[SOLVED] Some Outside emails are being delayed.

[tbovingdon]

gotcha, so that is one instance when an email took longer than 5min to try and send...?

[tbovingdon]

i just had a bunch of bounce backs from my isp

Reporting-MTA: dns; mail.wightman.on.ca
X-Postfix-Queue-ID: 1F7F884E0E
X-Postfix-Sender: rfc822; tom@infinityns.ca
Arrival-Date: Tue, 2 Oct 2007 17:56:01 -0400 (EDT)

Final-Recipient: rfc822; jeff@example.com
Action: delayed
Status: 4.0.0
Diagnostic-Code: X-Postfix; host mx1.example.com[216.183.159.253] said: 421
mail.vanwyck.ca Error: timeout exceeded (in reply to end of DATA command)
Will-Retry-Until: Sun, 7 Oct 2007 17:56:01 -0400 (EDT)

[mmorse]

it would appear that way
so if I'm understanding this you have:
-nothing in any queues
-no smtpd_data_restrictions set anywhere
-or no smtpd_end_of_data_restrictions - 421 mail.vanwyck.ca Error:"timeout exceeded (in reply to end of DATA command)"

[tbovingdon]

it would appear that way
so if I'm understanding this you have:
-nothing in any queues

correct

-no smtpd_data_restrictions set anywhere

not that i know of

-or no smtpd_end_of_data_restrictions - 421 mail.vanwyck.ca Error:"timeout exceeded (in reply to end of DATA command)"

again not that i know of
it was a default install.

the weird part about the queues, if i go into the web interface, invariably there is 8 -20 emails in the incoming queue EVERY time, i click on it they disappear, if i watch, anywhere again 7-8 to 20 emails will momentarily show up then disappear.

[tbovingdon]

there are a large number of those "timeout after data"

how can i track why that is happening ?

[tbovingdon]

output of postconf (edited a little)

smtp_always_send_ehlo = yes
smtp_bind_address =
smtp_bind_address6 =
smtp_cname_overrides_servername = yes
smtp_connect_timeout = 30s
smtp_connection_cache_destinations =
smtp_connection_cache_on_demand = yes
smtp_connection_cache_reuse_limit = 10
smtp_connection_cache_time_limit = 2s
smtp_data_done_timeout = 600s
smtp_data_init_timeout = 120s
smtp_data_xfer_timeout = 180s
smtp_defer_if_no_mx_address_found = no
smtp_destination_concurrency_limit = $default_destination_concurrency_limit
smtp_destination_recipient_limit = $default_destination_recipient_limit
smtp_discard_ehlo_keyword_address_maps =
smtp_discard_ehlo_keywords =
smtp_enforce_tls = no
smtp_generic_maps =
smtp_helo_name = $myhostname
smtp_helo_timeout = 300s
smtp_host_lookup = dns
smtp_line_length_limit = 990
smtp_mail_timeout = 300s
smtp_mx_address_limit = 0
smtp_mx_session_limit = 2
smtp_never_send_ehlo = no
smtp_pix_workaround_delay_time = 10s
smtp_pix_workaround_threshold_time = 500s
smtp_quit_timeout = 300s
smtp_quote_rfc821_envelope = yes
smtp_randomize_addresses = yes
smtp_rcpt_timeout = 300s
smtp_rset_timeout = 20s
smtp_sasl_auth_enable = no
smtp_sasl_mechanism_filter =
smtp_sasl_password_maps =
smtp_sasl_security_options = noplaintext, noanonymous
smtp_sasl_tls_security_options = $var_smtp_sasl_opts
smtp_send_xforward_command = no
smtp_skip_5xx_greeting = yes
smtp_skip_quit_response = yes
smtp_starttls_timeout = 300s
smtp_tls_CAfile =
smtp_tls_CApath =
smtp_tls_cert_file =
smtp_tls_cipherlist =
smtp_tls_dcert_file =
smtp_tls_dkey_file = $smtp_tls_dcert_file
smtp_tls_enforce_peername = yes
smtp_tls_key_file = $smtp_tls_cert_file
smtp_tls_loglevel = 0
smtp_tls_note_starttls_offer = no
smtp_tls_per_site =
smtp_tls_scert_verifydepth = 5
smtp_tls_session_cache_database =
smtp_tls_session_cache_timeout = 3600s
smtp_use_tls = no
smtp_xforward_timeout = 300s
smtpd_authorized_verp_clients = $authorized_verp_clients
smtpd_authorized_xclient_hosts =
smtpd_authorized_xforward_hosts =
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_client_connection_count_limit = 50
smtpd_client_connection_rate_limit = 0
smtpd_client_event_limit_exceptions = ${smtpd_client_connection_limit_exceptions:$mynetworks}
smtpd_client_message_rate_limit = 0
smtpd_client_recipient_rate_limit = 0
smtpd_client_restrictions = reject_unauth_pipelining
smtpd_data_restrictions = reject_unauth_pipelining
smtpd_delay_reject = yes
smtpd_discard_ehlo_keyword_address_maps =
smtpd_discard_ehlo_keywords =
smtpd_end_of_data_restrictions =
smtpd_enforce_tls = no
smtpd_error_sleep_time = 1s
smtpd_etrn_restrictions =
smtpd_expansion_filter = \t\40!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~
smtpd_forbidden_commands = CONNECT GET POST
smtpd_hard_error_limit = 20
smtpd_helo_required = yes
smtpd_helo_restrictions =
smtpd_history_flush_threshold = 100
smtpd_junk_command_limit = 100
smtpd_noop_commands =
smtpd_null_access_lookup_key = <>
smtpd_policy_service_max_idle = 300s
smtpd_policy_service_max_ttl = 1000s
smtpd_policy_service_timeout = 100s
smtpd_proxy_ehlo = $myhostname
smtpd_proxy_filter =
smtpd_proxy_timeout = 100s
smtpd_recipient_limit = 1000
smtpd_recipient_overshoot_limit = 1000
smtpd_recipient_restrictions = reject_non_fqdn_recipient, permit_sasl_authenticated, permit_mynetworks, reject_unlisted_recipient, reject_invalid_hostname, reject_non_fqdn_sender, reject_unauth_destination, permit
smtpd_reject_unlisted_recipient = no
smtpd_reject_unlisted_sender = no
smtpd_restriction_classes =
smtpd_sasl_application_name = smtpd
smtpd_sasl_auth_enable = yes
smtpd_sasl_exceptions_networks =
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
smtpd_sender_login_maps =
smtpd_sender_restrictions =
smtpd_soft_error_limit = 10
smtpd_starttls_timeout = 300s
smtpd_timeout = 300s
smtpd_tls_CAfile =
smtpd_tls_CApath =
smtpd_tls_ask_ccert = no
smtpd_tls_auth_only = yes
smtpd_tls_ccert_verifydepth = 5
smtpd_tls_cert_file = /opt/zimbra/conf/smtpd.crt
smtpd_tls_cipherlist =
smtpd_tls_dcert_file =
smtpd_tls_dh1024_param_file =
smtpd_tls_dh512_param_file =
smtpd_tls_dkey_file = $smtpd_tls_dcert_file
smtpd_tls_key_file = /opt/zimbra/conf/smtpd.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = no
smtpd_tls_req_ccert = no
smtpd_tls_session_cache_database =
smtpd_tls_session_cache_timeout = 3600s
smtpd_tls_wrappermode = no
smtpd_use_tls = yes

[jholder]

Looks like a DNS resolving issue to me.

When you moved the server, what else changed? Can you look at /etc/resolv.conf and see if the server can actually resolve addresses? My guess is it's using cached lookups.

Also try
dig mx (server.com)

If nothing has changed, I'm fairly skeptical that it's a settings issue as it was working before.

[tbovingdon]

/etc/resolv.conf:

search example.ca
192.168.71.2

digs:
does this look correct?

root@mail:~# dig mx example.com

; <<>> DiG 9.3.2 <<>> mx example.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43830
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3

;; QUESTION SECTION:
;example.com.                   IN      MX

;; ANSWER SECTION:
example.com.            3600    IN      MX      10 mx1.example.com.

;; AUTHORITY SECTION:
example.com.            3600    IN      NS      ns1.stormweb.net.
example.com.            3600    IN      NS      ns2.stormweb.net.

;; ADDITIONAL SECTION:
mx1.example.com.        3600    IN      A       216.183.xxx.xxx
ns1.stormweb.net.       33907   IN      A       64.34.26.5
ns2.stormweb.net.       33907   IN      A       64.34.26.6

;; Query time: 61 msec
;; SERVER: 192.168.71.2#53(192.168.71.2)
;; WHEN: Tue Oct  2 23:41:00 2007
;; MSG SIZE  rcvd: 145

root@mail:~# dig mx example.ca

; <<>> DiG 9.3.2 <<>> mx example.ca
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49056
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3

;; QUESTION SECTION:
;vanwyck.ca.                    IN      MX

;; ANSWER SECTION:
example.ca.             172800  IN      MX      5 mail.example.ca.

;; AUTHORITY SECTION:
example.ca.             172800  IN      NS      ns1.bmts.com.
example.ca.             172800  IN      NS      ns2.bmts.com.

;; ADDITIONAL SECTION:
mail.vanwyck.ca.        172800  IN      A       192.168.71.2
ns1.bmts.com.           9586    IN      A       216.183.128.10
ns2.bmts.com.           9586    IN      A       216.183.128.4

;; Query time: 8 msec
;; SERVER: 192.168.71.2#53(192.168.71.2)
;; WHEN: Tue Oct  2 23:41:18 2007
;; MSG SIZE  rcvd: 141

[tbovingdon]

When you moved the server, what else changed?

theoretically nothing, it was one switch closer to the internet (went from router ->gigabyte switch -> 10 /100 switch to router -> gigabyte switch)

we moved from it office to server rack. turned on machine spam & av didn't start automatically according to zmcontrol status but after a few min it showed ok...

[jholder]

hmm, sounds like you're running 4.5.6
You should upgrade

How's everything else as far as the network goes? Can you get online?
This might (in some crazy parallel universe) be related to the 4.5.6 AV problem.

I'm going to suggest you upgrade to latest and greatest, and let's try from there.

BTW: I'm changing the title of the thread. Several of us get each post as an e-mail, and our boxes got flooded with "HELP!"