Because of the new virus, I have 2 Mail Exchange Postfix servers sitting in front of my v7.15 IMail server collecting about 100k email/day. The MX servers are receiving repeated "Connection refused" errors when trying to forward queued email to Imail periodically during the day. However, I can telnet manually to port 25 without any problems just after receiving the error.
Aug 22 18:19:28 mx2 postfix/nqmgr[57580]: B5F2911D98: to=<[EMAIL PROTECTED]>, relay=none, delay=0, status=deferred (connect to mail.domain.com[xx.xxx.xx.xx]: Connection refused)
fairly typical. Imail SMTPD is easily overrun
^Z Suspended mx2# telnet mail.domain.com 25 Trying xx.xxx.xx.xx... Connected to mail.domain.com. Escape character is '^]'. 220 mail.domain.com (IMail 7.15 230-14) NT-ESMTP Server X1
but out of 10 times, you won't always or probably hardly get an answer, because the gateway's backlog is overrunning Imail, connection refused, then a bit frees up, a couple of successful connections, overrun, etc, etc.
To dribble the mail out of postfix at a rate Imail can handle, try this:
default_destination_concurrency_limit = 1 default_destination_recipient_limit = 5 initial_destination_concurrency = 1
Even better, out of those 200K, use mailq to identify which are crap, if possible, and delete them with
postsuper -d msgID
And then mail will just sit there and queue on the MX servers despite me being able to connect via telnet.
If postfix can't connect, Imail ain't answering.
postfix flush
and then
tail -f /var/log/maillog | egrep "status="
... to see the status be mostly "deferred" with a handful of "sent"
I've tried stopping SMTP Service and restarting, but no help.
nope
I will also get "server dropped connection without sending the initial greeting" errors sporadically.
yep
You're very screwed.
Those 200K msgs are, given this week, 190K of sobig crap, you shoulda been rejecting it at postfix level, like we IMGate people have been.
Now you can't easily identify what you've got by looking at the queue items (envelope sender+recipient exposed), or, you can, but with enormously tedious difficulty.
man postsuper
man postcat
script postcat looping over the entire deferred directory and pipe the output into a script that egreps the msg IDs with attachements .pif to a file, and then another script that loops over that file of msg IDs and
postsuper -d <msgID>
If you want some unscrewing help, contact $me.
Len
_____________________________________________________________________ http://MenAndMice.com/DNS-training: London; San Jose; Wash DC IMGate.MEIway.com: anti-spam gateway, effective on 1000's of sites, free
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
