smtpd - too many errors after DATA
J. A. Landamore
messages:
Jun 20 09:31:43 scyros postfix/smtpd[19878]: too many errors after RCPT from
mailsend.le.ac.uk[143.210.16.126]
Jun 20 10:33:27 scyros postfix/smtpd[3869]: too many errors after DATA from
mailsend.le.ac.uk[143.210.16.126]
to be logged? I get between 6 and 12 per 24 hour period.
No other messages in any logs, netstat/iostat not showing any problems.
TIA for any guidance.
John Landamore
School of Mathematics & Computer Science
University of Leicester
University Road, LEICESTER, LE1 7RH
J.Lan...@mcs.le.ac.uk
Phone: +44 (0)116 2523410 Fax: +44 (0)116 2523604
Ralf Hildebrandt
> Please can anyone give me a pointer as to what may be causing the error
> messages:
>
> Jun 20 09:31:43 scyros postfix/smtpd[19878]: too many errors after RCPT from mailsend.le.ac.uk[143.210.16.126]
> Jun 20 10:33:27 scyros postfix/smtpd[3869]: too many errors after DATA from mailsend.le.ac.uk[143.210.16.126]
>
> to be logged?
Reading the error message helps.
There were "too many errors after RCPT from mailsend.le.ac.uk[143.210.16.126]"
check your logs to see ALL errors from smtpd[19878]
Also check the settings for
smtpd_hard_error_limit
smtpd_soft_error_limit
--
Ralf Hildebrandt Ralf.Hil...@charite.de
my current spamtrap spam...@charite.de
http://www.arschkrebs.de/postfix/ Tel. +49 (0)30-450 570-155
Why you can't find your system administrators:
"You *have* a system administrator ?"
Wietse Venema
> Please can anyone give me a pointer as to what may be causing the error
> messages:
>
> Jun 20 09:31:43 scyros postfix/smtpd[19878]: too many errors after RCPT from
> mailsend.le.ac.uk[143.210.16.126]
> Jun 20 10:33:27 scyros postfix/smtpd[3869]: too many errors after DATA from
> mailsend.le.ac.uk[143.210.16.126]
>
>
> No other messages in any logs, netstat/iostat not showing any problems.
http://www.postfix.org/postconf.5.html#smtpd_hard_error_limit
http://www.postfix.org/postconf.5.html#smtpd_soft_error_limit
http://www.postfix.org/postconf.5.html#smtpd_error_sleep_time
Wietse
Len Conrad
>Please can anyone give me a pointer as to what may be causing the error
>messages:
>
>Jun 20 09:31:43 scyros postfix/smtpd[19878]: too many errors after RCPT from
>mailsend.le.ac.uk[143.210.16.126]
>Jun 20 10:33:27 scyros postfix/smtpd[3869]: too many errors after DATA from
>mailsend.le.ac.uk[143.210.16.126]
>
>to be logged? I get between 6 and 12 per 24 hour period.
see smtpd_hard_error_limit and smtpd_soft_error_limit. the log lines are
for senders who exceed shel/ssel per smtp session.
postfix smptd hangs up at limit+1.
Len
_____________________________________________________________________
http://MenAndMice.com/DNS-training : Denver; NYC; San Jose
http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites
J. A. Landamore
>
>* J. A. Landamore <j...@mcs.le.ac.uk>:
>> Please can anyone give me a pointer as to what may be causing the error
>> messages:
>>
>> Jun 20 09:31:43 scyros postfix/smtpd[19878]: too many errors after RCPT from
mailsend.le.ac.uk[143.210.16.126]
>> Jun 20 10:33:27 scyros postfix/smtpd[3869]: too many errors after DATA from
mailsend.le.ac.uk[143.210.16.126]
>>
>> to be logged?
>
>Reading the error message helps.
>There were "too many errors after RCPT from mailsend.le.ac.uk[143.210.16.126]"
>check your logs to see ALL errors from smtpd[19878]
>
>Also check the settings for
>
>smtpd_hard_error_limit
>smtpd_soft_error_limit
>--
>Ralf Hildebrandt Ralf.Hil...@charite.de
>my current spamtrap spam...@charite.de
>http://www.arschkrebs.de/postfix/ Tel. +49 (0)30-450 570-155
>Why you can't find your system administrators:
>"You *have* a system administrator ?"
>
My apologies, I didn't make myself clear enough.
We are fed by 3 upstream mailhubs. The error can be generated by mail from any
one of the 3 hubs. The error message given above is immediately followed by a
disconnect and that is all. Nothing precedes it, nothing follows it. I'm not
interested in raising the smptd_*_error_limit (which is at the default level) as
this only affects <0.03% of our mail and (according to my very poor
understanding of the RFCs) as there hasn't been a full transaction the upstream
hub should retransmit. I'm trying to sort out what is causing it.
In the first case does it mean that instead of another RCPT or DATA, smtpd is
getting rubbish?
In the second case I thought that any input was valid until <EOT>?
Could it be a bad block of memory (which btw all appears to test OK) or disk?
Is there any method I can use to narrow down what is causing this, or do I need
to start by sniffing the incoming packets?
This has started happening on the system within the last few weeks and I'm
trying to determine what to replace without blindly replacing
disks/NIC/RAM/network fabric etc
Again, thanks for your patience and help
Wietse Venema
> Ralf Hildebrandt kindly relpied:
>
> >
> >* J. A. Landamore <j...@mcs.le.ac.uk>:
> >> Please can anyone give me a pointer as to what may be causing the error
> >> messages:
> >>
> >> Jun 20 09:31:43 scyros postfix/smtpd[19878]: too many errors after RCPT from
> mailsend.le.ac.uk[143.210.16.126]
> >> Jun 20 10:33:27 scyros postfix/smtpd[3869]: too many errors after DATA from
> mailsend.le.ac.uk[143.210.16.126]
> >>
> >> to be logged?
> >
> >Reading the error message helps.
> >There were "too many errors after RCPT from mailsend.le.ac.uk[143.210.16.126]"
> >check your logs to see ALL errors from smtpd[19878]
> >
> >Also check the settings for
> >
> >smtpd_hard_error_limit
> >smtpd_soft_error_limit
> >
>
I strongly recommend you read the text that accompanies the URLs
cited above. REALLY.
Because your questions show that you either did not read the text,
or that you completely mis-understood it. The issue has nothing to
do with memory failure or with network transmission errors.
Wietse