Addendum
Grabbed an hours worth of traffic with tcpdump and ran it through ethereal.
It appeared like everything was normal right up to the DATA command.
Then the remote machines just hung. This happened with multiple ISP mail
servers (all legit and large) whilst working fine (unbreakably fine)
with others.
After a few hours of hair pulling and rebooting I drove to the clients
and at a whim rebooted the router.
Waddya know? Everything started working again.
After the past few weeks and multiple drop outs (ISP swapped from layer
3 to layer 2) I think a change of ISP is called for.
Rgds
Nigel.
Nigel Allen
Managing Director
Electronic Document Registry Systems
Phone:
Fax:
Mobile:
Web:
+61 2 9450 2690
+61 2 9450 2691
+61 4 1494 5269
http://www.edrs.com.au
EDRS
DataSafe^(TM) - Saving over 80% of your postage costs
On 18/09/2007 12:02 PM, Nigel Allen wrote:
Greetings
We have a client running FC6 as a mail server. It doesn't do anything
unusual - acts as primary MX for it's domain, accepts incoming mail,
runs spamd and a few other things across it and then hands it off to
an MS Exchange Server box for the staff to pick up in Outlook.
Outgoing mail is taken by the MS box and handed off to the mail server
as a smart host.
All works well except for.......
We constanly see the messages like this in the mail log:
Sep 18 06:06:05 m1 sendmail[30958]: l8HJ66xS030958: SYSERR(root):
collect: read timeout on connection from oberon.tpgi.com.au,
from=<xxxxxxxx>
Sep 18 06:17:38 m1 sendmail[31148]: l8HJHb5i031148: SYSERR(root):
collect: read timeout on connection from mail40.messagelabs.com,
from=<xxxxxxxx>
Sep 18 06:30:06 m1 sendmail[31182]: l8HJU6Dv031182: SYSERR(root):
collect: read timeout on connection from oberon.tpgi.com.au,
from=<xxxxxxxx>
Sep 18 06:33:04 m1 sendmail[31188]: l8HJX54L031188: SYSERR(root):
collect: read timeout on connection from oberon.tpgi.com.au,
from=<xxxxxxxx>
Sep 18 07:04:43 m1 sendmail[31342]: l8HK4hCw031342: SYSERR(root):
collect: read timeout on connection from oberon.tpgi.com.au,
from=<xxxxxxxx>
Sep 18 07:04:51 m1 sendmail[31344]: l8HK4qOx031344: SYSERR(root):
collect: read timeout on connection from oberon.tpgi.com.au,
from=<xxxxxxxx>
Sep 18 07:07:14 m1 sendmail[31500]: l8HK7F4w031500: SYSERR(root):
collect: read timeout on connection from oberon.tpgi.com.au,
from=<xxxxxxxxt>
Sep 18 07:13:05 m1 sendmail[31516]: l8HKD4Xq031516: SYSERR(root):
collect: read timeout on connection from qsrv01sl.mx.bigpond.com,
from=<xxxxxxxx>
Sep 18 07:31:48 m1 sendmail[31558]: l8HKVkGM031558: SYSERR(root):
collect: read timeout on connection from oberon.tpgi.com.au,
from=<xxxxxxxx>
Sep 18 07:34:13 m1 sendmail[31564]: l8HKYBoL031564: SYSERR(root):
collect: read timeout on connection from qsrv01ps.mx.bigpond.com,
from=<xxxxxxxx>
Sep 18 07:42:33 m1 sendmail[31582]: l8HKgXed031582: SYSERR(root):
collect: read timeout on connection from oberon.tpgi.com.au,
from=<xxxxxxxx>
Sep 18 07:42:58 m1 sendmail[31584]: l8HKgwxh031584: SYSERR(root):
collect: read timeout on connection from qsrv03ps.mx.bigpond.com,
from=<xxxxxxxx>
Sep 18 07:53:04 m1 sendmail[31648]: l8HKr4Px031648: SYSERR(root):
collect: read timeout on connection from oberon.tpgi.com.au,
from=<xxxxxxxx>
Sep 18 08:08:50 m1 sendmail[31723]: l8HL8owr031723: SYSERR(root):
collect: read timeout on connection from oberon.tpgi.com.au,
from=<xxxxxxxx>
Sep 18 08:23:51 m1 sendmail[31970]: l8HLNpYY031970: SYSERR(root):
collect: read timeout on connection from oberon.tpgi.com.au,
from=<xxxxxxxx>
Sep 18 08:23:54 m1 sendmail[31972]: l8HLNrU7031972: SYSERR(root):
collect: read timeout on connection from oberon.tpgi.com.au,
from=<xxxxxxxx>
Sep 18 08:29:37 m1 sendmail[31986]: l8HLTakK031986: SYSERR(root):
collect: read timeout on connection from
host81-151-82-230.range81-151.btcentralplus.com, from=<xxxxxxxx>
Sep 18 08:50:58 m1 sendmail[32143]: l8HLovdK032143: SYSERR(root):
collect: read timeout on connection from mail40.messagelabs.com,
from=<xxxxxxxx>
and so on and so forth (addresses obfuscated for privacy).
when I run a ps -eaf | grep sendmail at any time, I see things like this:
[EMAIL PROTECTED] log]# ps -eaf | grep sendmail
root 873 3079 0 10:37 ? 00:00:00 sendmail:
l8I0bZx3000873 mail40.messagelabs.com [216.82.245.83]:
DATA
root 885 3079 0 10:43 ? 00:00:00 sendmail:
l8I0h5SZ000885 mail.vanuatu.com.vu [202.80.33.51]:
DATA
root 887 3079 0 10:43 ? 00:00:00 sendmail:
l8I0hMVh000887 mail.vanuatu.com.vu [202.80.33.51]:
DATA
root 891 3079 0 10:43 ? 00:00:00 sendmail:
l8I0hppk000891 mail.vanuatu.com.vu [202.80.33.51]:
DATA
root 893 3079 0 10:44 ? 00:00:00 sendmail:
l8I0iOaa000893 mail.vanuatu.com.vu [202.80.33.51]:
DATA
root 895 3079 0 10:45 ? 00:00:00 sendmail:
l8I0j1l2000895 oberon.tpgi.com.au [203.12.160.4]:
DATA
root 909 3079 0 10:52 ? 00:00:00 sendmail:
l8I0q6ri000909 mail1.emailcash.com.au [202.177.214.85]:
DATA
root 936 3079 0 10:59 ? 00:00:00 sendmail:
l8I0xjWW000936 mail9.tpgi.com.au [203.12.160.104]:
DATA
root 1128 3079 0 11:03 ? 00:00:00 sendmail:
l8I13323001128 oberon.tpgi.com.au [203.12.160.4]:
DATA
root 1212 3079 0 11:06 ? 00:00:00 sendmail:
l8I16cQU001212 oberon.tpgi.com.au [203.12.160.4]:
DATA
root 1214 3079 0 11:07 ? 00:00:00 sendmail:
l8I17767001214 oberon.tpgi.com.au [203.12.160.4]:
DATA
root 1245 3079 0 11:18 ? 00:00:00 sendmail:
l8I1IF5R001245 oberon.tpgi.com.au [203.12.160.4]:
DATA
root 1253 3079 0 11:20 ? 00:00:00 sendmail:
l8I1KtGc001253 qsrv01sl.mx.bigpond.com [144.140.92.181]:
DATA
root 1303 1173 0 11:37 pts/0 00:00:00 grep sendmail
root 3079 1 0 Sep04 ? 00:00:02 sendmail: accepting
connections
smmsp 3083 1 0 Sep04 ? 00:00:00 sendmail: Queue
[EMAIL PROTECTED]:15:00 for /var/spool/clientmqueue
root 3087 1 0 Sep04 ? 00:00:00 sendmail: Queue
[EMAIL PROTECTED]:15:00 for /var/spool/mqueue
Obviously something is hanging horribly and timing out but I cannot
for the life of me work out what. I've searched for these kind of
messages and came up with almost nothing apart from some old (and I
mean old) solutions to a BSD problem.
Software is as follows:
FC6
sendmail-8.14.1-4.1.fc6
spamassassin-3.1.9-1.fc6
Any input or suggestions short of taxidermy would be (very) gratefully
accepted.
TIA
Nigel.
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
