 from 10.0.1.95 / Unknown
2008-02-12 12:18:26.487957500 12097 Connection from Unknown [10.0.1.95]
2008-02-12 12:18:26.488916500 12097 running plugin (set_hooks): peers
2008-02-12 12:18:26.489607500 12097 trying to get config for peers/10.0.1
2008-02-12 12:18:26.490399500 12097 trying to get config for plugin_dirs
2008-02-12 12:18:26.490940500 12097 trying to get config for peers/10.0.1
2008-02-12 12:18:26.491325500 12097 trying to get config for plugin_dirs
2008-02-12 12:18:26.492399500 12097 peers hooking valid_auth
2008-02-12 12:18:26.492800500 12097 peers hooking set_hooks
2008-02-12 12:18:26.493321500 12097 trying to get config for plugin_dirs
2008-02-12 12:18:26.493998500 12097 logging::logterse hooking queue
2008-02-12 12:18:26.494414500 12097 logging::logterse hooking deny
2008-02-12 12:18:26.494846500 12097 trying to get config for plugin_dirs
2008-02-12 12:18:26.495427500 12097 check_relay hooking connect
2008-02-12 12:18:26.496068500 12097 trying to get config for plugin_dirs
2008-02-12 12:18:26.496615500 12097 check_norelay hooking connect
2008-02-12 12:18:26.497264500 12097 trying to get config for plugin_dirs
2008-02-12 12:18:26.497977500 12097 check_basicheaders hooking data_post
2008-02-12 12:18:26.498522500 12097 trying to get config for plugin_dirs
2008-02-12 12:18:26.499170500 12097 check_badmailfrom hooking rcpt
2008-02-12 12:18:26.499564500 12097 check_badmailfrom hooking mail
2008-02-12 12:18:26.500068500 12097 trying to get config for plugin_dirs
2008-02-12 12:18:26.500705500 12097 check_badrcptto_patterns hooking rcpt
2008-02-12 12:18:26.501245500 12097 trying to get config for plugin_dirs
2008-02-12 12:18:26.501859500 12097 check_badrcptto hooking rcpt
2008-02-12 12:18:26.502396500 12097 trying to get config for plugin_dirs
2008-02-12 12:18:26.502923500 12097 check_spamhelo hooking ehlo
2008-02-12 12:18:26.503272500 12097 check_spamhelo hooking helo
2008-02-12 12:18:26.503874500 12097 trying to get config for plugin_dirs
2008-02-12 12:18:26.504624500 12097 check_goodrcptto hooking rcpt
2008-02-12 12:18:26.505019500 12097 trying to get config for plugin_dirs
2008-02-12 12:18:26.505623500 12097 rcpt_ok hooking rcpt
2008-02-12 12:18:26.506159500 12097 trying to get config for plugin_dirs
2008-02-12 12:18:26.506959500 12097 virus::pattern_filter hooking data_post
2008-02-12 12:18:26.507342500 12097 trying to get config for plugin_dirs
2008-02-12 12:18:26.508146500 12097 tnef2mime hooking data_post
2008-02-12 12:18:26.508557500 12097 trying to get config for plugin_dirs
2008-02-12 12:18:26.509243500 12097 virus::clamav hooking data_post
2008-02-12 12:18:26.509916500 12097 trying to get config for plugin_dirs
2008-02-12 12:18:26.510642500 12097 queue::qmail_2dqueue hooking queue
2008-02-12 12:18:26.511244500 12097 Plugin peers, hook set_hooks returned DECLINED,
2008-02-12 12:18:26.511842500 12097 running plugin (connect): check_relay
2008-02-12 12:18:26.512267500 12097 trying to get config for relayclients
2008-02-12 12:18:26.513160500 12097 trying to get config for morerelayclients
2008-02-12 12:18:26.513733500 12097 Plugin check_relay, hook connect returned DECLINED,
2008-02-12 12:18:26.514050500 12097 running plugin (connect): check_norelay
2008-02-12 12:18:26.514426500 12097 trying to get config for norelayclients
2008-02-12 12:18:26.515048500 12097 Plugin check_norelay, hook connect returned DECLINED,
2008-02-12 12:18:26.515471500 12097 trying to get config for smtpgreeting
2008-02-12 12:18:26.515938500 12097 220 my.mail.server.fqdn ESMTP
2008-02-12 12:18:26.516366500 12097 trying to get config for timeoutsmtpd
. . . .
2008-02-12 12:18:42.111952500 3954 cleaning up after 12097
Any help or suggestions would be much appreciated.
-
qpsmtp has separate configuration settings from spamassassin - so adding a host or email address to the spamassassin whitelist will not necessarily affect the qpsmtpd connection timing.
If your post is using actual information, then I assume there is some sort of VPN between your remote office and your SME server (or else the "10.0.1.x" network address would not appear in your log files). If this is true, try adding 10.0.1.0 under "local networks" in "server-manager" and see if that solves your problem.
-
Thanks for your reply.
We do have a VPN connection to that office, and I do have all my subnets specified in the Local Networks section of the SME.
I will continue to look for qpsmtpd settings, or a way to omit that IP address from scanning.
-
Based on the qpsmtpd logs, it appears as if all the spam checking / rbl / etc. is taking a tad too long, and the mail server is dropping the connection.
Not in the (edited) log that you showed us. The client connected, the server immediately sent a 220 greeting banner, and the client disconnected 16 seconds later, without saying anything.