On 12 May 2019, at 8:06, ratatouille wrote:
Hello!
mail_version = 2.10.1
I have a serious problem with logging of postfix via rsyslog on one of
my servers
on CentOS 7.
All I see in the log is
May 12 12:41:39 nimmini1 postfix/qmgr[19227]: E16FE20EA7:
from=<a.me...@nimmini.de>, size=2141, nrcpt=1 (queue active)
May 12 12:41:40 nimmini1 postfix/qmgr[19227]: E16FE20EA7: removed
May 12 12:44:33 nimmini1 postfix/qmgr[19227]: 067DE20F8B:
from=<ratatoui...@nimmini.de>, size=1562, nrcpt=1 (queue active)
May 12 12:44:46 nimmini1 postfix/qmgr[19227]: 067DE20F8B: removed
May 12 12:46:07 nimmini1 postgrey[2722]: action=pass, reason=client
whitelist, client_name=lists.sourceforge.net,
client_address=216.105.38.7,
sender=munin-users-boun...@lists.sourceforge.net,
recipient=ratatoui...@nimmini.de
May 12 12:46:07 nimmini1 postgrey[2722]: cleaning up old logs...
May 12 12:46:10 nimmini1 postfix/qmgr[19227]: 07F6721582:
from=<munin-users-boun...@lists.sourceforge.net>, size=6580, nrcpt=1
(queue active)
May 12 12:46:10 nimmini1 postfix/qmgr[19227]: 07F6721582: removed
A start of postfix is not mentioned. Also the queue-id 19227 (is this
a queue-id?) is used for
different actions. Maybe I'm wrong here.
That is the process-id for the qmgr component of Postfix. The queue-ids
are the 10-character strings after the process information and before
the log details.
A restart of rsyslog and postfix changes nothing.
journalctl -u postfix shows
Mai 12 13:25:32 nimmini1 systemd[1]: Stopping Postfix Mail Transport
Agent...
Mai 12 13:25:32 nimmini1 systemd[1]: Stopped Postfix Mail Transport
Agent.
Mai 12 13:25:32 nimmini1 systemd[1]: Starting Postfix Mail Transport
Agent...
Mai 12 13:25:32 nimmini1 systemd[1]: Started Postfix Mail Transport
Agent.
Any help on this? I enabled verbose logging in master.cf
smtpd pass - - n - - smtpd -v
but have no verbose logging.
Disable verbose logging. It may actually be making the problem worse.
One common problem with logging on modern Linux distributions is the
rate limiting in systemd and rsyslog. The fact that you're only seeing
qmgr messages implies that there's something else involved, but rate
limiting may be a contributing factor. See the documentation for
systemd-journald and rsyslog and the configurations in
/etc/systemd/journald.conf and /etc/rsyslog.conf
--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
