Hi,

I have mail server with postfix + gnarwl + amavisd-new + clamd +
spamassassin + ldap
I have experienced yesterday huge active queue grow (about 4000 messages in
2h).
This is example of log for one of those messages:

[root@smtp ~]# cat /var/log/maillog|grep 234C4300B95

May 13 11:36:49 smtp1 postfix/smtpd[4370]: 234C4300B95:
client=93-86-100-165.dynamic.network.com[93.86.100.165], sasl_method=LOGIN,
sasl_username=some...@mydomain.com
May 13 11:36:49 smtp1 postfix/cleanup[4960]: 234C4300B95: warning: header
Subject: FW:  93-86-100-165.dynamic.network.com[93.86.100.165];
from=<some...@mydomain.com> to=<some...@gmail.com> proto=ESMTP
helo=<SOMEONE>
May 13 11:36:49 smtp1 postfix/cleanup[4960]: 234C4300B95:
message-id=<001e01cf6e8e$e2191620$a64b4260$@some...@mydomain.com>
May 13 11:36:49 smtp1 postfix/qmgr[4115]: 234C4300B95:
from=<some...@mydomain.com>, size=15108, nrcpt=1 (queue active)
May 13 12:54:43 smtp1 postfix/smtp[7957]: 234C4300B95:
to=<some...@gmail.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=4674,
delays=4334/295/0/45, dsn=2.0.0, status=sent (250 2.0.0 from
MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 7B9043000A7)
May 13 12:54:43 smtp1 postfix/qmgr[7725]: 234C4300B95: removed

[root@smtp ~]# cat /var/log/maillog|grep 7B9043000A7

May 13 12:54:43 smtp1 postfix/smtpd[7751]: 7B9043000A7:
client=unknown[127.0.0.1]
May 13 12:54:43 smtp1 postfix/cleanup[7753]: 7B9043000A7:
message-id=<001e01cf6e8e$e2191620$a64b4260$@some...@mydomain.com>
May 13 12:54:43 smtp1 postfix/qmgr[7725]: 7B9043000A7:
from=<some...@mydomain.com>, size=15569, nrcpt=2 (queue active)
May 13 12:54:43 smtp1 amavis[6908]: (06908-05) Passed CLEAN
{RelayedOpenRelay}, [93.86.40.165]:49899 [93.86.40.165]
<some...@mydomain.com> -> <some...@gmail.com>, Message-ID:
<001e01cf6e8e$e2191620$a64b4260$@some...@mydomain.com>, mail_id:
5yzPhGE1XJix, Hits: 0.273, size: 15108, queued_as: 7B9043000A7, 45130 ms
May 13 12:54:43 smtp1 postfix/smtp[7957]: 234C4300B95:
to=<some...@gmail.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=4674,
delays=4334/295/0/45, dsn=2.0.0, status=sent (250 2.0.0 from
MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 7B9043000A7)
May 13 12:54:43 smtp1 postfix/local[7754]: 7B9043000A7:
to=<gna...@smtp.mydomain.com>, relay=local, delay=0.05,
delays=0.04/0/0/0.01, dsn=2.0.0, status=sent (delivered to command:
/usr/local/bin/gnarwl)
May 13 12:54:44 smtp1 postfix/smtp[7865]: 7B9043000A7:
to=<some...@gmail.com>, relay=gmail-smtp-in.l.google.com[173.194.66.26]:25,
delay=0.87, delays=0.04/0/0.12/0.7, dsn=2.0.0, status=sent (250 2.0.0 OK
1399978499 d1si5462173wjx.172 - gsmtp)
May 13 12:54:44 smtp1 postfix/qmgr[7725]: 7B9043000A7: removed

As you can see there is delay:

May 13 11:36:49 smtp1 postfix/qmgr[4115]: 234C4300B95:
from=<some...@mydomain.com>, size=15108, nrcpt=1 (queue active)
May 13 12:54:43 smtp1 postfix/qmgr[7725]: 7B9043000A7:
from=<some...@mydomain.com>, size=15569, nrcpt=2 (queue active)

These are (same relevant) parts of main.cf and master.cf file :

main.cf

mynetworks = 10.0.0.0/8, 127.0.0.0/8
transport_maps = hash:/etc/postfix/transport
home_mailbox = Maildir/
smtpd_banner = ...
debug_peer_level = 5
sendmail_path = /usr/sbin/sendmail.postfix
newaliases_path = /usr/bin/newaliases.postfix
mailq_path = /usr/bin/mailq.postfix
setgid_group = postdrop
disable_vrfy_command = yes
smtpd_delay_reject = yes
smtpd_helo_required = yes
smtpd_helo_restrictions =
    permit_mynetworks,
    permit
smtpd_sender_restrictions =
    reject_non_fqdn_sender,
    reject_unknown_sender_domain,
    check_sender_access hash:/etc/postfix/sender_access,
    permit
broken_sasl_auth_clients = yes
smtpd_recipient_restrictions =
       check_recipient_access hash:/etc/postfix/recipient_access,
       permit_sasl_authenticated,
       permit_mynetworks,
       permit_auth_destination,
       reject_unauth_pipelining,
       reject_non_fqdn_recipient,
       reject_unknown_recipient_domain,
       reject_unauth_destination,
       reject_rbl_client zen.spamhaus.org,
       reject_rbl_client dnsbl-1.uceprotect.net,
       reject_rbl_client dnsbl-2.uceprotect.net,
       reject_rbl_client dnsbl-3.uceprotect.net,
       reject_rbl_client psbl.surriel.com,
       reject_rbl_client cbl.abuseat.org,
       reject_rbl_client bl.spamcop.net,
       permit
always_bcc=gnarwl
recipient_bcc_maps = hash:/etc/postfix/recipient_bcc
content_filter = amavis:[127.0.0.1]:10024
receive_override_options = no_address_mappings
smtpd_client_restrictions =
    check_client_access hash:/etc/postfix/amavis_bypass
header_checks = pcre:/etc/postfix/header_checks
body_checks = pcre:/etc/postfix/body_checks

master.cf

smtp      inet  n       -       n       -       -       smtpd

amavis unix - - - - 10 smtp
   -o smtp_data_done_timeout=1200
   -o smtp_send_xforward_command=yes
   -o disable_dns_lookups=yes
#   -o max_use=20

127.0.0.1:10025 inet n - - - - smtpd
   -o content_filter=
   -o local_recipient_maps=
   -o relay_recipient_maps=
   -o smtpd_restriction_classes=
   -o smtpd_client_restrictions=
   -o smtpd_helo_restrictions=
   -o smtpd_sender_restrictions=
   -o smtpd_recipient_restrictions=permit_mynetworks,reject
   -o mynetworks=127.0.0.0/8
   -o strict_rfc821_envelopes=yes
   -o
receive_override_options=no_unknown_recipient_checks,no_header_body_checks

Gmgr is not throwing any warnings, errors, panics, etc. 

The problem started when we restarted server after same hardware changes.
After that, we restarted/reloaded/flushed postfix several times while trying
different solutions.
Last time we restarted postfix we deleted these lines from main.cf:
       reject_rbl_client zen.spamhaus.org,
       reject_rbl_client dnsbl-1.uceprotect.net,
       reject_rbl_client dnsbl-2.uceprotect.net,
       reject_rbl_client dnsbl-3.uceprotect.net,
       reject_rbl_client psbl.surriel.com,
       reject_rbl_client cbl.abuseat.org,
       reject_rbl_client bl.spamcop.net,
and problem went away

I am at loss trying to find source of the problem. Can it be one of rbl
lists? Or maybe slow dns resolving? Where to start looking?
The problem is not repeating today. And before yesterday there was no
problem.

 Thank you.




--
View this message in context: 
http://postfix.1071664.n5.nabble.com/Delay-in-delvering-mail-tp67909.html
Sent from the Postfix Users mailing list archive at Nabble.com.

Reply via email to