Help with spam and antivirus

[hoangnam8484]

We send mail business failed, the email is returned to the sender with the following content errors.

"I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

The mail system

<user@mydomain.com>: lost connection with 127.0.0.1[127.0.0.1] while
sending end of data -- message may be sent more than once"

if I turn off antivirus and antispam mail send mail well, but we receive many spam mail.

Help me!!!!

[phoenix]

The message you've posted doesn't tell us anything. You should look in the log files and see what errors are in there and possibly post the headers from the rejected mail.

Some details on whether this is a new install or an upgrade and which version/release of Zimbra you're using might help.

[hoangnam8484]

I installed version ZMB 6.0 on ubuntu server 9.04, system we are about 150 users. we encountered this problem with some user and very often.

this is logfile /var/log/zimbra.log

15:15:13 server1 postfix/smtpd[21185]: connect from server1.mydomain.com[1.2.3.4]
Oct 20 15:15:13 server1 postfix/smtpd[21185]: A58E2152396: client=server1.mydomain.com[1.2.3.4]
Oct 20 15:15:13 server1 postfix/cleanup[24187]: A58E2152396: message-id=<12606869.91256026513639.JavaMail.root@server1>
Oct 20 15:15:13 server1 postfix/smtpd[21185]: disconnect from server1.mydomain.com[1.2.3.4]
Oct 20 15:15:13 server1 postfix/qmgr[18910]: A58E2152396: from=<kimloan@mydomain.com>, size=1142, nrcpt=2 (queue active)
Oct 20 15:15:13 server1 amavis[28855]: (28855-01) ESMTP::10024 /opt/zimbra/data/amavisd/tmp/amavis-20091020T151513-28855: <kimloan@mydomain.com> -> <nam@mydomain.com>,<test@mydomain.com> SIZE=1142 Received: from mydomain.com ([127.0.0.1]) by localhost (mydomain.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP; Tue, 20 Oct 2009 15:15:13 +0700 (ICT)
Oct 20 15:15:13 server1 amavis[28855]: (28855-01) Checking: ezhj5mwV0tvn [1.2.3.4] <kimloan@mydomain.com> -> <nam@mydomain.com>,<test@mydomain.com>
Oct 20 15:15:13 server1 postfix/smtpd[26331]: connect from localhost.localdomain[127.0.0.1]
Oct 20 15:15:13 server1 postfix/smtpd[26331]: DB3F7152397: client=localhost.localdomain[127.0.0.1]
Oct 20 15:15:13 server1 postfix/cleanup[24187]: DB3F7152397: message-id=<12606869.91256026513639.JavaMail.root@server1>
Oct 20 15:15:13 server1 postfix/qmgr[18910]: DB3F7152397: from=<kimloan@mydomain.com>, size=1737, nrcpt=2 (queue active)
Oct 20 15:15:13 server1 amavis[28855]: (28855-01) FWD via SMTP: <kimloan@mydomain.com> -> <nam@mydomain.com>,<test@mydomain.com>,BODY=7BIT 250 2.0.0 Ok, id=28855-01, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as DB3F7152397
Oct 20 15:15:13 server1 amavis[28855]: (28855-01) Passed CLEAN, [1.2.3.4] [1.2.3.4] <kimloan@mydomain.com> -> <nam@mydomain.com>,<test@mydomain.com>, Message-ID: <12606869.91256026513639.JavaMail.root@server1>, mail_id: ezhj5mwV0tvn, Hits: -2.39, size: 1141, queued_as: DB3F7152397, 236 ms
Oct 20 15:15:13 server1 postfix/smtp[24188]: A58E2152396: to=<nam@mydomain.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.27, delays=0.04/0/0.01/0.23, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=28855-01, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as DB3F7152397)
Oct 20 15:15:13 server1 postfix/smtp[24188]: A58E2152396: to=<test@mydomain.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.27, delays=0.04/0/0.01/0.23, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=28855-01, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as DB3F7152397)
Oct 20 15:15:13 server1 postfix/qmgr[18910]: A58E2152396: removed
Oct 20 15:15:13 server1 amavis[28855]: (28855-01) extra modules loaded: /opt/zimbra/zimbramon/lib/i486-linux-gnu-thread-multi/auto/Net/SSLeay/autosplit.ix, /opt/zimbra/zimbramon/lib/i486-linux-gnu-thread-multi/auto/Net/SSLeay/randomize.al, IO/Socket/SSL.pm, Net/LDAP/Extension.pm, Net/SSLeay.pm
Oct 20 15:15:14 server1 postfix/lmtp[31066]: DB3F7152397: to=<nam@mydomain.com>, relay=mydomain.com[1.2.3.4]:7025, delay=0.26, delays=0.03/0/0/0.22, dsn=2.1.5, status=sent (250 2.1.5 Delivery OK)
Oct 20 15:15:14 server1 postfix/lmtp[31066]: DB3F7152397: to=<test@mydomain.com>, relay=mydomain.com[1.2.3.4]:7025, delay=0.26, delays=0.03/0/0/0.22, dsn=2.1.5, status=sent (250 2.1.5 Delivery OK)
Oct 20 15:15:14 server1 postfix/qmgr[18910]: DB3F7152397: removed
Oct 20 15:15:17 server1 postfix/smtpd[19855]: connect from va3ehsobe003.messaging.microsoft.com[216.32.180.13]
Oct 20 15:15:18 server1 postfix/smtpd[19855]: setting up TLS connection from va3ehsobe003.messaging.microsoft.com[216.32.180.13]
Oct 20 15:15:18 server1 postfix/smtpd[19855]: Anonymous TLS connection established from va3ehsobe003.messaging.microsoft.com[216.32.180.13]: TLSv1 with cipher RC4-MD5 (128/128 bits)
Oct 20 15:15:19 server1 postfix/smtpd[19855]: 45926152390: client=va3ehsobe003.messaging.microsoft.com[216.32.180.13]
Oct 20 15:15:20 server1 postfix/cleanup[24187]: 45926152390: message-id=<HKHKGXNG01yD7TfSr0f00008013@hkhkgxng01.hk.ap.c bre.net>
Oct 20 15:15:22 server1 postfix/qmgr[18910]: 45926152390: from=<diemthuy.tran@cbre.com>, size=123430, nrcpt=1 (queue active)
Oct 20 15:15:22 server1 amavis[18281]: (18281-01) ESMTP::10024 /opt/zimbra/data/amavisd/tmp/amavis-20091020T151522-18281: <diemthuy.tran@cbre.com> -> <mailuong@mydomain.com> SIZE=123430 Received: from mydomain.com ([127.0.0.1]) by localhost (mydomain.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <mailuong@mydomain.com>; Tue, 20 Oct 2009 15:15:22 +0700 (ICT)
Oct 20 15:15:22 server1 amavis[18281]: (18281-01) Checking: mhXsyBb6h524 [216.32.180.13] <diemthuy.tran@cbre.com> -> <mailuong@mydomain.com>
Oct 20 15:15:22 server1 postfix/smtpd[19855]: disconnect from va3ehsobe003.messaging.microsoft.com[216.32.180.13]
Oct 20 15:15:26 server1 postfix/smtpd[28813]: connect from localhost.localdomain[127.0.0.1]
Oct 20 15:15:26 server1 postfix/smtpd[28813]: 0FA7E152396: client=localhost.localdomain[127.0.0.1]
Oct 20 15:15:26 server1 postfix/cleanup[24187]: 0FA7E152396: message-id=<HKHKGXNG01yD7TfSr0f00008013@hkhkgxng01.hk.ap.c bre.net>
Oct 20 15:15:26 server1 postfix/qmgr[18910]: 0FA7E152396: from=<diemthuy.tran@cbre.com>, size=124171, nrcpt=1 (queue active)

[hoangnam8484]

Oct 20 22:36:10 server1 postfix/smtpd[9096]: connect from server1.mydoamin.com[1.2.3.4]
Oct 20 22:36:10 server1 postfix/smtpd[9096]: C232C15238C: client=server1.myadmin.com[1.2.3.4]
Oct 20 22:36:10 server1 postfix/cleanup[26422]: C232C15238C: message-id=<4196998.871256052970668.JavaMail.root@server1>
Oct 20 22:36:10 server1 postfix/smtpd[9096]: disconnect from server1.mydomain.com[1.2.3.4]
Oct 20 22:36:10 server1 postfix/qmgr[18910]: C232C15238C: from=<kimloan@mydomain.com>, size=15980, nrcpt=1 (queue active)
Oct 20 22:36:10 server1 amavis[29777]: (29777-01) ESMTP::10024 /opt/zimbra/data/amavisd/tmp/amavis-20091020T223610-29777: <kimloan@mydomain.com> -> <nam@mydomain.com> SIZE=15980 Received: from mydomain.com ([127.0.0.1]) by localhost (mydomain.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <nam@mydomain.com>; Tue, 20 Oct 2009 22:36:10 +0700 (ICT)
Oct 20 22:36:10 server1 amavis[29777]: (29777-01) Checking: V4tDwjgYGpv0 [1.2.3.4] <kimloan@mydomain.com> -> <nam@mydomain.com>
Oct 20 22:36:10 server1 postfix/smtp[26423]: C232C15238C: to=<nam@mydomain.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.13, delays=0.03/0.01/0.01/0.09, dsn=4.4.2, status=deferred (lost connection with 127.0.0.1[127.0.0.1] while sending end of data -- message may be sent more than once)
Oct 20 22:36:38 server1 postfix/anvil[19858]: statistics: max connection rate 1/60s for (smtp:210.245.37.211) at Oct 20 22:26:49
Oct 20 22:36:38 server1 postfix/anvil[19858]: statistics: max connection count 1 for (smtp:210.245.37.211) at Oct 20 22:26:49
Oct 20 22:36:38 server1 postfix/anvil[19858]: statistics: max cache size 2 at Oct 20 22:28:30


help me plaese

[Roman B.]

Was there any conclustion reached on this topic? My company is having the same issue..

[hoangnam8484]

I'm issued prolem!

You are see link:
Tuning Postfix Queue Settings - Zimbra :: Wiki