SMTP issue

A Gallina · 03-22-2015, 12:11 PM

syslog shows this

Code:

Mar 22 04:09:19 zina-desktop nullmailer[3438]: Sending failed:  Host not found
Mar 22 04:09:19 zina-desktop nullmailer[3438]: Starting delivery: protocol: smtp host: mail. file: 1425777002.24628
Mar 22 04:09:19 zina-desktop nullmailer[3438]: Starting delivery, 50314 message(s) in queue.
Mar 22 04:09:20 zina-desktop nullmailer[8231]: smtp: Failed: Connect failed
Mar 22 04:09:20 zina-desktop nullmailer[3438]: Sending failed:  Host not found
Mar 22 04:09:20 zina-desktop nullmailer[3438]: Starting delivery: protocol: smtp host: mail. file: 1418550003.17610
Mar 22 04:09:20 zina-desktop nullmailer[3438]: Starting delivery, 50314 message(s) in queue.
Mar 22 04:09:21 zina-desktop nullmailer[8262]: smtp: Failed: Connect failed
Mar 22 04:09:21 zina-desktop nullmailer[3438]: Sending failed:  Host not found
Mar 22 04:09:21 zina-desktop nullmailer[3438]: Starting delivery: protocol: smtp host: mail. file: 1412135402.15577
Mar 22 04:09:21 zina-desktop nullmailer[3438]: Starting delivery, 50314 message(s) in queue.
Mar 22 04:09:22 zina-desktop nullmailer[8287]: smtp: Failed: Connect failed
Mar 22 04:09:22 zina-desktop nullmailer[3438]: Sending failed:  Host not found
Mar 22 04:09:22 zina-desktop nullmailer[3438]: Starting delivery: protocol: smtp host: mail. file: 1418882401.23334
Mar 22 04:09:22 zina-desktop nullmailer[3438]: Starting delivery, 50314 message(s) in queue.
Mar 22 04:09:23 zina-desktop nullmailer[8292]: smtp: Failed: Connect failed
Mar 22 04:09:23 zina-desktop nullmailer[3438]: Sending failed:  Host not found
Mar 22 04:09:23 zina-desktop nullmailer[3438]: Starting delivery: protocol: smtp host: mail. file: 1412206203.10915
Mar 22 04:09:23 zina-desktop nullmailer[3438]: Starting delivery, 50314 message(s) in queue.
Mar 22 04:09:24 zina-desktop nullmailer[8300]: smtp: Failed: Connect failed
Mar 22 04:09:24 zina-desktop nullmailer[3438]: Sending failed:  Host not found
Mar 22 04:09:24 zina-desktop nullmailer[3438]: Starting delivery: protocol: smtp host: mail. file: 1413310803.12235
Mar 22 04:09:24 zina-desktop nullmailer[3438]: Starting delivery, 50314 message(s) in queue.
Mar 22 04:09:26 zina-desktop nullmailer[8301]: smtp: Failed: Connect failed
Mar 22 04:09:26 zina-desktop nullmailer[3438]: Sending failed:  Host not found
Mar 22 04:09:26 zina-desktop nullmailer[3438]: Starting delivery: protocol: smtp host: mail. file: 1422907502.6975
Mar 22 04:09:26 zina-desktop nullmailer[3438]: Starting delivery, 50314 message(s) in queue.
Mar 22 04:09:26 zina-desktop nullmailer[8302]: smtp: Failed: Connect failed
Mar 22 04:09:26 zina-desktop nullmailer[3438]: Sending failed:  Host not found
Mar 22 04:09:26 zina-desktop nullmailer[3438]: Starting delivery: protocol: smtp host: mail. file: 1421896201.8439
Mar 22 04:09:26 zina-desktop nullmailer[3438]: Starting delivery, 50314 message(s) in queue.
Mar 22 04:09:27 zina-desktop nullmailer[8303]: smtp: Failed: Connect failed
Mar 22 04:09:27 zina-desktop nullmailer[3438]: Sending failed:  Host not found

I would really like to be able to stop the mail problem. (..) Let me know if you see anything here. Or what my next step would be please. And thank you for taking the time to look at this.

wpeckham · 03-27-2015, 06:48 AM

My there is a LOT to look at here.

How is your MTA set? Is it using a SMARTHOST or attempting to send directly?
Is your network set right on this box, can it ping all remote hosts needed for the connection?
Is the receiving or relay resolving right on this box (that log indication that it cannot FIND the host should make you THINK!)

On the mail host or relay (assuming you control it) have you checked that it allows SMTP from this host or network? Is that listener up, and can you connect to it successfully from your local server?

frankbell · 03-27-2015, 08:24 PM

Additional questions:

What are you using for you mail transport agent (MTA) for smtp. Also, are you using an internal (within your own network) or external (say, at an ISP or hosting provider) smtp server?

On first guess, it looks like the address for the outgoing SMTP server might misconfigured in your MTA configuration.

A Gallina · 03-28-2015, 03:45 AM

Thank you this was pruned(CUT FROM) here. LINK

Quote:

...and in addition to what yancek wrote about eliminating errors: the fact that Snort or Barnyard2 are not showing errors does not mean there aren't any. Snort requires configuration and a rule set, the result of which you can pre-flight check using the "-T" switch: see 'man snort'. And if you're using Barnyard2 ensure your configuration is correct. Note you can use multiple output plugins so testing with syslog additionally will tell if there's any alerts logged.

And was a responce to unSpawns sugestion to test the output of the barnyard2 spooler to syslog.

So with this mail issue that I wasnt ready to address. Originaly I was just trying to get it(mail) functioning to get tripwire mail from root to the user etc. I would like to eventualy figure out how to use a free DNS redirect service for e-mail. I used to set the MTA through Google when it was free. So that I could send firewall logs etc to D-Shield.

frankbell · 03-28-2015, 09:31 PM

Frankly, I don't follow you, mostly because I think your post is too compressed for me. In other words, I suspect that there's detail omitted from your post that might seem obvious to you, but is not obvious to me.

Email is one of the most complicated internet things.

It has lots of moving parts. At the risk of blowing my own horn, I'm going to point you towards my recent podcast at HPR on using Mutt for email; I think you will find the links in the shownotes useful in understanding the big picture of email, and that in turn will help you frame your question with the relevant details.