* Andreas Wass - Glas Gasperlmair :

Hallo Ralf!

Vielen Dank für deine kompetente Antwort. Das Problem hat sich mittlerweile auch wieder gelegt und alle mails waren plötzlich draussen.

Allerdings liegen einige mail sehr lange in der queue, bis diese dann endlich rausgehen.

Naja, man muss erstmal gucken WARUM die solange brauchen. Dazu braucht man alles zu der Mail, also Logs VOR amavis und Logs HINTER amavis (vielleicht ist der Zielserver einfach unerreichbar/down)

relay_domains = btree:/etc/postfix/relay_domains relay_recipient_maps =

D.h. du nimmst Mails an unbekannte Empfänger in relay_domains an?

unverified_recipient_reject_reason = Recipient address lookup failed

Ah, ggf. doch nicht :) -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG, 80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

So wie es aussieht, betrifft es auch nur emails, welche per submission eingeliefert werden. Am 05.12.2016 um 16:14 schrieb Andreas Wass - Glas Gasperlmair:

Hier ein Auszug einer internen Mail ohne Anhang (Testnachricht) über submission port dauerte ca 13 Minuten

*grep 55A16323F0F1A2 /var/log/maillog* Dec 5 15:54:18 mail postfix/submission/smtpd[17346]: 55A16323F0F1A2: client=213-225-8-213.nat.highway.a1.net[213.225.8.213], sasl_method=PLAIN, sasl_username=thomas.weixelberger@glas-gasperlmair.at Dec 5 15:54:18 mail postfix/cleanup[15234]: 55A16323F0F1A2: message-id=<58457F97.7070501@glas-gasperlmair.at> Dec 5 15:54:18 mail postfix/qmgr[15193]: 55A16323F0F1A2: from=, size=2152, nrcpt=1 (queue active) Dec 5 16:07:46 mail postfix/smtp[18726]: 55A16323F0F1A2: to=, relay=127.0.0.1[127.0.0.1]:10024, delay=808, delays=0.23/808/0/0.61, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: *queued as* *AF6BB323F0F1B7*) Dec 5 16:07:46 mail postfix/qmgr[15193]: 55A16323F0F1A2: removed

*[root@mail ~]# grep AF6BB323F0F1B7 /var/log/maillog* Dec 5 16:07:46 mail postfix/smtpd[18750]: AF6BB323F0F1B7: client=localhost[127.0.0.1] Dec 5 16:07:46 mail postfix/cleanup[18335]: AF6BB323F0F1B7: message-id=<58457F97.7070501@glas-gasperlmair.at> Dec 5 16:07:46 mail postfix/qmgr[15193]: AF6BB323F0F1B7: from=, size=2706, nrcpt=3 (queue active) Dec 5 16:07:46 mail amavis[18313]: (18313-16) bzl3OT9vJot7 FWD from -> , BODY=7BIT 250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as AF6BB323F0F1B7 Dec 5 16:07:46 mail amavis[18313]: (18313-16) Passed CLEAN {RelayedInternal}, ORIGINATING LOCAL [127.0.0.1] [213.225.8.213] -> , Message-ID: <58457F97.7070501@glas-gasperlmair.at>, mail_id: bzl3OT9vJot7, Hits: -0.999, size: 2222, queued_as: AF6BB323F0F1B7, 615 ms Dec 5 16:07:46 mail postfix/smtp[18726]: 55A16323F0F1A2: to=, relay=127.0.0.1[127.0.0.1]:10024, delay=808, delays=0.23/808/0/0.61, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as AF6BB323F0F1B7) Dec 5 16:07:46 mail postfix/lmtp[16000]: AF6BB323F0F1B7: to=, relay=127.0.0.1[127.0.0.1]:24, delay=0.06, delays=0.01/0/0/0.05, dsn=2.0.0, status=sent (250 2.0.0 +RRPK8KCRViuRgAA9a9gbQ Saved) Dec 5 16:07:47 mail postfix/lmtp[16000]: AF6BB323F0F1B7: to=, relay=127.0.0.1[127.0.0.1]:24, delay=0.72, delays=0.01/0/0/0.71, dsn=2.0.0, status=sent (250 2.0.0 +RRPK8KCRViuRgAA9a9gbQ:2 Saved) Dec 5 16:07:48 mail postfix/lmtp[16000]: AF6BB323F0F1B7: to=, relay=127.0.0.1[127.0.0.1]:24, delay=1.5, delays=0.01/0/0/1.5, dsn=2.0.0, status=sent (250 2.0.0 +RRPK8KCRViuRgAA9a9gbQ:3 Saved) Dec 5 16:07:48 mail postfix/qmgr[15193]: AF6BB323F0F1B7: removed

Hoffe, dass hilft weiter Falls du noch was brauchst, kein Problem

Am 05.12.2016 um 15:56 schrieb Ralf Hildebrandt:

...

* Andreas Wass - Glas Gasperlmair:

...

Hallo Ralf!

Vielen Dank für deine kompetente Antwort. Das Problem hat sich mittlerweile auch wieder gelegt und alle mails waren plötzlich draussen.

Allerdings liegen einige mail sehr lange in der queue, bis diese dann endlich rausgehen. Naja, man muss erstmal gucken WARUM die solange brauchen. Dazu braucht man alles zu der Mail, also Logs VOR amavis und Logs HINTER amavis (vielleicht ist der Zielserver einfach unerreichbar/down)

...

relay_domains = btree:/etc/postfix/relay_domains relay_recipient_maps = D.h. du nimmst Mails an unbekannte Empfänger in relay_domains an?

...

unverified_recipient_reject_reason = Recipient address lookup failed Ah, ggf. doch nicht :)

$config_directory/$process_name.$process_id.log & sleep 5 default_database_type = btree default_privs = nobody disable_vrfy_command = yes

(Diesmal zusätzlich mit meiner master.cf) Hallo Ralf! Vielen Dank für deine kompetente Antwort. Das Problem hat sich mittlerweile auch wieder gelegt und alle mails waren plötzlich draussen. Allerdings liegen einige mail sehr lange in der queue, bis diese dann endlich rausgehen. Könntest du meine Postfix Konfiguration prüfen, ob dir was negatives auffällt? Was hälst du von der Art, wie Amavisd eingebunden wird. (Im Tutorial von https://dokuwiki.nausch.org/doku.php/centos:mail_c7:start ist ja beschrieben, dass bei smtpd mittels amavisd_milter und bei submissionport mittels content_filter=smtp:[127.0.0.1]:10024 gearbeitet wird) *1.) Würdest du das anders machen? 2. ) Was kann ich verbessern? * *postconf -n* alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases amavisd_milter = inet:127.0.0.1:8899 body_checks = pcre:/etc/postfix/body_checks_map bounce_queue_lifetime = 3d bounce_template_file = /etc/postfix/bounce.de-DE.cf broken_sasl_auth_clients = yes command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix data_directory = /var/lib/postfix debug_peer_level = 2 debugger_command = PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 header_checks = pcre:/etc/postfix/header_checks_map html_directory = no lmtp_generic_maps = btree:/etc/postfix/lmtp_generic_maps lmtp_tls_protocols = $smtp_tls_protocols mail_owner = postfix mailbox_size_limit = 52428800 mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man maximal_queue_lifetime = 3d message_size_limit = 52428800 mydestination = $myhostname localhost.$mydomain localhost myhostname = mail1.glasgasperlmair.at mynetworks = 127.0.0.0/8 [::1]/128 192.168.104.0/23 192.168.103.0/24 mynetworks_style = host myorigin = $mydomain newaliases_path = /usr/bin/newaliases.postfix postscreen_access_list = permit_mynetworks cidr:/etc/postfix/postscreen_whitelist postscreen_bare_newline_action = drop postscreen_bare_newline_enable = yes postscreen_blacklist_action = drop postscreen_dnsbl_action = enforce postscreen_dnsbl_sites = zen.spamhaus.org*2 bl.spamcop.net*1 b.barracudacentral.org*1 postscreen_dnsbl_threshold = 2 postscreen_dnsbl_whitelist_threshold = -1 postscreen_greet_action = enforce postscreen_non_smtp_command_enable = yes postscreen_pipelining_enable = yes postscreen_whitelist_interfaces = static:all queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.11.3/README_FILES recipient_bcc_maps = btree:/etc/postfix/recipient_bcc_maps recipient_canonical_classes = envelope_recipient recipient_canonical_maps = btree:/etc/postfix/recipient_canonical_maps recipient_delimiter = + relay_domains = btree:/etc/postfix/relay_domains relay_recipient_maps = relocated_maps = btree:/etc/postfix/relocated_maps sample_directory = /usr/share/doc/postfix-2.11.3/samples sender_bcc_maps = btree:/etc/postfix/sender_bcc_maps sender_canonical_classes = envelope_sender sender_canonical_maps = btree:/etc/postfix/sender_canonical_maps sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop show_user_unknown_table_name = no smtp_destination_rate_delay = 150s smtp_generic_maps = btree:/etc/postfix/smtp_generic_maps smtp_tls_cert_file = $smtpd_tls_cert_file smtp_tls_exclude_ciphers = aNULL eNULL EXPORT DES 3DES RC4 MD5 PSK aECDH EDH-DSS-DES-CBC3-SHA EDH-RSA-DES-CDC3-SHA KRB5-DE5 CBC3-SHA AES128-SHA DHE-RSA-AES128-SHA AES256-SHA DHE-RSA-AES256-SHA CAMELLIA128-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA smtp_tls_key_file = $smtpd_tls_key_file smtp_tls_loglevel = 1 smtp_tls_protocols = !SSLv2 !SSLv3 smtp_tls_security_level = may smtpd_banner = $myhostname ESMTP $mail_name smtpd_client_connection_count_limit = 20 smtpd_client_connection_rate_limit = 20 smtpd_client_message_rate_limit = 50 smtpd_client_recipient_rate_limit = 50 smtpd_discard_ehlo_keyword_address_maps = cidr:/etc/postfix/esmtp_access smtpd_recipient_restrictions = check_recipient_access btree:/etc/postfix/access_recipient-rfc check_client_access cidr:/etc/postfix/access_client check_helo_access btree:/etc/postfix/access_helo check_recipient_access btree:/etc/postfix/access_recipient permit_sasl_authenticated permit_mynetworks check_sender_access btree:/etc/postfix/access_sender reject_rbl_client zen.spamhaus.org reject_rbl_client ix.dnsbl.manitu.net reject_rbl_client bl.spamcop.net reject_unverified_recipient reject_unauth_destination permit smtpd_relay_restrictions = permit_sasl_authenticated permit_mynetworks reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_tls_security_options = noanonymous smtpd_sasl_type = dovecot smtpd_tls_ask_ccert = yes smtpd_tls_cert_file = /etc/pki/postfix/certs/mail1.glasgasperlmair.at.crt smtpd_tls_dh1024_param_file = /etc/pki/postfix/private/dh_2048.pem smtpd_tls_dh512_param_file = /etc/pki/postfix/private/dh_512.pem smtpd_tls_eecdh_grade = ultra smtpd_tls_exclude_ciphers = aNULL eNULL EXPORT DES 3DES RC4 MD5 PSK aECDH EDH-DSS-DES-CBC3-SHA EDH-RSA-DES-CDC3-SHA KRB5-DE5 CBC3-SHA smtpd_tls_key_file = /etc/pki/postfix/private/mail1.glasgasperlmair.at.key smtpd_tls_loglevel = 1 smtpd_tls_protocols = !SSLv2 !SSLv3 smtpd_tls_received_header = yes smtpd_tls_security_level = may tls_preempt_cipherlist = yes transport_maps = btree:/etc/postfix/transport_maps, $relay_domains unverified_recipient_reject_reason = Recipient address lookup failed unverified_sender_reject_reason = Sender address lookup failed virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual-alias-maps.cf virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf virtual_transport = lmtp:[127.0.0.1]:24 *master.cf* #smtp inet n - n - - smtpd smtp inet n - n - 1 postscreen smtpd pass - - n - - smtpd # -o smtpd_sasl_auth_enable=yes -o smtpd_sasl_auth_enable=no -o smtpd_milters=${amavisd_milter} dnsblog unix - - n - 0 dnsblog tlsproxy unix - - n - 0 tlsproxy submission inet n - n - - smtpd -o syslog_name=postfix/submission -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_reject_unlisted_recipient=no # -o smtpd_etrn_restrictions=reject # -o smtpd_client_restrictions=$mua_client_restrictions # -o smtpd_helo_restrictions=$mua_helo_restrictions # -o smtpd_sender_restrictions=$mua_sender_restrictions -o smtpd_recipient_restrictions= -o smtpd_relay_restrictions=permit_sasl_authenticated,reject # -o milter_macro_daemon_name=ORIGINATING # -o milter_macro_daemon_name=MYSUBMITTERS -o content_filter=smtp:[127.0.0.1]:10024 -o receive_override_options=no_address_mappings # -o smtpd_milters=${amavisd_milter} #smtps inet n - n - - smtpd # -o syslog_name=postfix/smtps # -o smtpd_tls_wrappermode=yes # -o smtpd_sasl_auth_enable=yes # -o smtpd_reject_unlisted_recipient=no # -o smtpd_client_restrictions=$mua_client_restrictions # -o smtpd_helo_restrictions=$mua_helo_restrictions # -o smtpd_sender_restrictions=$mua_sender_restrictions # -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject # -o milter_macro_daemon_name=ORIGINATING #628 inet n - n - - qmqpd pickup unix n - n 60 1 pickup cleanup unix n - n - 0 cleanup qmgr unix n - n 300 1 qmgr #qmgr unix n - n 300 1 oqmgr tlsmgr unix - - n 1000? 1 tlsmgr rewrite unix - - n - - trivial-rewrite bounce unix - - n - 0 bounce defer unix - - n - 0 bounce trace unix - - n - 0 bounce verify unix - - n - 1 verify flush unix n - n 1000? 0 flush proxymap unix - - n - - proxymap proxywrite unix - - n - 1 proxymap smtp unix - - n - - smtp relay unix - - n - - smtp # -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 showq unix n - n - - showq error unix - - n - - error retry unix - - n - - error discard unix - - n - - discard local unix - n n - - local virtual unix - n n - - virtual lmtp unix - - n - - lmtp anvil unix - - n - 1 anvil scache unix - - n - 1 scache # # ==================================================================== # Interfaces to non-Postfix software. Be sure to examine the manual # pages of the non-Postfix software to find out what options it wants. # # Many of the following services use the Postfix pipe(8) delivery # agent. See the pipe(8) man page for information about ${recipient} # and other message envelope options. # ==================================================================== # # maildrop. See the Postfix MAILDROP_README file for details. # Also specify in main.cf: maildrop_destination_recipient_limit=1 # #maildrop unix - n n - - pipe # flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient} # # ==================================================================== # # Recent Cyrus versions can use the existing "lmtp" master.cf entry. # # Specify in cyrus.conf: # lmtp cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4 # # Specify in main.cf one or more of the following: # mailbox_transport = lmtp:inet:localhost # virtual_transport = lmtp:inet:localhost # # ==================================================================== # # Cyrus 2.1.5 (Amos Gouaux) # Also specify in main.cf: cyrus_destination_recipient_limit=1 # #cyrus unix - n n - - pipe # user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user} # # ==================================================================== # # Old example of delivery via Cyrus. # #old-cyrus unix - n n - - pipe # flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user} # # ==================================================================== # # See the Postfix UUCP_README file for configuration details. # #uucp unix - n n - - pipe # flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) # # ==================================================================== # # Other external delivery methods. # #ifmail unix - n n - - pipe # flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) # #bsmtp unix - n n - - pipe # flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient # #scalemail-backend unix - n n - 2 pipe # flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store # ${nexthop} ${user} ${extension} # #mailman unix - n n - - pipe # flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py # ${nexthop} ${user} #amavisd reinject #amavisd unix - n n - - pipe 127.0.0.1:10025 inet n - n - - smtpd -o content_filter= -o smtpd_delay_reject=no -o smtpd_client_restrictions=permit_mynetworks,reject -o smtpd_helo_restrictions= -o smtpd_sender_restrictions= -o smtpd_recipient_restrictions=permit_mynetworks,reject -o smtpd_data_restrictions=reject_unauth_pipelining -o smtpd_end_of_data_restrictions= -o smtpd_restriction_classes= -o mynetworks=127.0.0.0/8 -o smtpd_error_sleep_time=0 -o smtpd_soft_error_limit=1001 -o smtpd_hard_error_limit=1000 -o smtpd_client_connection_count_limit=0 -o smtpd_client_connection_rate_limit=0 -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_milters -o local_header_rewrite_clients= # -o smtpd_milters= # -o local_recipient_maps= # -o relay_recipient_maps= Vielen Dank für deine Mühe vg, Andi Am 05.12.2016 um 14:59 schrieb Ralf Hildebrandt:

* Andreas Wass - Glas Gasperlmair :

...

Hallo liebe Postfixler!

Ich bin am verzweifeln, bitte um rasche Hilfe!

Wie ich heute schon unter einem anderen Mailaccount geschrieben haben wir seit unserer Umstellung auf einen neuen postfix Probleme mit der Mailq.

Es gibt ungefähr 20 mails die in der Mailq hängen und bei jedem erneutem Ausliefern z. B. mit postsuper -r ALL eine andere QUEUEID bekommen uns wieder hängenbleiben. Naja, es ändert sich ja nix, warum sollten die nach einem "postsuper -r ALL" auch rausgehen...

...

... und landet mit **C39423087F6584 wieder in der mailq und in der "mailq" Ausgabe steht der Grund dran, warum nix passiert..

Beispiel: 3tTspy5cRWz5vMx 385271 Thu Dec 1 09:45:46 absender@domain.de.example (connect to 943rs2.de[54.93.180.215]:25: Connection timed out) empfaenger@943rs2.de (connect to meinberlin.net[193.203.122.97]:25: Connection timed out) empfaenger@meinberlin.net

Hier also "Connection timed out"