Postfix no longer functioning after latest update

Discussion in 'Installation/Configuration' started by ustoopia, Feb 29, 2020.

Tags:
  1. ustoopia

    ustoopia Member

    Hi,
    Yesterday I performed the ispconfig update and it all seemed to have gone fine. I didnt encounter any errors during the upgrade. After a while I started noticing I was no longer receiving automatic generated messases for me. So I checked out the log files but I can't make heads or tails out of it. I've been googling most of the things I found it the logs but I don't have the knowledge to even see if I'm on the right track at all. Hopefully an ispconfig guru here will have a least a clue of where I should focus on. Here are some info.

    From mail.log in ispoconfig monitoring:

    Code:
    Feb 29 00:34:33 websrv5 postfix/smtpd[11765]: connect from localhost.localdomain[127.0.0.1]
    Feb 29 00:34:33 websrv5 postfix/smtpd[11765]: warning: SASL: Connect to private/auth failed: Connection refused
    Feb 29 00:34:33 websrv5 postfix/smtpd[11765]: fatal: no SASL authentication mechanisms
    Feb 29 00:34:34 websrv5 postfix/master[16907]: warning: process /usr/lib/postfix/sbin/smtpd pid 11758 exit status 1
    Feb 29 00:34:34 websrv5 postfix/master[16907]: warning: /usr/lib/postfix/sbin/smtpd: bad command startup -- throttling
    Feb 29 00:34:34 websrv5 amavis[32658]: (32658-10) (!)WwFlr27F-8JZ FWD from <root> -> <[email protected]>,  451 4.5.0 From MTA() during fwd-connect (No greeting, dt: 1.025 s): id=32658-10
    Feb 29 00:34:34 websrv5 amavis[32658]: (32658-10) Blocked MTA-BLOCKED {TempFailedOpenRelay}, [127.0.0.1] <root> -> <[email protected]>, Message-ID: <[email protected]>, mail_id: WwFlr27F-8JZ, Hits: 1.984, size: 429, 2800 ms
    Feb 29 00:34:34 websrv5 postfix/smtp[11739]: F0E87110190: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=10176, delays=10173/0.03/0/2.8, dsn=4.5.0, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 id=32658-10 - Temporary MTA failure on relaying, From MTA() during fwd-connect (No greeting, dt: 1.025 s): id=32658-10 (in reply to end of DATA command))
    Feb 29 00:34:34 websrv5 postfix/master[16907]: warning: process /usr/lib/postfix/sbin/smtpd pid 11765 exit status 1
    Feb 29 00:34:34 websrv5 amavis[32659]: (32659-12) (!)fOOvrigC90ft FWD from <root> -> <root>,  451 4.5.0 From MTA() during fwd-connect (No greeting, dt: 1.014 s): id=32659-12
    Feb 29 00:34:34 websrv5 amavis[32659]: (32659-12) Blocked MTA-BLOCKED {TempFailedOpenRelay}, [127.0.0.1] <root> -> <root>, Message-ID: <[email protected]>, mail_id: fOOvrigC90ft, Hits: -3.752, size: 35270, 3482 ms
    Feb 29 00:34:34 websrv5 postfix/smtp[11738]: 9AFAD1101CD: to=<root>, relay=127.0.0.1[127.0.0.1]:10024, delay=1006, delays=1003/0.01/0/3.5, dsn=4.5.0, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 id=32659-12 - Temporary MTA failure on relaying, From MTA() during fwd-connect (No greeting, dt: 1.014 s): id=32659-12 (in reply to end of DATA command))
    From mail.error log in monitoring in ispconfig:
    Code:
    Feb 28 17:40:15 websrv5 amavis[7483]: (07483-07) (!!)TROUBLE in process_request: Error writing an SMTP response to the socket: Broken pipe at (eval 107) line 1430.
    Feb 28 17:40:17 websrv5 amavis[7484]: (07484-05) (!!)TROUBLE in process_request: Error writing an SMTP response to the socket: Broken pipe at (eval 107) line 1430.
    Feb 28 20:44:58 websrv5 dovecot: master: Error: socket() failed: Address family not supported by protocol
    Feb 28 20:44:58 websrv5 dovecot: master: Error: service(pop3-login): listen([::], 110) failed: Address family not supported by protocol
    Feb 28 20:44:58 websrv5 dovecot: master: Error: socket() failed: Address family not supported by protocol
    Feb 28 20:44:58 websrv5 dovecot: master: Error: service(pop3-login): listen([::], 995) failed: Address family not supported by protocol
    Feb 28 20:44:58 websrv5 dovecot: master: Error: socket() failed: Address family not supported by protocol
    Feb 28 20:44:58 websrv5 dovecot: master: Error: service(imap-login): listen([::], 143) failed: Address family not supported by protocol
    Feb 28 20:44:58 websrv5 dovecot: master: Error: socket() failed: Address family not supported by protocol
    Feb 28 20:44:58 websrv5 dovecot: master: Error: service(imap-login): listen([::], 993) failed: Address family not supported by protocol
    Feb 28 20:44:58 websrv5 dovecot: master: Fatal: Failed to start listeners
    Feb 28 20:50:33 websrv5 postfix/smtpd[19616]: fatal: no SASL authentication mechanisms
    Feb 28 20:56:39 websrv5 postfix/smtpd[21068]: fatal: no SASL authentication mechanisms
    Feb 28 21:02:15 websrv5 postfix/smtpd[31245]: fatal: no SASL authentication mechanisms
    then follow many, many more line that say the same as these last ones.

    Does anybody have an idea where to start looking and hopefully tackling this problem? Are the configurations of this system that will be helpful? I can post these, if you tell me which ones I should post :)
    Here is the output of postconf -n
    Code:
    alias_database = hash:/etc/aliases, hash:/var/lib/mailman/data/aliases
    alias_maps = hash:/etc/aliases, hash:/var/lib/mailman/data/aliases
    allow_percent_hack = no
    append_at_myorigin = no
    append_dot_mydomain = no
    biff = no
    body_checks = regexp:/etc/postfix/body_checks
    broken_sasl_auth_clients = yes
    compatibility_level = 2
    content_filter = amavis:[127.0.0.1]:10024
    dovecot_destination_recipient_limit = 1
    greylisting = check_policy_service inet:127.0.0.1:10023
    header_checks = regexp:/etc/postfix/header_checks
    html_directory = /usr/share/doc/postfix/html
    inet_interfaces = all
    inet_protocols = ipv4
    mailbox_size_limit = 0
    maildrop_destination_concurrency_limit = 1
    maildrop_destination_recipient_limit = 1
    message_size_limit = 0
    mime_header_checks = regexp:/etc/postfix/mime_header_checks
    mydestination = localhost, localhost.localdomain
    myhostname = my.domain.net
    mynetworks = 127.0.0.0/8 [::1]/128
    mynetworks_style = subnet
    myorigin = /etc/mailname
    nested_header_checks = regexp:/etc/postfix/nested_header_checks
    owner_request_special = no
    proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $sender_bcc_maps $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $smtpd_sender_login_maps
    readme_directory = /usr/share/doc/postfix
    receive_override_options = no_address_mappings
    recipient_delimiter = +
    relay_domains = mysql:/etc/postfix/mysql-virtual_relaydomains.cf
    relay_recipient_maps = mysql:/etc/postfix/mysql-virtual_relayrecipientmaps.cf
    relayhost = [smtp.gmail.com]:587
    sender_bcc_maps = proxy:mysql:/etc/postfix/mysql-virtual_outgoing_bcc.cf
    smtp_sasl_auth_enable = yes
    smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
    smtp_sasl_security_options = noanonymous
    smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
    smtp_tls_exclude_ciphers = RC4, aNULL
    smtp_tls_loglevel = 1
    smtp_tls_mandatory_protocols = !SSLv2, !SSLv3
    smtp_tls_protocols = !SSLv2,!SSLv3
    smtp_tls_security_level = may
    smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
    smtp_use_tls = yes
    smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
    smtpd_client_message_rate_limit = 100
    smtpd_client_restrictions = check_client_access mysql:/etc/postfix/mysql-virtual_client.cf
    smtpd_helo_required = yes
    smtpd_helo_restrictions = permit_sasl_authenticated, permit_mynetworks, check_helo_access regexp:/etc/postfix/helo_access, reject_invalid_hostname, reject_non_fqdn_hostname, reject_invalid_helo_hostname, reject_unknown_helo_hostname, check_helo_access regexp:/etc/postfix/blacklist_helo
    smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, check_recipient_access mysql:/etc/postfix/mysql-virtual_recipient.cf, check_recipient_access mysql:/etc/postfix/mysql-virtual_policy_greylist.cf
    smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination permit_mx_backup
    smtpd_restriction_classes = greylisting
    smtpd_sasl_auth_enable = yes
    smtpd_sasl_authenticated_header = yes
    smtpd_sasl_path = private/auth
    smtpd_sasl_type = dovecot
    smtpd_sender_login_maps = proxy:mysql:/etc/postfix/mysql-virtual_sender_login_maps.cf
    smtpd_sender_restrictions = check_sender_access regexp:/etc/postfix/tag_as_originating.re , permit_mynetworks, permit_sasl_authenticated, check_sender_access mysql:/etc/postfix/mysql-virtual_sender.cf, check_sender_access regexp:/etc/postfix/tag_as_foreign.re
    smtpd_tls_cert_file = /etc/postfix/smtpd.cert
    smtpd_tls_exclude_ciphers = RC4, aNULL
    smtpd_tls_key_file = /etc/postfix/smtpd.key
    smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
    smtpd_tls_protocols = !SSLv2,!SSLv3
    smtpd_tls_security_level = may
    smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
    smtpd_use_tls = yes
    swap_bangpath = no
    transport_maps = hash:/var/lib/mailman/data/transport-mailman, proxy:mysql:/etc/postfix/mysql-virtual_transports.cf
    virtual_alias_domains =
    virtual_alias_maps = hash:/var/lib/mailman/data/virtual-mailman, proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, proxy:mysql:/etc/postfix/mysql-virtual_email2email.cf
    virtual_gid_maps = mysql:/etc/postfix/mysql-virtual_gids.cf
    virtual_mailbox_base = /var/vmail
    virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf
    virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf
    virtual_transport = dovecot
    virtual_uid_maps = mysql:/etc/postfix/mysql-virtual_uids.cf
    Also worth mentioning is that I used the instructions from this site on how to use gmail to forward all mails through their smtp server. This always worked fine, untill now that is.
    Thanks
     
  2. ustoopia

    ustoopia Member

    master.cnf:

    Code:
    submission inet n       -       n       -       -       smtpd
      -o syslog_name=postfix/submission
      -o smtpd_tls_security_level=encrypt
      -o smtpd_sasl_auth_enable=yes
      -o smtpd_client_restrictions=permit_sasl_authenticated,reject
    #  -o smtpd_tls_auth_only=yes
    #  -o smtpd_reject_unlisted_recipient=no
    #  -o smtpd_client_restrictions=$mua_client_restrictions
    #  -o smtpd_helo_restrictions=$mua_helo_restrictions
    #  -o smtpd_sender_restrictions=$mua_sender_restrictions
    #  -o smtpd_recipient_restrictions=
    #  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
    #  -o milter_macro_daemon_name=ORIGINATING
    smtps     inet  n       -       y       -       -       smtpd
      -o syslog_name=postfix/smtps
      -o smtpd_tls_wrappermode=yes
      -o smtpd_sasl_auth_enable=yes
      -o smtpd_client_restrictions=permit_sasl_authenticated,reject
    #  -o smtpd_reject_unlisted_recipient=no
    #  -o smtpd_client_restrictions=$mua_client_restrictions
    #  -o smtpd_helo_restrictions=$mua_helo_restrictions
    #  -o smtpd_sender_restrictions=$mua_sender_restrictions
    #  -o smtpd_recipient_restrictions=
    #  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
    #  -o milter_macro_daemon_name=ORIGINATING
    #628       inet  n       -       y       -       -       qmqpd
    pickup    unix  n       -       y       60      1       pickup
    cleanup   unix  n       -       y       -       0       cleanup
    qmgr      unix  n       -       n       300     1       qmgr
    #qmgr     unix  n       -       n       300     1       oqmgr
    tlsmgr    unix  -       -       y       1000?   1       tlsmgr
    rewrite   unix  -       -       y       -       -       trivial-rewrite
    bounce    unix  -       -       y       -       0       bounce
    defer     unix  -       -       y       -       0       bounce
    trace     unix  -       -       y       -       0       bounce
    verify    unix  -       -       y       -       1       verify
    flush     unix  n       -       y       1000?   0       flush
    proxymap  unix  -       -       n       -       -       proxymap
    proxywrite unix -       -       n       -       1       proxymap
    smtp      unix  -       -       y       -       -       smtp
    relay     unix  -       -       y       -       -       smtp
            -o syslog_name=postfix/$service_name
    #       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
    showq     unix  n       -       y       -       -       showq
    error     unix  -       -       y       -       -       error
    retry     unix  -       -       y       -       -       error
    discard   unix  -       -       y       -       -       discard
    local     unix  -       n       n       -       -       local
    virtual   unix  -       n       n       -       -       virtual
    lmtp      unix  -       -       y       -       -       lmtp
    anvil     unix  -       -       y       -       1       anvil
    scache    unix  -       -       y       -       1       scache
    #
    # ====================================================================
    # Interfaces to non-Postfix software. Be sure to examine the manual
    # pages of the non-Postfix software to find out what options it wants.
    #
    # Many of the following services use the Postfix pipe(8) delivery
    # agent.  See the pipe(8) man page for information about ${recipient}
    # and other message envelope options.
    # ====================================================================
    #
    # maildrop. See the Postfix MAILDROP_README file for details.
    # Also specify in main.cf: maildrop_destination_recipient_limit=1
    #
    maildrop  unix  -       n       n       -       -       pipe
      flags=DRhu user=vmail argv=/usr/bin/maildrop -d vmail ${extension} ${recipient} ${user} ${nexthop} ${sender}
    #
    # ====================================================================
    #
    # Recent Cyrus versions can use the existing "lmtp" master.cf entry.
    #
    # Specify in cyrus.conf:
    #   lmtp    cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4
    #
    # Specify in main.cf one or more of the following:
    #  mailbox_transport = lmtp:inet:localhost
    #  virtual_transport = lmtp:inet:localhost
    #
    # ====================================================================
    #
    # Cyrus 2.1.5 (Amos Gouaux)
    # Also specify in main.cf: cyrus_destination_recipient_limit=1
    #
    #cyrus     unix  -       n       n       -       -       pipe
    #  user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}
    #
    # ====================================================================
    # Old example of delivery via Cyrus.
    #
    #old-cyrus unix  -       n       n       -       -       pipe
    #  flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}
    #
    # ====================================================================
    #
    # See the Postfix UUCP_README file for configuration details.
    #
    uucp      unix  -       n       n       -       -       pipe
      flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
    #
    # Other external delivery methods.
    #
    ifmail    unix  -       n       n       -       -       pipe
      flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
    bsmtp     unix  -       n       n       -       -       pipe
      flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
    scalemail-backend unix   -   n   n   -   2   pipe
      flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension}
    mailman   unix  -       n       n       -       -       pipe
      flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
      ${nexthop} ${user}
    
    dovecot   unix  -       n       n       -       -       pipe
      flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop}
    
    amavis unix - - - - 2 smtp
            -o smtp_data_done_timeout=1200
            -o smtp_send_xforward_command=yes
       -o smtp_bind_address=
       -o smtp_tls_security_level=none
       -o disable_dns_lookups=yes
    
    127.0.0.1:10025 inet n - n - - smtpd
            -o content_filter=
            -o local_recipient_maps=
            -o relay_recipient_maps=
            -o smtpd_restriction_classes=
            -o smtpd_client_restrictions=
            -o smtpd_helo_restrictions=
            -o smtpd_sender_restrictions=
            -o smtpd_recipient_restrictions=permit_mynetworks,reject
            -o mynetworks=127.0.0.0/8
            -o strict_rfc821_envelopes=yes
            -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
            -o smtp_send_xforward_command=yes
            -o disable_dns_lookups=yes
    
    
    127.0.0.1:10027 inet n - n - - smtpd
            -o content_filter=
            -o local_recipient_maps=
            -o relay_recipient_maps=
            -o smtpd_restriction_classes=
            -o smtpd_client_restrictions=
            -o smtpd_helo_restrictions=
            -o smtpd_sender_restrictions=
            -o smtpd_recipient_restrictions=permit_mynetworks,reject
            -o mynetworks=127.0.0.0/8
            -o strict_rfc821_envelopes=yes
            -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
            -o smtp_send_xforward_command=yes
       -o milter_default_action=accept
           -o milter_macro_daemon_name=ORIGINATING
            -o disable_dns_lookups=yes
    
     
  3. till

    till Super Moderator Staff Member ISPConfig Developer

    Seems as if IPv6 is not working on your server and Dovecot tries to listen on IPv6.
     
    ustoopia likes this.
  4. ustoopia

    ustoopia Member

    You nailed it!! The only thing was to enable ipv6 and now the mail is being flushed. Thanks you once again dear Till.
    Thank you very much. Have a good weekend!
     
    till likes this.

Share This Page