Hello,

First of all I'm not expert when it comes to Linux I'm just a newbie and still studying but now seems my head will explode and my manager stresses me up on this problem..

I'm maintaining our system since our sysad resigned last year he just left some documentations about passwords on every server and now
our email server(using squirrelmail)cannot recieve messages. I google it 4 2 days but still no luck.I dont know where to start.

Any help is highly very much appreciated.

Best Regards,

Rainel

check out the /var/log/maillog for errors

is there a cron job running for fetchmail? How does the server get the mails`?

which distribution you're using?

i cant see an error messages in my /var/log/maillog
its almost the same like the one below

"Jan 11 03:28:20 servername vpopmail[28478]:vchkpw-pop3: (PLAIN)login success username@domain.com: ipaddress"

i dont know how to check if i have fetchmail running in cronjob,how do I check the cronjob anyway so that u can check it for sometimes

I'm using centos 3 with squirrelmail installed on it.

Thanks for the quick reply..

so squirrelmail is a webmail service.

There is a MTA (Mail Transfer Agent)/SMTP-Server is used for delivering mails from one system to another.
like: sendmail, postfix etc.
Then there is a MDA (Mail Delivery Agent) it delivers the recievied mails on the local system to the specified users.
like: procmail so that an email client like thunderbird mail or outlook or evolution can get the mails.
and there is an MRA (Mail Retrieval Agent) this is your email client see above.
and then you will have something like IMAP-/POP3-Server like: dovecot.

As I understand the sysad left the company w/o good documentation so we must figure out what you're using.
It should be reported in the log files. /var/log/messages and /var/log/maillog
It is not recommended to run kind of such service as root but who know what the sysad configured if it's not documented.
So login as root and do a there you can see which jobs are running as root user.
maybe fetchmail is used to get the mails. So there could be somewhere a .fetchmailrc ... but he could have named it also "busfahrermails" this is for example the default fetchmail config. (.fetchmailrc)

here is my crontab -l look like:


#*/8 * * * * root /etc/apf/ad/antidos -a >> /dev/null 2>&1
40 3 * * * * /usr/local/etc/logcheck.sh
#1 1 * * * (cd /scripts/; sh runtw.sh)
0 3 * * * (cd /usr/bin/; ./rkhunter --cronjob | mail -s "HOSTNAME RKHUNTER output" admin@domain.com)
0 1 * * * rkhunter --version
0 1 15 * * rkhunter --update
10 3 * * * (cd /usr/bin/; ./chkrootkit | mail -s "HOSTNAME CHKROOTKIT output" admin@domain.com)
0 4 * * * (cd /usr/sbin/; ./tripwire --check | mail -s "HOSTNAME Tripwire OUTPUT" admin@domain.com)
30 2 * * * (cd /scripts/; sh spamtraining.sh)
0 2 * 1 * (cd /scripts/qmail/; sh qmail-backup-2.7.sh)

i find very hard to type it coz i can't open a terminal to my mail server

thanks for the reply odcheck

RKHUNTER = Rootkit detection
Tripwire for Servers is the solution for IT organizations requiring only server monitoring, with detailed reporting and optional centralized server management across Linux/UNIX/Windows platforms.

So there we go... qmailis used as MTA.

are there any logs regarding qmail?
cat /var/log/messages | grep -i qmail


--LINK http://www.inter7.com/index.php?page=vpopmail

this is just simply like this with a random date and time.
Actually there are so many of them but if I type them all maybe I will finish it an hour.

January 10 23:30:28 host rc: Stopping qmail: succeeded
January 10 23:30:28 host rc: Starting qmail: succeeded
January 10 23:30:28 host qmail: .
January 10 23:30:28 host qmail: logging
January 10 23:30:28 host rc: Starting qmail: svscan

do you got anything like that ?

/home/vpopmail/domains/domainname/username/Maildir

query with this command as root

this will listen averything regarding the location of the Maildirs.

Also you could try a as well.

if I type "find / -name vpopmail" I got this

_____________________________________________
/etc/log.d/scripts/services/vpopmail
/var/lib/mysql/vpopmail
/home/vpopmail
___________________________________________

then if this one I got this message
/etc/init.d/svscan restart

-bash: /etc/init.d/svscan: No such file or directory

depends on the Distribution you're using, thats what I've asked already but you didn't yet answer.
If you don't know a little help would be cd to this /home/vpopmail directory
there you should find something like "domains/domainname/username/Maildir"
I want to know if the mails are recievied but maybe not delivered.
Therefor check if in the regarding Maildir/new Directory any mails are located.

im very sorry, here it is uname -a

Linux hostname.com.ph 2.6.9-67.0.1.ELsmp #1 SMP Wed Dec 19 16:01:12 EST 2007 i686 i686 i386 GNU/Linux


I navigate "/home/vpopmail/domains/hostname.com.ph/myname/Maildir/new"
then type "ls" command but it was empty.

Inside of Maildir

1178504930.qw
courierimapkeywords - directory
courierimapsubscribed
courieriampuiddb
cur - directory
maildirsize
new - directory
tmp - directory

that's all odcheck

This looks like a mail
"1178504930.qw"

"less" Should show you the content.

This "svscan" could be somewhere else in your system
so again

find / -name svscan

/command/svscan
/usr/bin/svscan


less 1178504930.qw

ip_addr=222.222.222.222&returntext=&returnhttp=
1178504390.qw (END)

that's all odcheck

so okay then try a
that should restart the service.

typing /usr/sbin/svscan restart
give the following message odcheck

-bash: /etc/init.d/svscan: No such file or directory