sendmail configuration help

daisychick · 08-02-2012, 02:32 PM

running centos 5.5. Several months ago we upgraded our exchange server and the ip addresses changed. I recently noticed high overhead on our nagios server and found that sendmail was utilizing a lot of mem/cpu/disk space. There were 80k emails in clientmqueue. I'm not very good with sendmail but, after some poking around, I found the IP address of our old mail server in submit.cf. I changed it to the new mail server and restarted sendmail. I'm still unable to send mail and I have no idea where to go next. Could someone point me in the right direction?

snippet from log:

Code:

Aug  2 14:06:56 svr sendmail[6820]: q72J61Aq006820: Losing ./qfq72J61Aq006820: savemail panic
Aug  2 14:06:56 svr sendmail[6820]: q72J61Aq006820: SYSERR(root): savemail: cannot save rejected email anywhere
Aug  2 14:07:01 svr sendmail[6865]: q72J71O8006865: from=root, size=387, class=0, nrcpts=1, msgid=<201208021907.q72J71O8006865@svr.name.us>, relay=root@localhost
Aug  2 14:07:01 svr sendmail[6865]: STARTTLS=client, relay=[192.168.0.53], version=TLSv1/SSLv3, verify=FAIL, cipher=AES128-SHA, bits=128/128
Aug  2 14:07:06 svr sendmail[6865]: q72J71O8006865: to=root, ctladdr=root (0/0), delay=00:00:05, xdelay=00:00:05, mailer=relay, pri=30387, relay=[192.168.0.53] [192.168.0.53], dsn=5.7.1, stat=User unknown
Aug  2 14:07:16 svr sendmail[6865]: q72J71O8006865: q72J71O9006865: DSN: User unknown
Aug  2 14:07:26 svr sendmail[6865]: q72J71O9006865: to=root, delay=00:00:10, xdelay=00:00:10, mailer=relay, pri=31411, relay=[192.168.0.53] [192.168.0.53], dsn=5.7.1, stat=User unknown
Aug  2 14:07:36 svr sendmail[6865]: q72J71O9006865: q72J71OA006865: return to sender: User unknown
Aug  2 14:07:46 svr sendmail[6865]: q72J71OA006865: to=postmaster, delay=00:00:10, xdelay=00:00:10, mailer=relay, pri=32435, relay=[192.168.0.53] [192.168.0.53], dsn=5.7.1, stat=User unknown
Aug  2 14:07:56 svr sendmail[6865]: q72J71O9006865: Losing ./qfq72J71O9006865: savemail panic
Aug  2 14:07:56 svr sendmail[6865]: q72J71O9006865: SYSERR(root): savemail: cannot save rejected email anywhere
Aug  2 14:08:01 svr sendmail[6900]: q72J81CQ006900: from=root, size=387, class=0, nrcpts=1, msgid=<201208021908.q72J81CQ006900@svr.name.us>, relay=root@localhost
Aug  2 14:08:01 svr sendmail[6900]: STARTTLS=client, relay=[192.168.0.53], version=TLSv1/SSLv3, verify=FAIL, cipher=AES128-SHA, bits=128/128
Aug  2 14:08:06 svr sendmail[6900]: q72J81CQ006900: to=root, ctladdr=root (0/0), delay=00:00:05, xdelay=00:00:05, mailer=relay, pri=30387, relay=[192.168.0.53] [192.168.0.53], dsn=5.7.1, stat=User unknown
Aug  2 14:08:16 svr sendmail[6900]: q72J81CQ006900: q72J81CR006900: DSN: User unknown
Aug  2 14:08:26 svr sendmail[6900]: q72J81CR006900: to=root, delay=00:00:10, xdelay=00:00:10, mailer=relay, pri=31411, relay=[192.168.0.53] [192.168.0.53], dsn=5.7.1, stat=User unknown
Aug  2 14:08:36 svr sendmail[6900]: q72J81CR006900: q72J81CS006900: return to sender: User unknown
Aug  2 14:08:46 svr sendmail[6900]: q72J81CS006900: to=postmaster, delay=00:00:10, xdelay=00:00:10, mailer=relay, pri=32435, relay=[192.168.0.53] [192.168.0.53], dsn=5.7.1, stat=User unknown
Aug  2 14:08:56 svr sendmail[6900]: q72J81CR006900: Losing ./qfq72J81CR006900: savemail panic
Aug  2 14:08:56 svr sendmail[6900]: q72J81CR006900: SYSERR(root): savemail: cannot save rejected email anywhere
Aug  2 14:09:01 svr sendmail[6934]: q72J91X1006934: from=root, size=387, class=0, nrcpts=1, msgid=<201208021909.q72J91X1006934@svr.name.us>, relay=root@localhost
Aug  2 14:09:01 svr sendmail[6934]: STARTTLS=client, relay=[192.168.0.53], version=TLSv1/SSLv3, verify=FAIL, cipher=AES128-SHA, bits=128/128
Aug  2 14:09:06 svr sendmail[6934]: q72J91X1006934: to=root, ctladdr=root (0/0), delay=00:00:05, xdelay=00:00:05, mailer=relay, pri=30387, relay=[192.168.0.53] [192.168.0.53], dsn=5.7.1, stat=User unknown
Aug  2 14:09:16 svr sendmail[6934]: q72J91X1006934: q72J91X2006934: DSN: User unknown
Aug  2 14:09:26 svr sendmail[6934]: q72J91X2006934: to=root, delay=00:00:10, xdelay=00:00:10, mailer=relay, pri=31411, relay=[192.168.0.53] [192.168.0.53], dsn=5.7.1, stat=User unknown
Aug  2 14:09:36 svr sendmail[6934]: q72J91X2006934: q72J91X3006934: return to sender: User unknown

bathory · 08-02-2012, 04:52 PM

Hi,

Quote:

Aug 2 14:06:56 svr sendmail[6820]: q72J61Aq006820: Losing ./qfq72J61Aq006820: savemail panic
Aug 2 14:06:56 svr sendmail[6820]: q72J61Aq006820: SYSERR(root): savemail: cannot save rejected email anywhere

From the log above, look like there is a disk(?) problem. Check if the partition where /var is mounted is full. Run:

Code:

df -k

For the rest: Is 192.168.0.53 the new ip of the exchange server? If yes, this shouldn't happen since root@localhost is trying to send mail to root and this should go locally and not through a relay (or smarthost).
Where exactly in submit.cf was the exchange server ip? Was in a line starting wirh DS? What's in the same line in sendmail.cf? Also what gives

Code:

sendmail -bv root

daisychick · 08-03-2012, 02:29 PM

I thought it was a space thing at first too and while yes, I do have some crazy big log files due to this issue (8gb!!!) it's not space.

Code:

[root@svr log]# df -h
Filesystem            Size  Used Avail Use% Mounted on
/dev/mapper/VolGroup00-LogVol00
                       58G   39G   17G  71% /
/dev/sda1              99M   40M   55M  43% /boot
tmpfs                 186M     0  186M   0% /dev/shm
[root@svr log]#

as for the second

Code:

[root@svr log]# sendmail -bv root
root... deliverable: mailer local, user root
[root@svr log]#

yes, 192.168.0.53 is the new ip of the exchange server

submit.cf

Code:

 D{MTAHost}[192.168.0.53]

I could not find that line or anything like it in sendmail.cf.

bathory · 08-03-2012, 04:15 PM

Quote:

I thought it was a space thing at first too and while yes, I do have some crazy big log files due to this issue (8gb!!!) it's not space.

So check the directories/files permissions:

Code:

ls -l /var/spool
ls -l /var/spool/mqueue
ls -l /var/spool/clientmqueue

Also have a look at the other logs (like /var/log/messages) to see if it's not a disk error.

Quote:

[root@svr log]# sendmail -bv root
root... deliverable: mailer local, user root

D{MTAHost}[192.168.0.53]

Ah ok. So any mail from sendmail is going to exchange regardless the user being local or not. So I guess, it returns back because there is no root user in exchange.
Better check the queued messages and delete them (at least the older ones) if they are not important. Then restart sendmail and see what happens.
Or you can create an alias for root in exchange to get its mails.

Regards