On 16.11.21 10:06, natan wrote:
I need some help about uderstand log:

I have
FILTER smtp-amavis:[127.0.0.1]:10628

On 16.11.2021 10:22, Matus UHLAR - fantomas wrote:
you have this where?

On 16.11.21 10:41, natan wrote:
in master.cf:

smtp-amavis     unix    -       -       -       -       140       smtp
        -o smtp_data_done_timeout=6000s
        -o smtp_send_xforward_command=yes
        -o disable_dns_lookups=yes

I don't see any FILTER there.
I can only guess you have amavis defined as content_filter or
smtpd_proxy_filter. the "FILTER ..." should be somewhere in access rules and makes postfix use
amavis as content_filter (thus smtpd_proxy_timeout is useless later).


(in amavis I have 145)

this may also be a problem.  140 concurrent amavis filters can eat too much
of RAM and CPU.

this is local haproxy where connect postfix to port 10628 like:

...
bind 127.0.0.1:10628

  server amavis1 86.xxx.xxx.125:10628 check maxconn
  server amavis2 86.xxx.xxx.155:10628 check maxconn
  server amavis3 86.xxx.xxx.234:10628 check maxconn

and come back from amavis to postfix is like

86.xxx.xxx.199:10027 inet n  -   n   -   140    smtpd
    -o smtpd_proxy_timeout=900s
    -o content_filter=
    -o mynetworks_style=host
    -o
mynetworks=10.0.100.0/24,86.xxx.xxx.199/32,46.xxx.xxx.98/32,86.xxx.xxx.159/32,86.xxx.xxx.125/32,86.xxx.xxx.155/32,86.xxx.xxx.234/32


I recommend adding something like
    -o syslog_name=postfix/filtered

I added but nothing

I think that "postfix reload" is needed in this case.

But in amavis I found:

Nov 16 10:32:17 amavis1 amavis[1501]: (01501-06) smtp resp to MAIL
(pip): 421 4.4.2 thebe4.domain.pl Error: timeout exceeded

this is what your postfix replied to amavis when it tried to deliver the
message.

but the postfix should also mention this in postfix logs which you did not 
provide.


Is problem postfix to amavis - but I dont known where
to see clearly when the mail comes from your content filter.

looks like your incoming smtpd on port 10027 said this to content_filter
which further said this to your postfix.

however, I don't see where your postfix [86.xxx.xxx.199]:10027
rejected the
mail. You should have that in logs, and if you do what I recommended
above,
you'll see those errors in log under name "postfix/filtered/smtpd"

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"The box said 'Requires Windows 95 or better', so I bought a Macintosh".

Reply via email to