From: Crayon (no email)
Date: Tue Jan 02 2007 - 05:35:41 EST
On Tuesday 02 January 2007 03:08, Wietse wrote:
> This can be SMTP client timeout before the SMTP server responds:
> not enough smtpd processes or too many delays in policy servers,
> header/body checks and so on.
I don't think timeouts are causing the problem because several of these
connects/disconnects take place within 1 second.
And I don't think smtpd processes are hitting any limit because:
1) it's a lightly loaded server (typical mail traffic about 1000/day)
2) anvil doesn't report anything abnormal
3) I believe postfix gives an explicit error when smptd connection limit
is reached - "[postfix/master] warning: service "1025" (1025) has reached
its process limit "10": new clients may experience noticeable delays"?
Further, the server has since successfully received mail from several
*other* google servers. It /may/ be that there is a problem with that
particular server.
> When reporting a problem do provide "postconf -n" output as requested
Sorry, here it is:
==============================
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/lib/postfix
debug_peer_level = 2
debug_peer_list = 66.249.92.141
disable_vrfy_command = yes
home_mailbox = Maildir/
html_directory = /usr/share/doc/postfix-2.3.4/html
inet_interfaces = $myhostname
mail_owner = postfix
mail_spool_directory = /var/spool/mail
mailbox_command_maps = cdb:/etc/postfix/mail_command
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
mydestination = $myhostname
mydomain = example.com
myhostname = mx.example.com
mynetworks_style = host
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases
proxy_read_maps = $local_recipient_maps, $mydestination,
$virtual_alias_maps, $virtual_alias_domains, $virtual_mailbox_maps,
$virtual_mailbox_domains, $relay_recipient_maps, $relay_domains,
$canonical_maps, $sender_canonical_maps,
$recipient_canonical_maps, $relocated_maps, $transport_maps,
$mynetworks, $virtual_mailbox_limit_maps
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.3.4/readme
recipient_bcc_maps = cdb:/etc/postfix/bcc_recipient
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtpd_client_connection_count_limit = 2
smtpd_client_connection_rate_limit = 2
smtpd_client_message_rate_limit = 4
smtpd_client_new_tls_session_rate_limit = 2
smtpd_client_recipient_rate_limit = 10
smtpd_client_restrictions = warn_if_reject, reject_unauth_pipelining,
permit
smtpd_delay_reject = yes
smtpd_error_sleep_time = 60s
smtpd_hard_error_limit = 2
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks,
reject_non_fqdn_helo_hostname, reject_invalid_helo_hostname, permit
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated, reject_non_fqdn_recipient,
reject_unknown_recipient_domain, reject_unauth_destination,
reject_unlisted_recipient, check_policy_service inet:127.0.0.1:2501,
permit
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_sender_restrictions = reject_non_fqdn_sender,
reject_unknown_sender_domain, permit
smtpd_soft_error_limit = 1
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/ssl/certs/postfix.crt
smtpd_tls_key_file = /etc/ssl/private/postfix.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom
unknown_local_recipient_reject_code = 550
==============================
-- Crayon
|
|
|