OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
lost connection with 127.0.0.1

From: Alex (linuxroonline.ie)
Date: Thu Oct 13 2005 - 08:08:53 CDT


Hi postfix experts,

I am using postfix-2.1.5-4.2.RHEL4.mysql.centos4, mysql-4.1.10a-2.RHEL4.1,
vexira mail armour as content filter, maildrop (as virtual lda) and
mailman-2.1.5-33.rhel4. We have all users into mysql databases, so everithing
is virtualized.

I have 2 mail domains (mx entry in dns): mydoom.ro and lists.mydoom.ro

For mydoom.ro, maidrop is used as virtual lda and for lists.mydoom.ro we are
using local (due to mailman implementation). Everithing is working like a
charm, with one exception:

A strange problem appear when:
a) someone is posting to one of our mailman lists (less then 50 members) i can
see in maillog:

Oct 13 10:51:34 mail postfix/smtpd[19751]: disconnect from
mail.mydoom.ro[127.0.0.1]
Oct 13 10:51:34 mail postfix/qmgr[2704]: DDEAB48DD2:
from=<stiri-bounceslists.mydoom.ro>, size=154643, nrcpt=41 (queue active)
Oct 13 10:51:34 mail recv[27079]: Too many recepients, dropping
connection
Oct 13 10:51:34 mail postfix/smtp[20392]: DDEAB48DD2:
to=<one_usermydoom.ro>, relay=127.0.0.1[127.0.0.1], delay=1, status=bounced
(host 127.0.0.1[127.0.0.1] said: 556 Number of recepients exceeds the limit
(in reply to RCPT TO command))
Oct 13 10:51:34 mail postfix/smtp[20392]: DDEAB48DD2:
to=<duduotherdoom.ro>, relay=127.0.0.1[127.0.0.1], delay=1,
status=deferred (lost connection with 127.0.0.1[127.0.0.1] while sending RCPT
TO)

b) or when one authorized user (we are using smtp-auth) is tring to send mail
to more recipients 20-30 recipients (CC email)

Oct 13 10:49:08 mail postfix/qmgr[2704]: 85239488B7:
from=<victor.ionescumydoom.ro>, size=136666, nrcpt=33 (queue active)
Oct 13 10:49:08 mail spamd[5444]: got connection over /tmp/spamd.sock
Oct 13 10:49:08 mail recv[26518]: Too many recepients, dropping
connection
Oct 13 10:49:08 mail postfix/smtp[20392]: 85239488B7:
to=<mariana.wenone_doom.ro>, relay=127.0.0.1[127.0.0.1], delay=0,
status=bounced (host 127.0.0.1[127.0.0.1] said: 556 Number of recepients
exceeds the limit (in reply to RCPT TO command))
Oct 13 10:49:08 mail postfix/smtp[20392]: 85239488B7:
to=<cucudoom.com>, relay=127.0.0.1[127.0.0.1], delay=0,
status=deferred (lost connection with 127.0.0.1[127.0.0.1] while sending DATA
command)
Oct 13 10:49:08 mail postfix/smtp[20392]: 85239488B7:
to=<eugenia.fufudoom.com>, relay=127.0.0.1[127.0.0.1], delay=0,
status=deferred (lost connection with 127.0.0.1[127.0.0.1] while sending DATA
command)
Oct 13 10:49:08 mail postfix/smtp[20392]: 85239488B7:
to=<adinaone_ext_doom.com>, relay=127.0.0.1[127.0.0.1], delay=0,
status=deferred (lost connection with 127.0.0.1[127.0.0.1] while sending DATA
command)

All defered/bounced emails, remain in queue and are delivered after some time
(few hours till one day or more). Only a postqueue -f repeated 4-5 times
clean all messages from queue and solve the problem. I can configure cron to
run postqueue -f 4-5 times every 15 minutes but i think that is not the
correct way to fix my problem.

Googling, i found mysef some hints which has been already fixed.

In main.cf i changed default_destination_recipient_limit = 100
Also mailman support now: max_num_recipients = 100

Problem still persist!

Here comes # postconf -n |less

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases, hash:/etc/mailman/aliases
bounce_queue_lifetime = 4h
bounce_size_limit = 51200
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
default_destination_recipient_limit = 100
inet_interfaces = all
mail_owner = postfix
mailbox_size_limit = 0
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
maps_rbl_domains = relays.ordb.org, proxy.relays.osirusoft.com,
socks.relays.osirusoft.com, sbl.spamhaus.org
maximal_queue_lifetime = 1d
message_size_limit = 20971520
mydestination = localhost, localhost.localdomain, localhost.$mydomain,
$myhostname
mydomain = mydoom.ro
myhostname = mail.mydoom.ro
mynetworks = /etc/postfix/mynetworks
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases
notify_classes = resource, software, 2bounce
owner_request_special = no
queue_directory = /var/spool/postfix
readme_directory = no
recipient_delimiter = +
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
show_user_unknown_table_name = no
smtpd_helo_required = yes
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated, reject_unauth_destination,
reject_non_fqdn_sender, reject_non_fqdn_recipient,
   reject_unknown_sender_domain, reject_unknown_recipient_domain,
reject_unauth_pipelining, reject_invalid_hostname,
reject_non_fqdn_hostname
smtpd_sasl_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_tls_CAfile = /etc/postfix/cacert.pem
smtpd_tls_cert_file = /etc/postfix/newcert.pem
smtpd_tls_key_file = /etc/postfix/newreq.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
strict_rfc821_envelopes = yes
tls_random_source = dev:/dev/urandom
transport_maps = mysql:/etc/postfix/mysql_transport.cf
unknown_local_recipient_reject_code = 450
virtual_alias_domains = $virtual_alias_maps

Any help will be appreciated.

Regards,
Alex