[SOLVED] Ouch my mail!

[fernandoflorez]

My zimbra mail server went down 5 minutes ago.
Didn't know what happened. Everything seems to be working but zimbra.

Actually i have a very interesting zmmtaconfig.log. Any other important logs i should check?

What does this mean?

Thu Oct 18 10:19:25 2007  CONTROL MAILBOX: /opt/zimbra/bin/zmmailboxctl stop norewrite
/opt/zimbra/bin/postfix stop norewrite returned 0000:$VAR1 = {
          'stats' => 'zimbraServiceEnabled',
          'mailbox' => 'zimbraServiceEnabled',
          'logger' => 'zimbraServiceEnabled',
          'antivirus' => 'zimbraServiceEnabled'
        };

Thanks,

[mmorse]

Any changes? like a recent disable of mta? (though it doesn't apply till you tell it to)
Log file list: /docs/ne/latest/administration_guide/9_Monitoring.12.1.html#1075561
Expecially /opt/zimbra/log/mailbox.log & /var/log/zimbra.log

If you can't click 'manage attachments' to post a .zip/.txt of the log files use pastebin - collaborative debugging tool and post a link. You can also use the zimbra private pastebin - collaborative debugging tool which I make an effort to edit out domain names & ip's so people don't have their personal info up there too long or I clean out the whole thing if the issue is long resolved and isn't needed for history purposes (or use some other file host of your preference, etc).

[fernandoflorez]

Not at all. I haven't touch this server since i upgraded to 4.5.8. Strange!

Thanks!

[mmorse]

welp, start going through the logs

[jholder]

Make a backup first.

Then post your zmcontrol status, and your logs:
/var/log/zimbra.log
/opt/zimbra/log/mailbox.log

Good luck-
jh

[fernandoflorez]

Already backing up... takes a huge amount of time though... i'm trying to disconnect my phone now or i'm going to get crazy

some parts of my logs:

zimbra.log

Oct 18 10:19:00 trinity slapd[1771]: daemon: shutdown requested and initiated.

Nothing unusual on mailbox.log

zmmtaconfig.log

/opt/zimbra/bin/zmclamdctl status norewrite returned 0000:Thu Oct 18 10:18:58 2007  Service antivirus is not enabled.  Skipping antivirus
Thu Oct 18 10:18:58 2007  Service antispam is not enabled.  Skipping antispam
Thu Oct 18 10:18:58 2007  Service mta is not enabled.  Skipping mta
Thu Oct 18 10:18:58 2007  Service mta is not enabled.  Skipping sasl
Thu Oct 18 10:18:58 2007  Service mailbox is not enabled.  Skipping webxml
Thu Oct 18 10:18:58 2007  Service mailbox is not enabled.  Skipping mailbox
Thu Oct 18 10:18:58 2007  Service imapproxy is not enabled.  Skipping perdition
Thu Oct 18 10:18:58 2007  service sasl was disabled need to stop
Thu Oct 18 10:18:58 2007  service spell was disabled need to stop
Thu Oct 18 10:18:58 2007  service stats was disabled need to stop
Thu Oct 18 10:18:58 2007  service ldap was disabled need to stop
Thu Oct 18 10:18:58 2007  service antispam was disabled need to stop
Thu Oct 18 10:18:58 2007  service snmp was disabled need to stop
Thu Oct 18 10:18:58 2007  service tomcat was disabled need to stop
Thu Oct 18 10:18:58 2007  service mta was disabled need to stop

Finished doing a backup and restarted. Everything seems normal now. Any clue?

Thanks,

[mmorse]

Well that's good that your back up and running!

When you get a breather could you export all those logs for us to dig through?

See my first post on some ways to get them to us, for privacy you could email them to us as well, etc, etc.
(sry 'manage attachments' on the forum posts needs a little fixing)

[fernandoflorez]

I would preffer sending them via email if you don't mind.

Thanks!

[mmorse]

no sweat, both of us have them in our profiles

[mmorse]

-received and forwarded to john as well
If anyone else wants to see it ask proto or zimbra employees can let john know.