Following the logs...

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
cjm51213
Posts: 43
Joined: Sat Sep 13, 2014 2:43 am

Following the logs...

Postby cjm51213 » Tue Mar 04, 2014 11:37 am

HI FOLKS,
$ ZMCONTROL -V

RELEASE 8.0.6_GA_5922.RHEL6_64_20131203103705 RHEL6_64 FOSS EDITION.
RECENTLY I UPGRADED FROM 8.0.0 TO 8.0.6 AND IT WAS UNREMARKABLE, WHICH IS GOOD. I NOTICE A HUGE DIFFERENCE IN MY DAILY MAIL REPORT TITLED "DAILY MAIL REPORT FOR ", WHICH LEADS ME TO THE REALIZATION THAT I DON'T REALLY KNOW WHAT THIS REPORT IS TELLING ME, OR I'D HAVE SUSPECTED A PROBLEM AND UPGRADED LONG AGO. WHERE CAN I FIND THE KEY TO THIS REPORT? IT IS NOT SELF-EXPLANATORY, OR AT LEAST I DON'T COMPLETELY UNDERSTAND IT. AS A CONSEQUENCE, I'M NOT ENTIRELY SURE I KNOW WHAT THIS MACHINE IS DOING. IT APPEARS TO BE DOING WHAT I WANT IT TO DO, BUT IT LOOKS LIKE IT MIGHT BE FREE-LANCING AS WELL, AND I NEED TO KNOW HOW TO DISCOVER THIS AND STOP IT.
I COULD ALSO BENEFIT FROM A DESCRIPTION OF HOW TO INTERPRET THE LOG ENTRIES. I PICKED ONE MESSAGE, THAT APPEARS IN A FEW PLACES ON THE REPORT AND I FOLLOWED IT THROUGH THE LOG. THERE APPEAR TO BE THREE SEPARATE PROCESSING CYCLES INVOLVED. 1) THE EXTERNAL SYSTEM CONTACTS ME, AUTHENTICATES OR NOT AND GIVES ME A MESSAGE FOR DELIVERY. 2) I LOOK AT THE MESSAGE AND DECIDE WHAT TO DO WITH IT. 3) DELIVER IT TO A LOCAL USER, RELAY IT WHERE APPLICABLE, AND BOUNCE IT WHERE NOT. SO, I HAVE THE LOG ENTRIES:


  • MAR 3 03:15:46 CAHOOTS POSTFIX/SMTPD[23344]: WARNING: HOSTNAME 95.59.73.138.MEGALINE.TELECOM.KZ DOES NOT RESOLVE TO ADDRESS 95.59.73.138: NAME OR SERVICE NOT KNOWN

  • MAR 3 03:15:46 CAHOOTS POSTFIX/SMTPD[23344]: CONNECT FROM UNKNOWN[95.59.73.138]

  • MAR 3 03:15:47 CAHOOTS POSTFIX/SMTPD[23344]: NOQUEUE: FILTER: RCPT FROM UNKNOWN[95.59.73.138]: : SENDER ADDRESS TRIGGERS FILTER SMTP-AMAVIS:[127.0.0.1]:10026; FROM= TO= PROTO=ESMTP HELO=

  • MAR 3 03:15:47 CAHOOTS POSTFIX/SMTPD[23344]: NOQUEUE: FILTER: RCPT FROM UNKNOWN[95.59.73.138]: : SENDER ADDRESS TRIGGERS FILTER SMTP-AMAVIS:[127.0.0.1]:10024; FROM= TO= PROTO=ESMTP HELO=

  • MAR 3 03:15:48 CAHOOTS POSTFIX/SMTPD[23344]: 4E4AD120C37: CLIENT=UNKNOWN[95.59.73.138]

  • MAR 3 03:15:49 CAHOOTS POSTFIX/CLEANUP[23352]: 4E4AD120C37: MESSAGE-ID=

  • MAR 3 03:15:49 CAHOOTS POSTFIX/QMGR[22359]: 4E4AD120C37: FROM=, SIZE=14812, NRCPT=1 (QUEUE ACTIVE)

  • MAR 3 03:15:49 CAHOOTS POSTFIX/SMTPD[23344]: DISCONNECT FROM UNKNOWN[95.59.73.138]

  • ===

  • MAR 3 03:15:50 CAHOOTS POSTFIX/SMTP[23353]: 4E4AD120C37: TO=, RELAY=127.0.0.1[127.0.0.1]:10024, DELAY=2.9, DELAYS=2.1/0.02 /0.01/0.82, DSN=2.5.0, STATUS=SENT (250 2.5.0 OK, ID=21723-02, BOUNCE)

  • MAR 3 03:15:50 CAHOOTS POSTFIX/QMGR[22359]: 4E4AD120C37: REMOVED

  • ===

  • MAR 3 03:15:52 CAHOOTS POSTFIX/SMTP[23360]: 30C61120CA1: TO=, RELAY=MAIL.CRBB.RU[62.109.16.126]:25, DELAY=2.8, DELAYS=0.08/0.01/1.8/0.92, DSN=2.0.0, STATUS=SENT (250 OK ID=1WKQQD-0006CN-TU)




I HAVE SOME QUESTIONS:



  • I WOULD LIKE TO REJECT THIS MESSAGE BASED ON LINE 1, DNS DOES NOT MAP BACK. HOW DO I CONFIGURE FOR THIS REJECTION?

  • IS LINE 2 SIMPLY A RESTATEMENT OF LINE 1 OR DOES IT TELL ME SOMETHING ELSE?

  • .

  • WHY ARE LINES 3 AND 4 DUPLICATE? WHAT DOES "NOQUEUE" IN THESE LINES MEAN?

  • I THINK LINE 5 IS ASSIGNING AN INTERNAL MESSAGE ID. AM I RIGHT? HOW WOULD I FIND THIS MESSAGE, BASED ON THIS ID?

  • LINE 6 RECORDS THIS: "... MESSAGE-ID=" WHAT IS THIS MESSAGE-ID? HOW IS IT USED?

  • .

  • .

  • ===

  • LINE 10 RECORDS THE DECISION TO BOUNCE THIS MESSAGE. HOW WAS THIS DECISION MADE?

  • .

  • ===

  • LINE 13 LOOKS LIKE A MESSAGE WAS SENT. IS THIS THE ORIGINAL MESSAGE, MEANING IT WAS SUCCESSFULLY RELAYED THROUGH MY SERVER (BAD NEWS) OR IS THIS THE BOUNCE NOTIFICATION BACKSCATTER?


HOW DO I SUPPRESS ALL BACKSCATTER?
THAT'S A LOT OF DISCUSSION BUT I'M BEGINNING TO REALIZE THAT A MAIL SERVER IS LIKE A TEENAGER -- IT'S GOING TO DO WHAT IT WANTS.
THANKS FOR THE HELP,
CHRIS.


Return to “Administrators”

Who is online

Users browsing this forum: Google [Bot], MSN [Bot] and 4 guests