Bill Kwok wrote: > Hi all, > > Finally, I found out why I got the status 256 error: the original > softlimit for smtpd is too small.
Good find, Bill. > If you have same symptom like me (lot of smtp connections with status > 256 and nothing logged at send / spam / clam log), you better increase > the smtp softlimit. My problem didn't recover a bit even though I > increased it from 5,000,000 to 16,000,000, then even to > 24,000,000. Until today I raise it to 32,000,000, then the problem solved. I'd be careful with this. See http://www.tldp.org/HOWTO/Qmail-ClamAV-HOWTO/x277.html for recommendations. Setting this any higher than necessary might cause excessive paging. The toaster default is 12,000,000. I don't know why you should need much/any more than that. How many RBLs are you using? Also, 256 errors are 'normal' for simple timeouts when the sender isn't responding in a timely fashion. The default is 1200 (20 minutes), which I find too long. I've created a /var/qmail/control/timeoutsmtpd file (not included in basic toaster) with a value of 60. This keeps the number of active smtp sessions down a bit (from 10-20 to 5-10) on a high volume server. BL, don't go tweaking softlimit just because you're seeing 256 errors in the log. Be sure that you're missing some emails first. > I don't know if it's related, but I am using RulesDuJour to update my > spamassassin rules. I doubt it. SA runs as a separate process from smtpd. > Good Luck! > > Best regards, > Bill > > On 12/5/06, *Bill Kwok* <[EMAIL PROTECTED] > <mailto:[EMAIL PROTECTED]>> wrote: > > I am sorry I overlook something. The fact is: > > > 1. The tcpserver status 256 error happened even before I changed > the self-signed certificate. > 2. Concerning the email missing problem: From smtp log, I can see > the sender server connected to my server, CHKUSER accpeted > sender and rcpt, then end with status 256. But nothing show > up in send or spamd log. > > Thank you very much. > > Best regards, > Bill > > > On 12/5/06, *Bill Kwok* <[EMAIL PROTECTED] > <mailto:[EMAIL PROTECTED]>> wrote: > > Hi, > > My server was running okay until when my self-signed digital > cert. expired. After I regenerated the cert. by using this steps: > > > cd /usr/share/ssl/certs/ > make stunnel.pem > mv stunnel.pem /var/qmail/control/servercert.pem > chown root:qmail /var/qmail/control/servercert.pem > chmod 644 /var/qmail/control/servercert.pem > > It looked okay at the beginning. But then my users reported that > there are some email missing. And I found that from smtp log file, there are > quite a number of errors: > > @4000000045752a6a34ab5084 tcpserver: status: 18/100 > @4000000045752a6a34ab6024 tcpserver: pid 16588 from > nnn.nnn.nnn.nnn > @4000000045752a6a34ab67f4 tcpserver: ok 16588 > mx.my.domain.com:10 <http://mx.my.domain.com:10/>.0.1.1:25 > :nnn.nnn.nnn.nnn::39453 > @4000000045752a6a34ed6e4c tcpserver: end 16588 status 256 > > @4000000045752a6a34ed7a04 tcpserver: status: 17/100 > @4000000045752a6a36b4824c tcpserver: status: 18/100 > > @4000000045752a6a36b491ec tcpserver: pid 16600 from > nnn.nnn.nnn.nnn > @4000000045752a6a36b499bc tcpserver: ok 16600 > > > mx.my.domain.com:10 <http://mx.my.domain.com:10/>.0.1.1:25 > :nnn.nnn.nnn.nnn::39464 > @4000000045752a6a3786d9f4 tcpserver: end 16600 status 256 > > @4000000045752a6a3786e1c4 tcpserver: status: 17/100 > @4000000045752a6a389125d4 tcpserver: end 16437 status 0 > @4000000045752a6a3891b274 tcpserver: status: 16/100 > @4000000045752a6b004655dc tcpserver: status: 17/100 > > @4000000045752a6b0046657c tcpserver: pid 16601 from > nnn.nnn.nnn.nnn > @4000000045752a6b00466d4c tcpserver: ok 16601 > > > mx.my.domain.com:10 <http://mx.my.domain.com:10/>.0.1.1:25 > :nnn.nnn.nnn.nnn::39489 > @4000000045752a6b008ad8ec tcpserver: end 16601 status 256 > > Would anyone show me how to fix this problem? Thanks in advance. > > Best regards, > Bill > -- -Eric 'shubes' --------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
