LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 08-23-2008, 03:45 PM   #1
timgerr
LQ Newbie
 
Registered: Feb 2004
Location: Michigan
Distribution: Debian
Posts: 27

Rep: Reputation: 15
Unhappy After yum upgrade, Postfix/Dovcott mail server is broken


Hello all,
I have just upgraded my server Centos 5 using yum and now my mail delievery is not working. Here are things that work:

It looks like I can send mail from squirrel mail but the mail never goes to internal/external users, gmail or my domain. Here is my postconf output.

I am unable to recieve mail from external mail servers.

Here is my setting for postfix:


Code:
[root@host postfix]# postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
disable_vrfy_command = yes
header_checks = regexp:/etc/postfix/header_checks
home_mailbox = Maildir/
html_directory = no
inet_interfaces = all
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
mydomain = XXXXX.com
myhostname = host.XXXXX.com
mynetworks_style = host
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.3.3/README_FILES
sample_directory = /usr/share/doc/postfix-2.3.3/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtpd_recipient_restrictions = permit_sasl_authenticated,       permit_mynetworks,      reject_unauth_destination,        reject_invalid_hostname,        reject_unknown_sender_domain,     reject_unknown_recipient_domain,        reject_rbl_client list.dsbl.org,        reject_rbl_client sbl-xbl.spamhaus.org,           reject_rbl_client cbl.abuseat.org,      reject_rbl_client dul.dnsbl.sorbs.net
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/postfix/cert.pem
smtpd_tls_key_file = /etc/postfix/key.pem
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom
unknown_local_recipient_reject_code = 550
What should I be looking for, in a bind here.

Thanks for the help,
Timgerr
 
Old 08-23-2008, 03:52 PM   #2
timgerr
LQ Newbie
 
Registered: Feb 2004
Location: Michigan
Distribution: Debian
Posts: 27

Original Poster
Rep: Reputation: 15
Here is what was upgraded from my yum.log
Code:
Aug 21 09:58:45 Updated: postfix.i386 2:2.3.3-2.1.el5_2
Aug 21 09:59:37 Updated: dovecot.i386 1.0.7-2.el5
 
Old 08-23-2008, 03:58 PM   #3
Mr. C.
Senior Member
 
Registered: Jun 2008
Posts: 2,529

Rep: Reputation: 63
Show log entires that demonstrate the problem.
 
Old 08-23-2008, 10:16 PM   #4
timgerr
LQ Newbie
 
Registered: Feb 2004
Location: Michigan
Distribution: Debian
Posts: 27

Original Poster
Rep: Reputation: 15
What logs should I post?
 
Old 08-23-2008, 11:53 PM   #5
timgerr
LQ Newbie
 
Registered: Feb 2004
Location: Michigan
Distribution: Debian
Posts: 27

Original Poster
Rep: Reputation: 15
When I run
Code:
 /usr/sbin/sendmail -v myaddress
it says that the mail was sent to root,
I do not see anything sent.

Here is the tail from /var/log/maillog
Code:
Aug 23 22:47:15 host postfix/smtpd[5706]: NOQUEUE: reject: RCPT from unknown[211.107.96.233]: 554 5.7.1 Service unavailable; Client host [211.107.96.233] blocked using sbl-xbl.spamhaus.org; http://www.spamhaus.org/query/bl?ip=211.107.96.233; from=<DinasimperLangston@columbiatribune.com> to=<leo@danati.com> proto=SMTP helo=<mill07128c3934.private>
Aug 23 22:47:15 host postfix/smtpd[5703]: NOQUEUE: reject: RCPT from unknown[211.107.96.233]: 554 5.7.1 Service unavailable; Client host [211.107.96.233] blocked using sbl-xbl.spamhaus.org; http://www.spamhaus.org/query/bl?ip=211.107.96.233; from=<JanineacquaintanceSadler@aids2008.org> to=<idelma@danati.com> proto=SMTP helo=<mill07128c3934.private>
Aug 23 22:47:15 host postfix/smtpd[5706]: NOQUEUE: reject: RCPT from unknown[211.107.96.233]: 554 5.7.1 Service unavailable; Client host [211.107.96.233] blocked using sbl-xbl.spamhaus.org; http://www.spamhaus.org/query/bl?ip=211.107.96.233; from=<DinasimperLangston@columbiatribune.com> to=<danati.comidelma@danati.com> proto=SMTP helo=<mill07128c3934.private>
Aug 23 22:47:15 host postfix/smtpd[5703]: NOQUEUE: reject: RCPT from unknown[211.107.96.233]: 554 5.7.1 Service unavailable; Client host [211.107.96.233] blocked using sbl-xbl.spamhaus.org; http://www.spamhaus.org/query/bl?ip=211.107.96.233; from=<JanineacquaintanceSadler@aids2008.org> to=<tgallagher@danati.com> proto=SMTP helo=<mill07128c3934.private>
Aug 23 22:47:15 host postfix/smtpd[5706]: NOQUEUE: reject: RCPT from unknown[211.107.96.233]: 554 5.7.1 Service unavailable; Client host [211.107.96.233] blocked using sbl-xbl.spamhaus.org; http://www.spamhaus.org/query/bl?ip=211.107.96.233; from=<DinasimperLangston@columbiatribune.com> to=<josemanoel@danati.com> proto=SMTP helo=<mill07128c3934.private>
Aug 23 22:47:15 host postfix/smtpd[5703]: lost connection after RCPT from unknown[211.107.96.233]
Aug 23 22:47:15 host postfix/smtpd[5703]: disconnect from unknown[211.107.96.233]
Aug 23 22:47:15 host postfix/smtpd[5706]: lost connection after RCPT from unknown[211.107.96.233]
Aug 23 22:47:15 host postfix/smtpd[5706]: disconnect from unknown[211.107.96.233]
That looks like it is working.
I guess I have to clear my log,
 
Old 08-23-2008, 11:54 PM   #6
timgerr
LQ Newbie
 
Registered: Feb 2004
Location: Michigan
Distribution: Debian
Posts: 27

Original Poster
Rep: Reputation: 15
OK, Here is more information, I cleaned it up for security reasons.
Code:
[root@host log]# cat /dev/null > /var/log/maillog
[root@host log]# tail -f maillog
Aug 23 22:54:57 host postfix/smtpd[5762]: connect from c-11-11-11-118.hsd1.mi.comcast.net[68.xxx.xxx.xxx]
Aug 23 22:54:58 host postfix/smtpd[5762]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory
Aug 23 22:54:58 host postfix/smtpd[5762]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory
Aug 23 22:54:58 host postfix/smtpd[5762]: warning: SASL authentication failure: no secret in database
Aug 23 22:54:58 host postfix/smtpd[5762]: warning: c-11-11-11-118.hsd1.mi.comcast.net[68.xxx.xxx.xxx]: SASL CRAM-MD5 authentication failed: authentication failure
Aug 23 22:54:58 host postfix/smtpd[5762]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory
Aug 23 22:54:58 host postfix/smtpd[5762]: warning: SASL authentication problem: unable to open Berkeley db /etc/sasldb2: No such file or directory
Aug 23 22:54:58 host postfix/smtpd[5762]: 323DB1C6859F: client=c-11-11-11-118.hsd1.mi.comcast.net[68.xxx.xxx.xxx], sasl_method=PLAIN, sasl_username=myname
Aug 23 22:54:58 host postfix/cleanup[5777]: 323DB1C6859F: hold: header Received: from [192.168.0.7] (c-11-11-11-118.hsd1.mi.comcast.net [68.xxx.xxx.xxx])??by host.domain.com (Postfix) with ESMTP id 323DB1C6859F??for <A.Name@-ais.com>; Sat, 23 Aug 2008 22:54:58 -04 from c-11-11-11-118.hsd1.mi.comcast.net[68.xxx.xxx.xxx]; from=<goto@da.com> to=<A.Name@gd-ais.com> proto=ESMTP helo=<[192.168.0.7]>
Aug 23 22:54:58 host postfix/cleanup[5777]: 323DB1C6859F: message-id=<48B0D526.8060007@Host.com>
Aug 23 22:54:58 host postfix/smtpd[5762]: disconnect from c-11-11-11-118.hsd1.mi.comcast.net[68.XXX.XXX.XXX]
is this a SASL Authentication problem?

Thanks,'
timgerr

Last edited by timgerr; 08-23-2008 at 11:57 PM.
 
Old 08-24-2008, 12:05 AM   #7
timgerr
LQ Newbie
 
Registered: Feb 2004
Location: Michigan
Distribution: Debian
Posts: 27

Original Poster
Rep: Reputation: 15
OK, I think the mail is going to hold, I sent myself a message from gmail and it says that the satus is Hold???
Code:
Aug 24 00:28:09 host postfix/cleanup[6614]: 25F021C685A0: hold: header Received: from wf-out-1314.google.com 
(wf-out-1314.google.com [209.85.200.170])??by host.domain.com (Postfix) with ESMTP id 25F021C685A0??for 
<me@domain.com>; Sun, 24 Aug 2008 00:28:08 -0400 ( from wf-out-1314.google.com[209.85.200.170]; 
from=<from@gmail.com> to=<me@domain.com> proto=ESMTP helo=<wf-out-1314.google.com>

Aug 24 00:28:09 host postfix/cleanup[6614]: 25F021C685A0: message-id=<c25072a70808232200k4fe0302dg48ca7e6c672e95c8@mail.gmail.com>
Why is my mail going to hold?
 
Old 08-24-2008, 12:13 AM   #8
timgerr
LQ Newbie
 
Registered: Feb 2004
Location: Michigan
Distribution: Debian
Posts: 27

Original Poster
Rep: Reputation: 15
OK, I think it is my mail scanner
Code:
Starting MailScanner daemons:
         incoming postfix:                                 [  OK  ]
         outgoing postfix:                                 [  OK  ]
         MailScanner:        is only avaliable with the XS version at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9
BEGIN failed--compilation aborted at /usr/lib/perl5/vendor_perl/5.8.8/Compress/Zlib.pm line 9.
Compilation failed in require at /usr/lib/perl5/vendor_perl/5.8.8/Archive/Zip.pm line 11.
BEGIN failed--compilation aborted at /usr/lib/perl5/vendor_perl/5.8.8/Archive/Zip.pm line 11.
Compilation failed in require at /usr/lib/MailScanner/MailScanner/Message.pm line 48.
BEGIN failed--compilation aborted at /usr/lib/MailScanner/MailScanner/Message.pm line 48.
Compilation failed in require at /usr/sbin/MailScanner line 79.
BEGIN failed--compilation aborted at /usr/sbin/MailScanner line 79.
what do you think???

thanks for the reading,
timgerr
 
Old 08-24-2008, 12:07 PM   #9
Mr. C.
Senior Member
 
Registered: Jun 2008
Posts: 2,529

Rep: Reputation: 63
Ok, you have a number of problems.
  1. Your SASL is incorrectly configured, and can't authenticate
  2. Mail is being held because there is a Received header_check rule that is holding the mail
  3. Mailscanner (amavisd-new + mods) is failing to load because there are version problems with your Compress::Zlib perl libraries.

There is too much to fix here all at once. You should focus on getting one portion of your mail server working at a time, in this order 1) plain SMTP, no authentication, no content filter, 2) authentication, 3) content_filter. 4) add various header_checks/body_checks/filter rules to tune.

Are you following some HowTo?
 
Old 08-24-2008, 05:32 PM   #10
timgerr
LQ Newbie
 
Registered: Feb 2004
Location: Michigan
Distribution: Debian
Posts: 27

Original Poster
Rep: Reputation: 15
This is the how to that I used.
http://rimuhosting.com/support/setti...postfix&t=test

timgerr
 
Old 08-24-2008, 05:35 PM   #11
timgerr
LQ Newbie
 
Registered: Feb 2004
Location: Michigan
Distribution: Debian
Posts: 27

Original Poster
Rep: Reputation: 15
what should I do, rebuild, remove all the mail components?

Thanks,
timgerr
 
Old 08-24-2008, 05:49 PM   #12
Mr. C.
Senior Member
 
Registered: Jun 2008
Posts: 2,529

Rep: Reputation: 63
Honestly, I have no interest in reading or debugging somebody else's HowTo.

In my opinion, it is worthwhile learning about how the software you use works. Consider
The Book of Postfix to guide you to understanding what is going on.

Otherwise, you end up in a position where you can't resolve any problems that arise.

So, you have a couple of choices. You can either tear it all down, and try to follow the
HowTo again to rebuild it, checking each step along the way. You can fix one component at a time, but
still need to learn about how to do that. I can't advise which way is best for you.

You can comment out your header_checks in your main.cf for now.
You can comment out all the smtpd_sasl* and smtpd_tls* settings in main.cf until you get basic postfix working.

There is no content_filter setting shown in your output of postconf -n, so mailscanner is being configured in master.cf or elsewhere.
Show master.cf also.

Your mailscanner software required certain perl modules, which it seems you probably updated via CPAN or source (right?).
These are in conflict with your existing package-based or base perl modules. You need to update some dependent perl
modules such as List::Scalar. But ignore this for now, at least until you get your basic mail server running.
 
Old 08-24-2008, 07:55 PM   #13
timgerr
LQ Newbie
 
Registered: Feb 2004
Location: Michigan
Distribution: Debian
Posts: 27

Original Poster
Rep: Reputation: 15
OK, thanks for the advice, I didnt mean to have you debug someone elses how to, I thought you wanted me to post what I was going/went from. I will try to disable all the security settings so I can get the smtp working.

I thank you for the time you have taken, this is a learning experience.

timgerr
 
Old 08-24-2008, 09:54 PM   #14
Mr. C.
Senior Member
 
Registered: Jun 2008
Posts: 2,529

Rep: Reputation: 63
No problem, I didn't take it that way. I'm happy to help out.

It is very useful to read:

http://www.postfix.org/BASIC_CONFIGURATION_README.html
http://www.postfix.org/SOHO_README.html
http://www.postfix.org/STANDARD_CONF...ON_README.html

Then for content inspection:
http://www.postfix.org/CONTENT_INSPECTION_README.html

And for SASL/TLS:
http://www.postfix.org/SASL_README.html
http://www.postfix.org/TLS_README.html

It is a lot of documentation, and this is what makes trying to do too much at once so difficult to troubleshoot, which finally leads to:
http://www.postfix.org/DEBUG_README.html
 
  


Reply

Tags
dovecot, postfix


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: Debian Mail Server Setup with Postfix + Dovecot + SASL + Squirrel Mail LXer Syndicated Linux News 0 03-12-2008 10:50 PM
Mail server now behind linux router: Mail system broken binary1011100 Linux - Server 2 07-02-2007 09:37 AM
F7 installation woes and broken X after yum upgrade PsychosisNode Fedora 1 06-18-2007 08:06 PM
FC4 yum broken after upgrade Kabuso Fedora 4 06-26-2005 04:49 PM
Postfix mail server not accepting incoming mail from the external interface rexmundi Linux - Networking 7 12-22-2003 03:41 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 08:24 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration