Hello,
I see sometimes the following error in the logfile :
May 27 13:04:43 smtp-1 postfix/smtpd[28724]: too many errors after UNKNOWN from
mail.everbridge.net[63.236.8.147]
May 27 12:32:42 smtp-1 postfix/smtpd[20935]: too many errors after UNKNOWN from
paradis.cirad.fr[193.51.113.1]
and I wonder why.
For 193.51.113.1, I have set the debugging options and I get the following
results :
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: connect from
paradis.cirad.fr[193.51.113.1]
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_hostname: paradis.cirad.fr ~?
127.0.0.0/8
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_hostaddr: 193.51.113.1 ~?
127.0.0.0/8
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_hostname: paradis.cirad.fr ~?
10.0.0.0/8
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_hostaddr: 193.51.113.1 ~?
10.0.0.0/8
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_hostname: paradis.cirad.fr ~?
130.104.0.0/16
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_hostaddr: 193.51.113.1 ~?
130.104.0.0/16
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_hostname: paradis.cirad.fr ~?
192.168.128.0/17
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_hostaddr: 193.51.113.1 ~?
192.168.128.0/17
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_hostname: paradis.cirad.fr ~?
193.190.89.0/24
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_hostaddr: 193.51.113.1 ~?
193.190.89.0/24
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_list_match: paradis.cirad.fr:
no match
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_list_match: 193.51.113.1: no
match
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: send attr request = connect
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: send attr ident = smtp:193.51.113.1
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: vstream_fflush_some: fd 59 flush 41
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: vstream_buf_get_ready: fd 59 got 25
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: private/anvil: wanted attribute:
status
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: input attribute name: status
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: input attribute value: 0
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: private/anvil: wanted attribute:
count
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: input attribute name: count
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: input attribute value: 1
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: private/anvil: wanted attribute:
rate
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: input attribute name: rate
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: input attribute value: 1
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: private/anvil: wanted attribute:
(list terminator)
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: input attribute name: (end)
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: report connect to all milters
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter_macro_lookup: "j"
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter_macro_lookup: result
"smtp1.sgsi.ucl.ac.be"
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter_macro_lookup: "{daemon_name}"
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter_macro_lookup: result
"smtp1.sgsi.ucl.ac.be"
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter_macro_lookup: "v"
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter_macro_lookup: result
"Postfix 2.7.0"
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_connect: non-protocol
events for protocol version 6:
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_connect: transport=unix
endpoint=/var/run/clamav/milter-clamav.socket
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_connect: my_version=0x6
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_connect: my_actions=0x1ff
SMFIF_ADDHDRS SMFIF_CHGBODY SMFIF_ADDRCPT SMFIF_DELRCPT SMFIF_CHGHDRS
SMFIF_QUARANTINE SMFIF_CHGFROM SMFIF_ADDRCPT_PAR SMFIF_SETSYMLIST
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_connect: my_events=0x1fffff
SMFIP_NOCONNECT SMFIP_NOHELO SMFIP_NOMAIL SMFIP_NORCPT SMFIP_NOBODY
SMFIP_NOHDRS SMFIP_NOEOH SMFIP_NR_HDR SMFIP_NOUNKNOWN SMFIP_NODATA SMFIP_SKIP
SMFIP_RCPT_REJ SMFIP_NR_CONN SMFIP_NR_HELO SMFIP_NR_MAIL SMFIP_NR_RCPT
SMFIP_NR_DATA SMFIP_NR_UNKN SMFIP_NR_EOH SMFIP_NR_BODY SMFIP_HDR_LEADSPC
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: vstream_fflush_some: fd 13 flush 17
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: vstream_buf_get_ready: fd 13 got 17
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_connect: milter
unix:/var/run/clamav/milter-clamav.socket version 6
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_connect: events
SMFIP_NOHELO SMFIP_NOEOH SMFIP_NOUNKNOWN SMFIP_NODATA
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_connect: requests
SMFIF_ADDHDRS SMFIF_CHGHDRS SMFIF_QUARANTINE
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_conn_event: milter
unix:/var/run/clamav/milter-clamav.socket: connect paradis.cirad.fr/193.51.113.1
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: event: SMFIC_CONNECT; macros:
j=smtp1.sgsi.ucl.ac.be {daemon_name}=smtp1.sgsi.ucl.ac.be v=Postfix 2.7.0
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: vstream_fflush_some: fd 13 flush 118
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: vstream_buf_get_ready: fd 13 got 5
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: reply: SMFIR_CONTINUE data 0 bytes
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_connect: non-protocol
events for protocol version 6:
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_connect: transport=local
endpoint=/var/run/milter/milter-spiff.socket
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_connect: my_version=0x6
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_connect: my_actions=0x1ff
SMFIF_ADDHDRS SMFIF_CHGBODY SMFIF_ADDRCPT SMFIF_DELRCPT SMFIF_CHGHDRS
SMFIF_QUARANTINE SMFIF_CHGFROM SMFIF_ADDRCPT_PAR SMFIF_SETSYMLIST
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_connect: my_events=0x1fffff
SMFIP_NOCONNECT SMFIP_NOHELO SMFIP_NOMAIL SMFIP_NORCPT SMFIP_NOBODY
SMFIP_NOHDRS SMFIP_NOEOH SMFIP_NR_HDR SMFIP_NOUNKNOWN SMFIP_NODATA SMFIP_SKIP
SMFIP_RCPT_REJ SMFIP_NR_CONN SMFIP_NR_HELO SMFIP_NR_MAIL SMFIP_NR_RCPT
SMFIP_NR_DATA SMFIP_NR_UNKN SMFIP_NR_EOH SMFIP_NR_BODY SMFIP_HDR_LEADSPC
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: vstream_fflush_some: fd 58 flush 17
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: vstream_buf_get_ready: fd 58 got 17
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_connect: milter
local:/var/run/milter/milter-spiff.socket version 6
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_connect: events
SMFIP_NOBODY SMFIP_NOEOH SMFIP_NOUNKNOWN SMFIP_NODATA
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_connect: requests
SMFIF_ADDHDRS
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_conn_event: milter
local:/var/run/milter/milter-spiff.socket: connect paradis.cirad.fr/193.51.113.1
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: event: SMFIC_CONNECT; macros:
j=smtp1.sgsi.ucl.ac.be {daemon_name}=smtp1.sgsi.ucl.ac.be v=Postfix 2.7.0
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: vstream_fflush_some: fd 58 flush 118
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: vstream_buf_get_ready: fd 58 got 5
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: reply: SMFIR_CONTINUE data 0 bytes
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: > paradis.cirad.fr[193.51.113.1]:
220 smtp1.sgsi.ucl.ac.be ESMTP
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: name_mask: silent-discard
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: name_mask: dsn
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: watchdog_pat: 0x2203e30
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: vstream_fflush_some: fd 9 flush 32
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: vstream_buf_get_ready: fd 9 got 23
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: < paradis.cirad.fr[193.51.113.1]:
XXXX paradis.cirad.fr
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_string: XXXX ~? CONNECT
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_string: XXXX ~? GET
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_string: XXXX ~? POST
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_list_match: XXXX: no match
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: report unknown command to all
milters
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_unknown_event: milter
unix:/var/run/clamav/milter-clamav.socket: unknown command: XXXX
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: event: SMFIC_UNKNOWN; macros: (none)
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: skipping event SMFIC_UNKNOWN for
milter unix:/var/run/clamav/milter-clamav.socket
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_unknown_event: milter
local:/var/run/milter/milter-spiff.socket: unknown command: XXXX
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: event: SMFIC_UNKNOWN; macros: (none)
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: skipping event SMFIC_UNKNOWN for
milter local:/var/run/milter/milter-spiff.socket
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: > paradis.cirad.fr[193.51.113.1]:
502 5.5.2 Error: command not recognized
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: > paradis.cirad.fr[193.51.113.1]:
421 4.7.0 smtp1.sgsi.ucl.ac.be Error: too many errors
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_hostname: paradis.cirad.fr ~?
127.0.0.0/8
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_hostaddr: 193.51.113.1 ~?
127.0.0.0/8
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_hostname: paradis.cirad.fr ~?
10.0.0.0/8
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_hostaddr: 193.51.113.1 ~?
10.0.0.0/8
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_hostname: paradis.cirad.fr ~?
130.104.0.0/16
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_hostaddr: 193.51.113.1 ~?
130.104.0.0/16
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_hostname: paradis.cirad.fr ~?
192.168.128.0/17
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_hostaddr: 193.51.113.1 ~?
192.168.128.0/17
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_hostname: paradis.cirad.fr ~?
193.190.89.0/24
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_hostaddr: 193.51.113.1 ~?
193.190.89.0/24
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_list_match: paradis.cirad.fr:
no match
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: match_list_match: 193.51.113.1: no
match
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: send attr request = disconnect
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: send attr ident = smtp:193.51.113.1
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: vstream_fflush_some: fd 59 flush 44
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: vstream_buf_get_ready: fd 59 got 10
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: private/anvil: wanted attribute:
status
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: input attribute name: status
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: input attribute value: 0
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: private/anvil: wanted attribute:
(list terminator)
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: input attribute name: (end)
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: too many errors after UNKNOWN from
paradis.cirad.fr[193.51.113.1]
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: disconnect event to all milters
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_disc_event: quit milter
unix:/var/run/clamav/milter-clamav.socket
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: vstream_fflush_some: fd 13 flush 11
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: milter8_disc_event: quit milter
local:/var/run/milter/milter-spiff.socket
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: vstream_fflush_some: fd 58 flush 11
May 27 02:32:36 smtp-1 postfix/smtpd[7464]: disconnect from
paradis.cirad.fr[193.51.113.1]
The question is
The message is rejected (delayed) due to postfix or the milters ?
$ postconf -n
address_verify_sender = [email protected]
alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
bounce_size_limit = 50000
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2048
debug_peer_list = 193.51.113.1
disable_vrfy_command = yes
empty_address_recipient = MAILER-DAEMON
hash_queue_depth = 1
hash_queue_names = deferred defer incoming hold
header_checks = regexp:/etc/postfix/rules/header_checks
html_directory = no
mail_owner = postfix
mailbox_size_limit = 250000000
mailq_path = /usr/bin/mailq
manpage_directory = /usr/local/man
message_size_limit = 250000000
milter_default_action = tempfail
milter_protocol = 6
mydestination = $myhostname, localhost, localhost.$mydomain
mydomain = sipr-dc.ucl.ac.be
myhostname = smtp1.sgsi.ucl.ac.be
mynetworks = 127.0.0.0/8 10.0.0.0/8 130.104.0.0/16
192.168.128.0/17 193.190.89.0/24
newaliases_path = /usr/bin/newaliases
parent_domain_matches_subdomains = debug_peer_list mynetworks
queue_directory = /var/spool/postfix
readme_directory = no
relay_domains = hash:/etc/postfix/relais/relay_domains
relay_recipient_maps = hash:/etc/postfix/relais/transport
hash:/etc/postfix/relais/virtual_relais
hash:/etc/postfix/relais/openinterface.org
hash:/etc/postfix/relais/virtual_aliases
hash:/etc/postfix/relais/canonical_listes
hash:/etc/postfix/rules/invalid
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtpd_banner = $myhostname ESMTP
smtpd_client_connection_rate_limit = 20
smtpd_client_message_rate_limit = 300
smtpd_client_recipient_rate_limit = 1000
smtpd_data_restrictions = check_sender_access
hash:/etc/postfix/rules/check_backscatterer
smtpd_discard_ehlo_keywords = silent-discard, dsn
smtpd_end_of_data_restrictions = check_policy_service inet:127.0.0.1:10040
smtpd_helo_required = yes
smtpd_helo_restrictions = check_client_access hash:/etc/postfix/rules/access
check_recipient_access pcre:/etc/postfix/rules/listes_client_access
permit_mynetworks
permit_sasl_authenticated
reject_invalid_hostname
check_client_access hash:/etc/postfix/rules/helo_whitelist
check_recipient_access hash:/etc/postfix/rules/roleaccount_exceptions
reject_non_fqdn_hostname
check_client_access hash:/etc/postfix/files_access/spammers
check_helo_access pcre:/etc/postfix/rules/helo_checks
check_sender_mx_access cidr:/etc/postfix/rules/bogus_mx_checks
permit
smtpd_milters = unix:/var/run/clamav/milter-clamav.socket
local:/var/run/milter/milter-spiff.socket
smtpd_recipient_restrictions = reject_non_fqdn_recipient
reject_non_fqdn_sender
check_recipient_access hash:/etc/postfix/rules/ucllouvain
check_recipient_access hash:/etc/postfix/rules/invalid
check_recipient_access hash:/etc/postfix/rules/phishing_reply_adresses
permit_sasl_authenticated
permit_mynetworks
reject_unlisted_recipient
reject_unknown_recipient_domain
reject_unauth_destination
reject_multi_recipient_bounce
check_recipient_access hash:/etc/postfix/rules/roleaccount_exceptions
check_client_access cidr:/etc/postfix/rules/hi-med-dnswl-header
check_client_access cidr:/etc/postfix/rules/hi-med-dnswl-permit
check_sender_access hash:/etc/postfix/rules/sender_whitelist
check_client_access hash:/etc/postfix/rules/client_whitelist
check_sender_access pcre:/etc/postfix/rules/pcre_sender_whitelist
check_recipient_access hash:/etc/postfix/rules/recipient_whitelist
reject_rbl_client zen.dnsbl
reject_rhsbl_client dbl.dnsbl
reject_rhsbl_sender dbl.dnsbl
reject_rhsbl_helo dbl.dnsbl
reject_rbl_client cbl.abuseat.org
reject_rbl_client z.mailspike.net
permit_auth_destination
reject
smtpd_reject_unlisted_recipient = no
smtpd_restriction_classes = must_be_valid_squirrel_sender
restrict_list_client_access
restrict_list_sender_access
restrict_list_cluster_access
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_security_options = noanonymous
smtpd_sender_restrictions = check_recipient_access
pcre:/etc/postfix/rules/listes_sender_access
check_client_access hash:/etc/postfix/rules/squirrel_ip
check_sender_access hash:/etc/postfix/rules/access
permit_sasl_authenticated
permit_mynetworks
reject_unknown_recipient_domain
check_sender_access hash:/etc/postfix/rules/stluc
check_client_access hash:/etc/postfix/rules/access
reject_unknown_sender_domain
smtpd_tls_CAfile = /etc/postfix/ssl/ct_root.pem
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/postfix/ssl/cert-716-smtp.sgsi.ucl.ac.be.pem
smtpd_tls_key_file = /etc/postfix/ssl/key-716-smtp.sgsi.ucl.ac.be.pem
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_session_cache_database = btree:/var/spool/postfix/.cache/smtpd_scache
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom
transport_maps = hash:/etc/postfix/relais/transport
hash:/etc/postfix/relais/virtual_relais
hash:/etc/postfix/relais/openinterface.org
unknown_local_recipient_reject_code = 550
virtual_alias_maps = hash:/etc/postfix/relais/virtual_aliases
hash:/etc/postfix/relais/canonical_listes
Thanks
--
Pascal
