Re: [qmailtoaster] Re: Out of memory error sending from Squirrelmail on CentOS6
Hello Eric, Friday, April 11, 2014, 4:31:19 PM, you wrote: On 04/11/2014 01:02 PM, Diana Calder wrote: The Barracuda email firewall also forwards to port 25 - which ironically continued working fine despite getting absolutely hammered with checks for nonexistent accounts for a couple of hours earlier today. On a side note, I expect that spamdyke isn't doing you much good since you have an email firewall in front of it. I'd wager that you could remove the Barracuda firewall and do just as well with spamdyke on the perimeter. You've probably got bigger fish to fry right now though. Frankly, we'd probably be further ahead turning off spamdyke - the Barracuda is much easier to admin. A non-techie staff person monitors it and releases from quarantine any legitimate email that gets caught, whether for attachments or false positives. Spamdyke isn't nearly as slick to manage. Having said that, yes, I still have bigger fish to fry - and the squirrelmail issues are the least of my problems at the moment. I think we're on our second set of bad things happening in threes at the moment... -- Best regards, Diana Calder mailto:dcal...@essexcountylibrary.ca Automation Technician(519) 776-5241 x.131 Essex County Library Essex, ON - To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Re: Out of memory error sending from Squirrelmail on CentOS6
Any reason why you have REQUIRE_AUTH=0 for submission? I'm guessing you just tried this to see if it remedied the error. Be sure to change it back. Please try doubling softlimit, just for yuks. I doubt that will fix things though, as value for smtp on 64-bit appears to be 6400. Can you authenticate successfully on port 25? You should be able to, (though it's not recommended). -- -Eric 'shubes' On 04/11/2014 11:28 AM, Diana Calder wrote: System is a CentOS6 x64 running the testing qmailtoaster (DK disabled) (in a VM on Citrix XenServer 6.2) This toaster has been up and running for a few weeks now and, to the best of my knowledge (I almost never use the webmail interface), outgoing mail from Squirrelmail WAS working fine up until yesterday. Yesterday, staff started seeing the following when trying to send an email from Squirrelmail: ERROR: Message not sent. Server replied: Service not available, closing channel 421 out of memory (#4.3.0) I've already tried increasing the softlimit - it didn't help. I've also tried increasing storage (from 8 to 16GB) and RAM (from 2 to 4GB) on the VM - also didn't help (didn't really expect it to but it was worth a shot). Sending messages works fine from a mail client, so the problem appears to be specific to Squirrelmail and/or port 587. Testing via telnet from the webserver confirms that port 587 is the culprit: [root@qmail tcprules.d]# telnet localhost 587 Trying ::1... telnet: connect to address ::1: Connection refused Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 qmail.essexcountylibrary.ca - Welcome to Qmail Toaster Ver. 1.3 SMTP Server ESMTP mail from:dcal...@essexcountylibrary.ca 421 out of memory (#4.3.0) Connection closed by foreign host. Here's the contents of /var/qmail/supervise/submission/run #!/bin/sh QMAILDUID=`id -u vpopmail` NOFILESGID=`id -g vpopmail` MAXSMTPD=`cat /var/qmail/control/concurrencyincoming` SMTPD=/var/qmail/bin/qmail-smtpd TCP_CDB=/etc/tcprules.d/tcp.smtp.cdb HOSTNAME=`hostname` VCHKPW=/home/vpopmail/bin/vchkpw export REQUIRE_AUTH=0 exec /usr/bin/softlimit -m 7500 \ /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c $MAXSMTPD \ -u $QMAILDUID -g $NOFILESGID 0 587 \ $SMTPD $VCHKPW /bin/true 21 Suggestions?? - To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Re: Out of memory error sending from Squirrelmail on CentOS6
Did you change anything from stock to be able to log in with only username? I don't recall off hand how that mechanism (default domain) works. I suppose this could be related to the other problem. We'll see soon enough. ;) -- -Eric 'shubes' On 04/11/2014 11:38 AM, Diana Calder wrote: I'm not sure whether this is related or not, however... Squirrelmail will not accept usern...@domain.com plus password for login - it will only accept username plus password: ERROR: ERROR: Connection dropped by IMAP server. Query: LOGOUT Connecting with a mail client, either format (usern...@domain.com or username) works. Obviously, I'd like to fix this as well but it's less urgent than the lack of ability to send email from Squirrelmail. I'm just not sure whether one may perhaps have something to do with the other... Diana Friday, April 11, 2014, 2:28:46 PM, you wrote: System is a CentOS6 x64 running the testing qmailtoaster (DK disabled) (in a VM on Citrix XenServer 6.2) This toaster has been up and running for a few weeks now and, to the best of my knowledge (I almost never use the webmail interface), outgoing mail from Squirrelmail WAS working fine up until yesterday. Yesterday, staff started seeing the following when trying to send an email from Squirrelmail: ERROR: Message not sent. Server replied: Service not available, closing channel 421 out of memory (#4.3.0) I've already tried increasing the softlimit - it didn't help. I've also tried increasing storage (from 8 to 16GB) and RAM (from 2 to 4GB) on the VM - also didn't help (didn't really expect it to but it was worth a shot). Sending messages works fine from a mail client, so the problem appears to be specific to Squirrelmail and/or port 587. Testing via telnet from the webserver confirms that port 587 is the culprit: [root@qmail tcprules.d]# telnet localhost 587 Trying ::1... telnet: connect to address ::1: Connection refused Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 qmail.essexcountylibrary.ca - Welcome to Qmail Toaster Ver. 1.3 SMTP Server ESMTP mail from:dcal...@essexcountylibrary.ca 421 out of memory (#4.3.0) Connection closed by foreign host. Here's the contents of /var/qmail/supervise/submission/run #!/bin/sh QMAILDUID=`id -u vpopmail` NOFILESGID=`id -g vpopmail` MAXSMTPD=`cat /var/qmail/control/concurrencyincoming` SMTPD=/var/qmail/bin/qmail-smtpd TCP_CDB=/etc/tcprules.d/tcp.smtp.cdb HOSTNAME=`hostname` VCHKPW=/home/vpopmail/bin/vchkpw export REQUIRE_AUTH=0 exec /usr/bin/softlimit -m 7500 \ /usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c $MAXSMTPD \ -u $QMAILDUID -g $NOFILESGID 0 587 \ $SMTPD $VCHKPW /bin/true 21 Suggestions?? - To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: Out of memory error sending from Squirrelmail on CentOS6
Friday, April 11, 2014, 3:26:42 PM, Eric wrote: Any reason why you have REQUIRE_AUTH=0 for submission? I'm guessing you just tried this to see if it remedied the error. Be sure to change it back. Hmm, I think that was actually in there by default. I don't recall changing it - and it's the same in the /var/qmail/supervise/smtp/run so I think it was the default. Either that or it was the setting on the old qmail server - would the backup and restore script have copied that across? Please try doubling softlimit, just for yuks. I doubt that will fix things though, as value for smtp on 64-bit appears to be 6400. Yes, it is. I tried that and it didn't help, so I pushed it up higher and it still didn't help. Just tried doubling it to 12800 - and yes, it's working. That's a pretty ridiculous number to need, considering how few people would actually be trying to send via squirrelmail at any given moment - maybe 2 or 3 messages on average? Can you authenticate successfully on port 25? You should be able to, (though it's not recommended). Yes, because port 25 is where the email clients connect to and those work just fine. Also tried via telnet - yes, port 25 works. And if I switch the email client to connect on 587, that doesn't work. The Barracuda email firewall also forwards to port 25 - which ironically continued working fine despite getting absolutely hammered with checks for nonexistent accounts for a couple of hours earlier today. The Barracuda bounced the spam but it still contacts the Qmail server to check for a valid recipient. So, that's working, at least for now - but I have a feeling there must be something else going on there. -- Best regards, Diana Calder mailto:dcal...@essexcountylibrary.ca Automation Technician(519) 776-5241 x.131 Essex County Library Essex, ON - To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] Re: Out of memory error sending from Squirrelmail on CentOS6
Hello Eric, Friday, April 11, 2014, 3:28:10 PM, you wrote: Did you change anything from stock to be able to log in with only username? I don't recall off hand how that mechanism (default domain) works. Yes, I did. That's one of those sort of legacy things that came across from the previous setup - we had a lot of mail clients configured to use username only and I had to turn on access for either format until I get a chance to get out and change all of them (which will happen when I convert everyone over from POP3 to IMAP, which is being gradually rolled out as we see how well the system holds up to the change). The weird thing is that the old squirrelmail install required usern...@domain.com to work and this one requires the opposite. I suppose this could be related to the other problem. We'll see soon enough. ;) Apparently, it's not directly related as the ridiculously high bump on the softlimit fixed the other problem, at least for the time being. We'll see if things are still behaving on Monday. -- Best regards, Diana Calder mailto:dcal...@essexcountylibrary.ca Automation Technician(519) 776-5241 x.131 Essex County Library Essex, ON - To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Re: Out of memory error sending from Squirrelmail on CentOS6
On 04/11/2014 01:02 PM, Diana Calder wrote: Friday, April 11, 2014, 3:26:42 PM, Eric wrote: Any reason why you have REQUIRE_AUTH=0 for submission? I'm guessing you just tried this to see if it remedied the error. Be sure to change it back. Hmm, I think that was actually in there by default. I don't recall changing it - and it's the same in the /var/qmail/supervise/smtp/run so I think it was the default. Either that or it was the setting on the old qmail server - would the backup and restore script have copied that across? Nope. Please try doubling softlimit, just for yuks. I doubt that will fix things though, as value for smtp on 64-bit appears to be 6400. Yes, it is. I tried that and it didn't help, so I pushed it up higher and it still didn't help. Just tried doubling it to 12800 - and yes, it's working. That's a pretty ridiculous number to need, considering how few people would actually be trying to send via squirrelmail at any given moment - maybe 2 or 3 messages on average? Can you authenticate successfully on port 25? You should be able to, (though it's not recommended). Yes, because port 25 is where the email clients connect to and those work just fine. Also tried via telnet - yes, port 25 works. And if I switch the email client to connect on 587, that doesn't work. The Barracuda email firewall also forwards to port 25 - which ironically continued working fine despite getting absolutely hammered with checks for nonexistent accounts for a couple of hours earlier today. The Barracuda bounced the spam but it still contacts the Qmail server to check for a valid recipient. So, that's working, at least for now - but I have a feeling there must be something else going on there. I concur. Will you post the contents of your smtp and submission run files? I'd like to do some careful inspection. -- -Eric 'shubes' - To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
[qmailtoaster] Re: Out of memory error sending from Squirrelmail on CentOS6
On 04/11/2014 01:02 PM, Diana Calder wrote: The Barracuda email firewall also forwards to port 25 - which ironically continued working fine despite getting absolutely hammered with checks for nonexistent accounts for a couple of hours earlier today. On a side note, I expect that spamdyke isn't doing you much good since you have an email firewall in front of it. I'd wager that you could remove the Barracuda firewall and do just as well with spamdyke on the perimeter. You've probably got bigger fish to fry right now though. -- -Eric 'shubes' - To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
