btb: > >>> postconf -Mf > >> smtp inet n - - - 1 postscreen > > > > Yep, it's chrooted. You need to configure syslog to add a log > > socket to the jail, or turn off chroot. > > during this period, postfix activity from all other postfix processes is > getting logged successfully, most of which are chrooted, and postscreen > is logging fine outside of this one period. i think chroot is not the
You are missing an important detail. On a busy server postscreen will run forever. It will never reconnect to the new syslog server. On a busy or idle server, smtpd runs only for a few minutes. The next smtpd process will automatically to the new syslog server. I am 99.99% certain that chroot is the problem here. Wietse