LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 12-08-2011, 03:50 PM   #1
Bushytea
LQ Newbie
 
Registered: Jun 2008
Distribution: Centos 5.2
Posts: 6

Rep: Reputation: 0
Postfix Very Slow w/ Odd Maillog Entries


I have currently running a server that has Centos 5.2 on it. I am using Postfix 2.3.3 for mail as well as Dovecot for POP3/IMAP.

First thing which may be the cause of a lot of the delay is that I may have a spammer taking up a bunch of resources. All the errors show that they are timing out or denied but I am constantly receiving mailer deamons in my root email box.

Here is some of the lines from maillog:

Quote:
Dec 8 15:41:46 postfix/qmgr[10757]: 3CAAF86CB27B: to=<ceo.cheng@msa.hinet.net>, relay=none, delay=254354, delays=254354/0.04/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to msa-smtp-mx2.hinet.net[168.95.6.66]: Connection timed out)
Dec 8 15:41:46 postfix/qmgr[10757]: 3CAAF86CB27B: to=<chi.tei@msa.hinet.net>, relay=none, delay=254354, delays=254354/0.04/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to msa-smtp-mx2.hinet.net[168.95.6.66]: Connection timed out)
Dec 8 15:41:46 postfix/qmgr[10757]: 3CAAF86CB27B: to=<cl103.huang@msa.hinet.net>, relay=none, delay=254354, delays=254354/0.05/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to msa-smtp-mx2.hinet.net[168.95.6.66]: Connection timed out)
Dec 8 15:41:46 postfix/qmgr[10757]: 3CAAF86CB27B: to=<cydan.home@msa.hinet.net>, relay=none, delay=254354, delays=254354/0.05/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to msa-smtp-mx2.hinet.net[168.95.6.66]: Connection timed out)
Dec 8 15:41:46 postfix/qmgr[10757]: 3CAAF86CB27B: to=<a0915631636@yahoo.com.tw>, relay=none, delay=254354, delays=254354/0.05/0/0, dsn=4.7.1, status=deferred (delivery temporarily suspended: host mx1.mail.tw.yahoo.com[203.188.197.119] refused to talk to me: 421 4.7.1 [TS03] All messages from 200.35.145.118 will be permanently deferred; Retrying will NOT succeed. See http://postmaster.yahoo.com/421-ts03.html)
Dec 8 15:41:46 postfix/qmgr[10757]: 3CAAF86CB27B: to=<chareking.tw@yahoo.com.tw>, relay=none, delay=254354, delays=254354/0.05/0/0, dsn=4.7.1, status=deferred (delivery temporarily suspended: host mx1.mail.tw.yahoo.com[203.188.197.119] refused to talk to me: 421 4.7.1 [TS03] All messages from 200.35.145.118 will be permanently deferred; Retrying will NOT succeed. See http://postmaster.yahoo.com/421-ts03.html)
Dec 8 15:41:46 postfix/qmgr[10757]: 3CAAF86CB27B: to=<csg0g0g0@yahoo.com.tw>, relay=none, delay=254354, delays=254354/0.05/0/0, dsn=4.7.1, status=deferred (delivery temporarily suspended: host mx1.mail.tw.yahoo.com[203.188.197.119] refused to talk to me: 421 4.7.1 [TS03] All messages from 200.35.145.118 will be permanently deferred; Retrying will NOT succeed. See http://postmaster.yahoo.com/421-ts03.html)
Dec 8 15:41:46 postfix/qmgr[10757]: 37CBC2248BBE: from=<>, size=4483, nrcpt=1 (queue active)
Dec 8 15:41:46 postfix/qmgr[10757]: 37CBC2248BBE: to=<eiokprqgyj@yahoo.com.tw>, relay=none, delay=253264, delays=253264/0.02/0/0, dsn=4.7.1, status=deferred (delivery temporarily suspended: host mx1.mail.tw.yahoo.com[203.188.197.119] refused to talk to me: 421 4.7.1 [TS03] All messages from 200.35.145.118 will be permanently deferred; Retrying will NOT succeed. See http://postmaster.yahoo.com/421-ts03.html)
Dec 8 15:41:46 postfix/qmgr[10757]: 3D02086C989B: from=<hzsmwk@yahoo.com.tw>, size=2227, nrcpt=14 (queue active)
Mail delivery just seems extremly slow compared to how it ran just a few days ago. It can take a few hours to receive an email when sending from the server to an outside email address.

If I try to send the email from an aol account back to an account on the server I get "undelivered mail return to sender" error. Inside that error it says "mail for ... loops back to myself".

If I try to send the email from an account on the server to another account on the server nothing shows up.

If any other logs are needed to help please let me know.

Thanks!
 
Old 12-09-2011, 02:04 AM   #2
fenice
Member
 
Registered: Apr 2006
Distribution: CentOS openSUSE
Posts: 55

Rep: Reputation: 9
If you go to the help page link in the log message you can check the reason, here's the page: http://help.yahoo.com/l/us/yahoo/mai.../421-ts03.html It basically tells you that no further email to their mail servers will be accepted from your mail server, the reason for that is that your server seems to be sending high volumes of mail that appear to be symptomatic of 'spam'.

You can find details of the "loops back to myself" errorin some of these threads: http://search.yahoo.com/search?p=%2B...UTF-8&fr=moz35

You need to get rid of the spammer and make sure that you're not an open relay (search the internet for web sites that can check that).

Last edited by fenice; 12-09-2011 at 02:08 AM.
 
Old 12-09-2011, 06:41 AM   #3
markseger
Member
 
Registered: Jul 2003
Posts: 244

Rep: Reputation: 26
The very first place to start is with data! Are you running sar or some other tool that's continuously recording what your system is doing? If so, are you recording at 5-10 second sampling rates? If not, try installing collectl.

In any event, compare the times in the maillog with collectl (or sar or whatever) log and you'll at least be able to begin to tell is something is hogging the cpu, disk, network or whatever. w/o data, you're only guessing...

-mark
 
Old 12-09-2011, 11:57 AM   #4
Bushytea
LQ Newbie
 
Registered: Jun 2008
Distribution: Centos 5.2
Posts: 6

Original Poster
Rep: Reputation: 0
Thanks for the info.

I am not running sar or collectl. I will look into these as well.

However it seems that no matter what I try there are constant emails being sent out that are not by me (I am the only one using the server too). I did find a few sites to test for an open relay but they said I do not have an open relay. Mail does seem to work for the most part just very delayed at times and I think once I can get this spammer off it will clear a lot of it up.

I do know when I run the command host <IP Address> I get a result of <IP Address> .in-addr.arpa domain name pointer www1communicqationsgalores.com. www1communicqationsgalores.com is not my domain name so I am not sure if this has something to do with the issue.

Thanks
 
Old 12-09-2011, 05:30 PM   #5
Bushytea
LQ Newbie
 
Registered: Jun 2008
Distribution: Centos 5.2
Posts: 6

Original Poster
Rep: Reputation: 0
Well I have the spam issue solved, at least so far. It seems that the emails were queued before getting some of the security in place. Once I deleted the emailed in the queue the emails stopped.

I do still have a questions about why my domain point is showing as that www1communicqationsgalores.com.

Thanks
 
Old 08-04-2012, 06:08 AM   #6
ghstblock
LQ Newbie
 
Registered: Aug 2012
Posts: 1

Rep: Reputation: Disabled
Postfix slow and sending spam

Hi Bushytea,

Even i am facing the same problem... pls let me know how to controlled the spam ..

I am trying lot of things .. upto some extent its working ..

pls let me know..

u can mail me : ghstblock@gmail.com

---------- Post added 08-04-12 at 06:08 AM ----------

Hi Bushytea,

Even i am facing the same problem... pls let me know how to controlled the spam ..

I am trying lot of things .. upto some extent its working ..

pls let me know..

u can mail me : ghstblock@gmail.com

Thanks
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Help... /var/log/maillog entries L1nuxn00b703 Linux - Newbie 1 10-07-2011 06:44 AM
Maillog entries lapthorn Linux - Newbie 0 12-04-2003 10:18 AM
postfix maillog help.. hct224 Linux - Newbie 3 11-28-2003 03:50 PM
wierd spamassassin entries in /var/log/maillog Pcghost Linux - Software 1 07-15-2003 10:56 AM
maillog entries ...please help find the sender magyartoth Linux - Security 1 01-17-2003 04:14 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 03:39 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration