On Wed, 20 Jan 2010 11:10:50 +0100, Martijn de Munnik <mart...@youngguns.nl> wrote: > On Wed, 20 Jan 2010 10:56:39 +0100, Martijn de Munnik > <mart...@youngguns.nl> wrote: >> Hi list, >> >> I have a problem with delivering mail to a host and get this error: >> >> host mx2.amsterdam.nl[145.222.14.10] said: 421 enepmx02.amsterdam.nl >> Error: timeout exceeded (in reply to end of DATA command)
I also found a mail in the queue to mx-cluster1.one.com with exactly the same problem, this mail is also ~600kb. >> >> This error only seems to occur with 'large' mails. Currently I have a > mail >> of ~600KB and ~8MB stuck in the queue. I don't think this is a postfix >> issue on our site but an issue with the mailserver on the other site. > What >> can cause such issues? > > I tried the http://ftp.nluug.nl/mail/postfix/faq.html#timeouts Cisco PIX > workaround but that doesn't make any difference? I think the remote site is > running PIX: > > Connected to mx2.amsterdam.nl (145.222.14.10). > Escape character is '^]'. > 220 ********************************** > > postconf -n > > address_verify_map = btree:${data_directory}/verify > alias_maps = hash:/opt/csw/etc/postfix/maps/aliases > body_checks = regexp:/opt/csw/etc/postfix/maps/body_checks > broken_sasl_auth_clients = yes > command_directory = /opt/csw/sbin > config_directory = /etc/postfix > content_filter = amavisfeed:localhost:10024 > daemon_directory = /opt/csw/libexec/postfix > data_directory = /opt/csw/var/lib/postfix > default_database_type = hash > delay_warning_time = 4h > disable_vrfy_command = yes > header_checks = regexp:/opt/csw/etc/postfix/maps/header_checks > home_mailbox = Maildir/ > html_directory = /opt/csw/share/doc/postfix/html > inet_interfaces = all > mailbox_command = /opt/csw/bin/procmail-wrapper -o -a $DOMAIN -d $LOGNAME > mailbox_size_limit = 0 > mailq_path = /opt/csw/bin/mailq > manpage_directory = /opt/csw/share/man > maximal_backoff_time = 8000s > maximal_queue_lifetime = 7d > message_size_limit = 52428800 > mime_header_checks = regexp:/opt/csw/etc/postfix/maps/mime_header_checks > minimal_backoff_time = 1000s > mydestination = $myhostname, localhost.$mydomain > myhostname = stevie.youngguns.nl > mynetworks_style = host > myorigin = $myhostname > newaliases_path = /opt/csw/bin/newaliases > readme_directory = /opt/csw/share/doc/postfix/README_FILES > receive_override_options = no_address_mappings > recipient_delimiter = + > relay_domains = slagenlandwonen.nl, wfcommunicatie.nl, gooischebrink.com, > interjute.nl, melamo.nl, fair-play.nl, loopbaankamer.nl, ospl.nl, ospl.de, > printcontrol.nl, dankers-schilderwerken.nl, promonta.nl, > interim-denbosch.nl, vanherpt.biz, rodersana.nl > relayhost = > sample_directory = /opt/csw/share/doc/postfix/samples > sendmail_path = /opt/csw/sbin/sendmail > smtp_bind_address = 213.207.90.2 > smtp_helo_timeout = 60s > smtp_pix_workaround_delay_time = 10s > smtp_send_xforward_command = yes > smtp_skip_quit_response = yes > smtp_tls_loglevel = 1 > smtp_tls_security_level = may > smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache > smtpd_banner = $myhostname ESMTP > smtpd_client_connection_count_limit = 10 > smtpd_data_restrictions = reject_unauth_pipelining > smtpd_delay_reject = yes > smtpd_hard_error_limit = 12 > smtpd_helo_required = yes > smtpd_recipient_limit = 100 > smtpd_recipient_restrictions = permit_mynetworks, > permit_sasl_authenticated, check_client_access > hash:/opt/csw/etc/postfix/maps/relay_access, reject_non_fqdn_recipient, > reject_non_fqdn_sender, reject_unknown_sender_domain, > reject_unauth_destination, reject_non_fqdn_helo_hostname, > reject_rbl_client virbl.dnsbl.bit.nl, check_policy_service > inet:127.0.0.1:12525, check_sender_mx_access > cidr:/opt/csw/etc/postfix/maps/bogon_networks, check_client_access > cidr:/opt/csw/etc/postfix/maps/drop, check_sender_mx_access > cidr:/opt/csw/etc/postfix/maps/drop, check_sender_ns_access > cidr:/opt/csw/etc/postfix/maps/drop, reject_unverified_recipient, > check_client_access cidr:/opt/csw/etc/postfix/maps/dnswl_header, > check_client_access cidr:/opt/csw/etc/postfix/maps/dnswl_permit, > check_policy_service inet:127.0.0.1:10023 > smtpd_sasl_auth_enable = yes > smtpd_sasl_authenticated_header = yes > smtpd_sasl_local_domain = $myhostname > smtpd_sasl_path = private/auth > smtpd_sasl_security_options = noanonymous > smtpd_sasl_type = dovecot > smtpd_soft_error_limit = 3 > smtpd_tls_cert_file = /home/yghosting/ssl/secure-youngguns-nl.pem > smtpd_tls_key_file = /home/yghosting/ssl/secure-youngguns-nl.key > smtpd_tls_loglevel = 1 > smtpd_tls_security_level = may > smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache > soft_bounce = no > strict_rfc821_envelopes = yes > tls_random_source = dev:/dev/urandom > transport_maps = hash:/opt/csw/etc/postfix/maps/transport > unknown_address_reject_code = 550 > unknown_hostname_reject_code = 550 > unknown_local_recipient_reject_code = 550 > unverified_recipient_reject_code = 550 > virtual_alias_maps = hash:/opt/csw/etc/postfix/maps/virtual > > >> >> Thanks, >> Martijn -- YoungGuns Kasteleinenkampweg 7b 5222 AX 's-Hertogenbosch T. 073 623 56 40 F. 073 623 56 39 www.youngguns.nl KvK 18076568