Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: Qmail: users

strange issue

 

 

Qmail users RSS feed   Index | Next | Previous | View Threaded


jasons at adventureaquarium

Jun 5, 2009, 10:22 AM

Post #1 of 7 (1135 views)
Permalink
strange issue

It seems I'm having a problem with receiving email from one company. I can figure out what's happening though.
Here's what I have when logging with recordio:

2009-06-05 09:17:33.630743500 tcpserver: pid 27484 from 67.18.36.18
2009-06-05 09:17:33.681523500 tcpserver: ok 27484 mail2.adventureaquarium.com:64.0.81.204:25 gateway08.websitewelcome.com:67.18.36.18::50284
2009-06-05 09:19:33.912196500 27484 < [EOF]
009-06-05 09:19:33.912824500 27484 > 220 mail2.adventureaquarium.com ESMTP
2009-06-05 09:19:33.912905500 27484 > [EOF]
2009-06-05 09:19:33.912989500 tcpserver: end 27484 status 256

And that's it, I don't see any data coming over. I also don't understand why there is a two minute delay either. This is the only one I'm having issues with that I'm aware of. Has anyone seen this before??

Thanks

Jason



..·><((((º>


kyle-qmail at memoryhole

Jun 5, 2009, 10:38 AM

Post #2 of 7 (1056 views)
Permalink
Re: strange issue [In reply to]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Friday, June 5 at 01:22 PM, quoth Jason Staudenmayer:
>Here's what I have when logging with recordio:
>
>2009-06-05 09:17:33.630743500 tcpserver: pid 27484 from 67.18.36.18
>2009-06-05 09:17:33.681523500 tcpserver: ok 27484 mail2.adventureaquarium.com:64.0.81.204:25 gateway08.websitewelcome.com:67.18.36.18::50284
>2009-06-05 09:19:33.912196500 27484 < [EOF]
> 009-06-05 09:19:33.912824500 27484 > 220 mail2.adventureaquarium.com ESMTP
>2009-06-05 09:19:33.912905500 27484 > [EOF]
>2009-06-05 09:19:33.912989500 tcpserver: end 27484 status 256

Eeeenteresting... What's with those EOFs?

So, obviously, what's SUPPOSED to happen is your server is supposed to
issue the 220 greeting as soon as the connection is established. But
for some reason, your qmail *isn't* doing that. Two minutes later, it
looks like the websitewelcome server decides to give up, issues an EOF
(end-of-file... why???) and disconnects. Only then does your server
wake up, send a greeting, discover that nobody's listening, and issue
its own EOF (???).

What's your run file look like? Do you have some kind of greeting
delay software in place?

~Kyle
- --
If God can work through me, he can work through anyone.
-- St. Francis of Assisi
-----BEGIN PGP SIGNATURE-----
Comment: Thank you for using encryption!
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=pZfo
-----END PGP SIGNATURE-----


lists-qmail at maexotic

Jun 5, 2009, 12:50 PM

Post #3 of 7 (1057 views)
Permalink
Re: strange issue [In reply to]

On Fri, Jun 05, 2009 at 12:38:37PM -0500, Kyle Wheeler wrote:
> Eeeenteresting... What's with those EOFs?
>
> So, obviously, what's SUPPOSED to happen is your server is supposed to
> issue the 220 greeting as soon as the connection is established. But
> for some reason, your qmail *isn't* doing that. Two minutes later, it
> looks like the websitewelcome server decides to give up, issues an EOF
> (end-of-file... why???) and disconnects. Only then does your server
> wake up, send a greeting, discover that nobody's listening, and issue
> its own EOF (???).

Could this be:
He is running rblsmtpd (or the like). The remote site has a connection
setup timeout < 2 mins. Some RBL doesn't answer, so rblsmtpd runs in a 2
minute timeout and then decides to start qmail-smtpd. The sender has already
given up when qmail-smtpd fires up and sends the greeting. Upon greeting
qmail-smtpd notices that the connection has dropped (write error) and
also terminates the connection.
This would IMHO explain the logged session.
Sending SMTP servers that have a connection setup timeout > 2 mins
don't show this behaviour and the message comes through just fine.

\Maex


jasons at adventureaquarium

Jun 5, 2009, 1:00 PM

Post #4 of 7 (1058 views)
Permalink
RE: strange issue [In reply to]

> -----Original Message-----
> From: Kyle Wheeler [mailto:kyle-qmail[at]memoryhole.net]
> Sent: Friday, June 05, 2009 1:39 PM
> To: qmail[at]list.cr.yp.to
> Subject: Re: strange issue
>
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> On Friday, June 5 at 01:22 PM, quoth Jason Staudenmayer:
> >Here's what I have when logging with recordio:
> >
> >2009-06-05 09:17:33.630743500 tcpserver: pid 27484 from 67.18.36.18
> >2009-06-05 09:17:33.681523500 tcpserver: ok 27484
> >mail2.adventureaquarium.com:64.0.81.204:25
> gateway08.websitewelcome.com:67.18.36.18::50284
> >2009-06-05 09:19:33.912196500 27484 < [EOF]
> > 009-06-05 09:19:33.912824500 27484 > 220
> mail2.adventureaquarium.com ESMTP
> >2009-06-05 09:19:33.912905500 27484 > [EOF]
> >2009-06-05 09:19:33.912989500 tcpserver: end 27484 status 256
>
> Eeeenteresting... What's with those EOFs?
>
> So, obviously, what's SUPPOSED to happen is your server is
> supposed to
> issue the 220 greeting as soon as the connection is established. But
> for some reason, your qmail *isn't* doing that. Two minutes later, it
> looks like the websitewelcome server decides to give up,
> issues an EOF
> (end-of-file... why???) and disconnects. Only then does your server
> wake up, send a greeting, discover that nobody's listening, and issue
> its own EOF (???).
>
> What's your run file look like? Do you have some kind of greeting
> delay software in place?
>
> ~Kyle
> - --
> If God can work through me, he can work through anyone.
> -- St. Francis
> of Assisi -----BEGIN PGP SIGNATURE-----
> Comment: Thank you for using encryption!
>

Here's my run file.

#!/bin/sh

export HELOCHECK="="
export MFDNSCHECK=""
export LOGREGEX=""

QMAILDUID=`id -u qmaild`
NOFILESGID=`id -g qmaild`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
LOCAL=`head -1 /var/qmail/control/me`

if [. -z "$QMAILDUID" -o -z "$NOFILESGID" -o -z "$MAXSMTPD" -o -z
"$LOCAL" ]; then
echo QMAILDUID, NOFILESGID, MAXSMTPD, or LOCAL is unset in
echo /var/qmail/supervise/qmail-smtpd/run
exit 1
fi

if [ ! -f /var/qmail/control/rcpthosts ]; then
echo "No /var/qmail/control/rcpthosts!"
echo "Refusing to start SMTP listener because it'll create an open
relay"
exit 1
fi

exec /usr/local/bin/softlimit -m 79000000 \
/usr/local/bin/tcpserver -v -R -h -p -l "$LOCAL" -x
/var/qmail/etc/tcp.smtp.cdb -c "$MAXSMTPD" \
-u "$QMAILDUID" -g "$NOFILESGID" 0 smtp rhost-check rblsmtpd -b
\
-r 'list.dsbl.org:Open relay problem - see
<URL:http://dsbl.org/listing?%IP%> 8l2' \
-r 'sbl-xbl.spamhaus.org:Blacklisted server issue - see
<URL:http://www.spamhaus.org/query/bl?ip=%IP%> 8l2' \
-r 'combined.njabl.org:Blocked dynamic addresses - see
<URL:http://njabl.org/lookup?%IP%> 8l2'\
-r 'multihop.dsbl.org:Open relay problem - see
<URL:http://dsbl.org/listing?%IP%> 8l2' \
-r 'bl.spamcop.net:Open relay problem - see
<URL:http://www.spamcop.net/w3m?action=checkblock&ip=%IP%> 8l2' \
/var/qmail/bin/qmail-smtpd 2>&1


Jason

Try our new Positively Penguin Adventure and get up close with our feathered friends --Tuxedo optional--
To buy and print your tickets at home visit www.AdventureAquarium.com
..·><((((º>..·`·.><((((º>..·`·.><((((º>..·`·.><((((º>
..·`·.><((((º>..·`·.><((((º>..·`·.><((((º>
..·><((((º>..·`·.><((((º>
A Herschend Family Entertainment Company


jasons at adventureaquarium

Jun 5, 2009, 1:03 PM

Post #5 of 7 (1060 views)
Permalink
RE: strange issue [In reply to]

> -----Original Message-----
> From: Markus Stumpf [mailto:lists-qmail[at]maexotic.de]
> Sent: Friday, June 05, 2009 3:51 PM
> To: qmail[at]list.cr.yp.to
> Subject: Re: strange issue
>
>
> On Fri, Jun 05, 2009 at 12:38:37PM -0500, Kyle Wheeler wrote:
> > Eeeenteresting... What's with those EOFs?
> >
> > So, obviously, what's SUPPOSED to happen is your server is
> supposed to
> > issue the 220 greeting as soon as the connection is
> established. But
> > for some reason, your qmail *isn't* doing that. Two minutes
> later, it
> > looks like the websitewelcome server decides to give up,
> issues an EOF
> > (end-of-file... why???) and disconnects. Only then does your server
> > wake up, send a greeting, discover that nobody's listening,
> and issue
> > its own EOF (???).
>
> Could this be:
> He is running rblsmtpd (or the like). The remote site has a
> connection
> setup timeout < 2 mins. Some RBL doesn't answer, so
> rblsmtpd runs in a 2
> minute timeout and then decides to start qmail-smtpd. The
> sender has already
> given up when qmail-smtpd fires up and sends the greeting.
> Upon greeting
> qmail-smtpd notices that the connection has dropped (write
> error) and
> also terminates the connection.
> This would IMHO explain the logged session.
> Sending SMTP servers that have a connection setup timeout > 2
> mins don't show this behaviour and the message comes through
> just fine.
>
> \Maex
>

I guess it could be the RBL's but it's odd that this just started happening with this company two/three week ago.
This is a new server but it's the same setup I had on my old server that they didn't seem to have an issue sending through. I thought about whitelisting them from the rbl but their host covers a big IP range. Is there an rbl timeout I can set somewhere?

Jason



..·><((((º>


lists-qmail at maexotic

Jun 5, 2009, 1:33 PM

Post #6 of 7 (1060 views)
Permalink
Re: strange issue [In reply to]

On Fri, Jun 05, 2009 at 04:00:09PM -0400, Jason Staudenmayer wrote:
> -r 'list.dsbl.org:Open relay problem - see
> <URL:http://dsbl.org/listing?%IP%> 8l2' \
> -r 'multihop.dsbl.org:Open relay problem - see
> <URL:http://dsbl.org/listing?%IP%> 8l2' \

http://www.dsbl.org/
DSBL is GONE and highly unlikely to return. Please remove it from
your mail server configuration.

Remove those two lists. This should probably fix your problem.

As for a timeout to rblsmtpd:
No, you can't specify one. The -t flag is NOT for lookups, but how long
rblsmptd keeps running as a qmail-smtpd standin.

If you want shorter timeouts for rblsmtpd you have to recompile it.
See
http://copilotconsulting.com/mail-archives/qmail.2003/msg01796.html
(phew, that was hard to find again ;-)

\Maex


jasons at adventureaquarium

Jun 5, 2009, 1:44 PM

Post #7 of 7 (1056 views)
Permalink
RE: strange issue [In reply to]

> -----Original Message-----
> From: Markus Stumpf [mailto:lists-qmail[at]maexotic.de]
> Sent: Friday, June 05, 2009 4:34 PM
> To: Jason Staudenmayer
> Cc: qmail[at]list.cr.yp.to
> Subject: Re: strange issue
>
>
> On Fri, Jun 05, 2009 at 04:00:09PM -0400, Jason Staudenmayer wrote:
> > -r 'list.dsbl.org:Open relay problem - see
> > <URL:http://dsbl.org/listing?%IP%> 8l2' \ -r
> 'multihop.dsbl.org:Open
> > relay problem - see <URL:http://dsbl.org/listing?%IP%> 8l2' \
>
> http://www.dsbl.org/
> DSBL is GONE and highly unlikely to return. Please remove it from
> your mail server configuration.
>
> Remove those two lists. This should probably fix your problem.
>
> As for a timeout to rblsmtpd:
> No, you can't specify one. The -t flag is NOT for lookups,
> but how long rblsmptd keeps running as a qmail-smtpd standin.
>
> If you want shorter timeouts for rblsmtpd you have to
> recompile it. See
>
> http://copilotconsulting.com/mail-archives/qmail.2003/msg01796.html
> (phew, that was hard to find again ;-)
>
> \Maex
>
Thanks I removed those lines, so I'll see what happens now.

I'll report back when I find out.

Thanks guys.

Jason



..·><((((º>

Qmail users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact lists@gossamer-threads.com
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.