Mailbox flooded with Mailsize e-mails

Discussion in 'Installation/Configuration' started by Dew the Fifth, Jul 31, 2006.

  1. Dew the Fifth

    Dew the Fifth New Member

    I'm relatively new to these forums, and I want to start by thanking the many people who have suffered the same problems I have and the many people who have helped them. Already I've been able to get my server up and running almost entirely just by reading the posts that are available here. However, as you might have guessed I am still having a few "small" issues.

    Starting this morning, postfix has begun mailing me mailsize messages to my catchall email. (webadmin) I have already read several forum threads about the mailsize message so I understand that it is important for tracking purposes, but the HD space being taken up in quite large when these messages are just left in an email box. (not to mention it means they're probably not being processed correctly)

    I'd like to start by trying to post the typical items that have been requested with regards to this problem.

    Email being received just prior to problem occurring and intermittently during
    Code:
    This is the Postfix program at host base.gorillawebsolutions.com.
    
    I'm sorry to have to inform you that your message could not
    be delivered to one or more recipients. It's attached below.
    
    For further assistance, please send mail to <postmaster>
    
    If you do so, please include this problem report. You can
    delete your own text from the attached returned message.
    
    			The Postfix program
    
    <[email protected]> (expanded from
        <[email protected]>): can't create user output
        file. Command output: procmail: Error while writing to "/var/mail/webadmin"
    
    
    
    Reporting-MTA: dns; base.gorillawebsolutions.com
    X-Postfix-Queue-ID: ED68E1C05356
    X-Postfix-Sender: rfc822; [email protected]
    Arrival-Date: Sun, 30 Jul 2006 15:45:36 -0400 (EDT)
    
    Final-Recipient: rfc822; [email protected]
    Original-Recipient: rfc822; [email protected]
    Action: failed
    Status: 5.0.0
    Diagnostic-Code: X-Postfix; can't create user output file. Command output:
        procmail: Error while writing to "/var/mail/webadmin"
    

    ls -l /var/mail
    Code:
    [#####@base mail]$ ls -l
    total 14432
    -rw------- 1 admispconfig mail        0 Jun  7 13:25 admispconfig
    -rw------- 1 aradmin      mail        0 Jul 27 09:40 aradmin
    -rw------- 1 linux478     mail        0 Jul 27 09:39 aroscoe
    -rw------- 1 Scott        mail      576 Jul 27 13:45 ddcruver
    -rw------- 1 Amanda       mail        0 Jul 26 08:55 netadmin
    -rw------- 1 root         root    25266 Jun  3 04:02 root
    -rw------- 1 sherman      mail      576 Jul 31 07:28 sherman
    -rw------- 1 webadmin     root 14716849 Jul 31 10:51 webadmin
    -rw------- 1 zamrok       mail      576 Jul 30 12:22 zamrok
    

    Contents of /etc/postfix/local-host-names
    Code:
    ###################################
    #
    # ISPConfig local-host-names Configuration File
    #         Version 1.0
    #
    ###################################
    localhost
    base.gorillawebsolutions.com
    localhost.base.gorillawebsolutions.com
    localhost.gorillawebsolutions.com
    www.gorillawebsolutions.com
    www.GorillaWebSolutions.net
    www.aroscoe.com
    ns1.gorillawebsolutions.com
    GorillaWebSolutions.net
    mail.gorillawebsolutions.com
    ftp.gorillawebsolutions.com
    ftp.gorillawebsolutions.net
    ns2.gorillawebsolutions.com
    gorillawebsolutions.com
    mail.gorillawebsolutions.net
    Joe.GorillaWebSolutions.net
    aroscoe.com
    mail.aroscoe.com
    ftp.aroscoe.com
    #### MAKE MANUAL ENTRIES BELOW THIS LINE! ####
    

    Contents of /etc/aliases
    Code:
    #
    #  Aliases in this file will NOT be expanded in the header from
    #  Mail, but WILL be visible over networks or from /bin/mail.
    #
    #       >>>>>>>>>>      The program "newaliases" must be run after
    #       >> NOTE >>      this file is updated for any changes to
    #       >>>>>>>>>>      show through to sendmail.
    #
    
    # Basic system aliases -- these MUST be present.
    mailer-daemon:  postmaster
    postmaster:     root
    
    # General redirections for pseudo accounts.
    bin:            root
    daemon:         root
    adm:            root
    lp:             root
    sync:           root
    shutdown:       root
    halt:           root
    mail:           root
    news:           root
    uucp:           root
    operator:       root
    games:          root
    gopher:         root
    ftp:            root
    nobody:         root
    radiusd:        root
    nut:            root
    dbus:           root
    vcsa:           root
    canna:          root
    wnn:            root
    rpm:            root
    nscd:           root
    pcap:           root
    apache:         root
    webalizer:      root
    dovecot:        root
    fax:            root
    quagga:         root
    radvd:          root
    pvm:            root
    amanda:         root
    privoxy:        root
    ident:          root
    named:          root
    xfs:            root
    gdm:            root
    mailnull:       root
    postgres:       root
    sshd:           root
    smmsp:          root
    postfix:        root
    netdump:        root
    ldap:           root
    squid:          root
    ntp:            root
    mysql:          root
    desktop:        root
    rpcuser:        root
    rpc:            root
    nfsnobody:      root
    
    ingres:         root
    system:         root
    toor:           root
    manager:        root
    dumper:         root
    abuse:          root
    
    newsadm:        news
    newsadmin:      news
    usenet:         news
    ftpadm:         ftp
    ftpadmin:       ftp
    ftp-adm:        ftp
    ftp-admin:      ftp
    www:            webmaster
    webmaster:      root
    noc:            root
    security:       root
    hostmaster:     root
    info:           postmaster
    marketing:      postmaster
    sales:          postmaster
    support:        postmaster
    
    
    # trap decode to catch security attacks
    decode:         root
    
    # Person who should get root's mail
    #root:          marc
    
    Just a bit of the mail log
    Code:
    Jul 31 11:00:07 base postfix/smtpd[5108]: connect from base.gorillawebsolutions.com[127.0.0.1]
    Jul 31 11:00:07 base postfix/smtpd[5254]: connect from base.gorillawebsolutions.com[127.0.0.1]
    Jul 31 11:00:07 base postfix/smtpd[5108]: setting up TLS connection from base.gorillawebsolutions.com[127.0.0.1]
    Jul 31 11:00:07 base postfix/smtpd[5254]: setting up TLS connection from base.gorillawebsolutions.com[127.0.0.1]
    Jul 31 11:00:07 base postfix/smtpd[5108]: TLS connection established from base.gorillawebsolutions.com[127.0.0.1]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)
    Jul 31 11:00:07 base sendmail[5473]: STARTTLS=client, relay=[127.0.0.1], version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256
    Jul 31 11:00:07 base postfix/smtpd[5108]: E7AF91C7BEB5: client=base.gorillawebsolutions.com[127.0.0.1], [email protected]
    Jul 31 11:00:07 base postfix/smtpd[5254]: TLS connection established from base.gorillawebsolutions.com[127.0.0.1]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)
    Jul 31 11:00:07 base sendmail[5475]: STARTTLS=client, relay=[127.0.0.1], version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256
    Jul 31 11:00:07 base postfix/smtpd[5254]: E91141C85801: client=base.gorillawebsolutions.com[127.0.0.1], [email protected]
    Jul 31 11:00:07 base postfix/cleanup[4802]: E7AF91C7BEB5: message-id=<[email protected]>
    Jul 31 11:00:07 base postfix/cleanup[4541]: E91141C85801: message-id=<[email protected]>
    Jul 31 11:00:09 base sendmail[5475]: k6VF071R005475: to=admispconfig@localhost, ctladdr=webadmin (10020/10008), delay=00:00:02, xdelay=00:00:02, mailer=relay, pri=30101, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (Ok: queued as E91141C85801)
    Jul 31 11:00:09 base sendmail[5473]: k6VF070J005473: to=admispconfig@localhost, ctladdr=webadmin (10020/10008), delay=00:00:02, xdelay=00:00:02, mailer=relay, pri=30101, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (Ok: queued as E7AF91C7BEB5)
    Jul 31 11:00:09 base postfix/smtpd[5254]: disconnect from base.gorillawebsolutions.com[127.0.0.1]
    Jul 31 11:00:09 base postfix/smtpd[5108]: disconnect from base.gorillawebsolutions.com[127.0.0.1]
    Jul 31 11:00:09 base postfix/local[4592]: 7278B1C3FA1F: to=<[email protected]>, orig_to=<[email protected]>, relay=local, delay=19516, status=sent (delivered to command: /usr/bin/procmail -f-)
    Jul 31 11:00:09 base postfix/local[4380]: 319081C65114: to=<[email protected]>, orig_to=<[email protected]>, relay=local, delay=32882, status=sent (delivered to command: /usr/bin/procmail -f-)
    Jul 31 11:00:09 base postfix/qmgr[20077]: 319081C65114: removed
    Jul 31 11:00:09 base postfix/qmgr[20077]: 7278B1C3FA1F: removed
    Jul 31 11:00:09 base postfix/qmgr[20077]: 631491C8596B: from=<[email protected]>, size=791, nrcpt=1 (queue active)
    
     
    Last edited: Jul 31, 2006
  2. till

    till Super Moderator Staff Member ISPConfig Developer

  3. falko

    falko Super Moderator Howtoforge Staff

    Did you create an email alias admispconfig for the webadmin account? If so, please remove it!
     
  4. Dew the Fifth

    Dew the Fifth New Member

    Thank you Till, you were right. My email catch all belongs to the same domain as my server itself and is therefore creating the loop.

    In an attempt to rectify the situation, I removed the catchall setting from webadmin. However, webadmin continued to recieve all of the mailsize e-mails. I was required to remove webadmin, and create a new user with a different name in order to rectify the problem. I assume this is because even though I removed the catchall from webadmin he remained aliased in some way to adminispconfig. However I can not find this alias.

    If somebody could help me find this alias I would really appriciate it. If it helps, then acessing spamfilter settings for any of my users will now change their email from whatever I have it set to, to webadmin.

    Thank you. For everything.

    --Duane


    Problem Solving so far
    I just read the link you gave me

    and I went in to check the main.cf

    Which as you can see has mydomain commented out. Reading the comments, I assume this means that it is using $myhostname minus the first component as $mydomain. However, myhostname is also commented out and is therefore using gethostname as its default value.

    With this in mind, I wrote a simple C program to generate the results of the gethostname function.
    Code:
    #include <unistd.h>
    #include <stdlib.h>
    #include <stdio.h>
    int main()
    {
            char name[255];
            gethostname(name,255);
            printf("%s",name);
            return 1;
    }
    
    This program reveals that the hostname of my system is base.gorillawebsolutions.com which indeed makes mydomain=gorillawebsolutions.com which is of course the domain name used for my catchall "webadmin"

    This program reveals that the hostname of my system is base.gorillawebsolutions.com which indeed makes mydomain=gorillawebsolutions.com which is of course the domain name used for my catchall "webadmin"
     
  5. Dew the Fifth

    Dew the Fifth New Member

    On second thought, I'm not ok. Even though I don't have a mailbox filling up with junk mail anymore, I still have a mail log getting filled with failed mail delivery messages...if anybody can help me figure out how to remove this allias I would really appriciate it. Thank
     
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    Please post an excerpt of the mail.log file.
     
  7. Dew the Fifth

    Dew the Fifth New Member

    I'm very sorry, I thought I replied to this again, but I must not have. My problem was fixed the next day after posting. I'm not sure what fixed it, but postfix crashed in the middle of the night and when I brought it back up it stopped trying to send the mailsize e-mails. Mabey it just needed time to empty its queue, or mabey something happened with the config files when it crashed, but either way it started working again. Thanks again for all the help guys.

    --Dew
     
  8. Rasputin

    Rasputin New Member

  9. till

    till Super Moderator Staff Member ISPConfig Developer

    The page has moved, the new URL is:

    http://www.howtoforge.com/faq/9_33_en.html
     
  10. phamels

    phamels Member

    Same kind of problem here ...

    It seems I'm having a same kind of problem.
    All of a sudden, some users started complaining about mail not arriving in their mailbox and being bounced.

    Log file entry:
    -------------
    Aug 31 02:34:26 gconnect postfix/local[23824]: 34380ABEE1: to=<webxx_user@domain>, orig_to=<alias@domain>, relay=local, delay=2, status=bounced (can't create user output file. Command output: procmail: Error while writing to "/var/mail/webxx_user" )

    Some mails seem to arrive, some seem to bounce...

    This happend all of a sudden, nothing really changed, except i upgraded to the latest ISPConfig verison :p

    Lil' help ?

    Thx !
     
  11. phamels

    phamels Member

    Hmm, new problem.

    <webx_user@domain> (expanded from <user@domain>): can't
    create user output file. Command output: /bin/sh: let: HD_QUOTA=*1024:
    syntax error: operand expected (error token is "*1024") /bin/sh: line 1: [:
    !=: unary operator expected procmail: Error while writing to
    "/var/mail/webx_user"


    How could this be, My mailbox has a quota of 300Mb and only 50Mb is used ...

    Arg, I hate it when problems just show up ! :p

    Lol, second attempt gave me:

    <webx_user@domain> (expanded from <user@domain>): can't
    create user output file. Command output: ==================== QUOTA:
    314572800 INBOXSIZE: 51194916 MAXMSG: 263377884 procmail: Error while
    writing to "/var/mail/webx_user"

    WHOT ?! :)

    BTW, When I try to comment out the QUOTA line in my .procmailrc file for that user and save the user in isp config system, i get the following:

    <webx_user@domain> (expanded from <user@domain>): can't
    create user output file. Command output: ==================== QUOTA:
    10000000000 INBOXSIZE: 51194916 MAXMSG: 2147483647 procmail: Error while
    writing to "/var/mail/webx_user"



    Then all of a sudden, I deleted some message, since i use imap, and BANG, my mails started arriving again...
    Is there like a quota for the number of mails you can receive? Cause that I wouldn't like at all :)
     
    Last edited: Aug 31, 2006
  12. till

    till Super Moderator Staff Member ISPConfig Developer

    No, there is no such quota. Generally it is better to use maildir with imap then mbox. Mbox files are often making trouble when they grow larger.
     
  13. phamels

    phamels Member

    Yeah, I really just noticed that today the hard way :)

    Will I lose any e-mails when I change it to maildir?
    Is there anything I should watch not to break the ISPConfig system?

    Oh, Before I forget, FC4 with latest ISPConfig version :)
     
    Last edited: Sep 1, 2006
  14. till

    till Super Moderator Staff Member ISPConfig Developer

    No. But the emails will not be accessible until you convert your mailboxes to maildir with a tool like mb2md.

    No. Just install courier pop3 and imap and then switch to maildir under management > server > settings in ISPConfig.
     
  15. phamels

    phamels Member

    Seem to have found the problem.
    Since it was only just one user who was having problems with his mailbox, it was easy to narrow down the options.
    So i started looking into the postfix configs, It seemed the default value of mailbox_size_limit was: 51200000.
    The users mailbox size was near that size, so i changed the limit to: 204800000 with:

    Code:
    postconf -e "mailbox_size_limit = 204800000"
    postfix reload
    
    TUDU, user started receiving mails again :)

    Darn, why is the solution always so easy that you always look over it :)


    Now say i would want to install Courier POP3 and IMAP anyway,
    should i just follow the Howtoforge guide?
    ISPConfig really won't get messed up?
    Lol, just don't want anything to happen to any of my 78 hostings :p
     
  16. till

    till Super Moderator Staff Member ISPConfig Developer

    Just install courier pop3 and imap packages from your linux distribution and then enable maildir in ISPCOnfig.

    The only problem you will have is that all old emails that your clients have in their mailboxes are invisible from that moment on until you convert the mbox files to maildir format with a tool like mb2md.
     
  17. phamels

    phamels Member

    thx till,

    u are the greatest :)
     

Share This Page