On Thu, May 02, 2013 at 10:31:07PM -0700, mailtime wrote: > After many years of hassle free use from our email system we are now getting > a rather odd disconnect as shown below. > > > May 3 16:07:36 spambox nss_wins[14039]: connect from > sender.remote.com[1.2.3.4]
Yuck, nss_wins openlog(3) breakage! :-( I would find a way of disabling this. Perhaps proxymap can help. Also report the bug to your O/S vendor, shared libraries must not create this mess. > May 3 16:07:39 spambox nss_wins[14039]: lost connection after DATA from > remote.remote.com[1.2.3.4] http://www.postfix.org/DEBUG_README.html#sniffer Then read the result with wireshark. Make a careful note of the window-scaling, and MTU negotiated at the start of the session, what happened shortly before the sender closed the session. Who sent the first FIN or RST? Were there any retransmissions. You could disable window scaling on your end, or set the default scale exponent to 0. Most problems are firewall or NAT device problems and window scaling can confuse the more crude implementations. Any other logging from smtpd (aka nss_wins) 14039 between the connection start and end? -- Viktor.