small problem with lmtp / receiving one warning email per hour

Discussion in 'Installation/Configuration' started by ysbrand, Jun 30, 2025.

  1. ysbrand

    ysbrand New Member

    I have a Debian web/mail server with ISPCONFIG3. Has been running for years without any problem, until recently when I changed a setting because of the amount of spam I received. I am not sure exactly what setting I changed, but now I am getting about 20 emails per day with the following content:

    Code:
    You are getting this message because an error was detected while delivering your email.
    For the domain: https://mydomain.tld
    The log to paste when you open a support issue:
    5.7.1 Spam message rejected
    In the mail.log file I see this:

    Code:
    Jun 29 19:32:50 mail postfix/submission/smtpd[2461169]: connect from mail.mydomain.tld[111.222.33.44]
    Jun 29 19:32:50 mail postfix/submission/smtpd[2461169]: 3F5642ECCD3B: client=mail.mydomain.tld[111.222.33.44], sasl_method=LOGIN, [email protected]
    Jun 29 19:32:50 mail postfix/cleanup[2461173]: 3F5642ECCD3B: [email protected]
    Jun 29 19:32:51 mail postfix/cleanup[2461173]: 3F5642ECCD3B: milter-reject: END-OF-MESSAGE from mail.mydomain.tld[111.222.33.44]: 5.7.1 Spam message rejected; [email protected] [email protected] proto=ESMTP helo=<mydomain.tld>
    Jun 29 19:32:51 mail postfix/submission/smtpd[2461169]: disconnect from mail.mydomain.tld[111.222.33.44] ehlo=2 starttls=1 auth=1 mail=1 rcpt=2 data=0/1 quit=1 commands=8/9
    Jun 29 19:32:51 mail postfix/pickup[2460532]: 0E33F2ECCD84: uid=5005 [email protected]
    Jun 29 19:32:51 mail postfix/cleanup[2461173]: 0E33F2ECCD84: [email protected]
    Jun 29 19:32:51 mail postfix/qmgr[2278646]: 0E33F2ECCD84: [email protected], size=570, nrcpt=1 (queue active)
    Jun 29 19:32:51 mail dovecot: lmtp(2461181): Connect from local
    Jun 29 19:32:51 mail dovecot: lmtp([email protected])<2461181><yuweDMN4YWj9jSUAqg7qrw>: sieve: [email protected]: stored mail into mailbox 'INBOX'
    Jun 29 19:32:51 mail postfix/lmtp[2461180]: 0E33F2ECCD84: [email protected], relay=mail.lithouse.eu[private/dovecot-lmtp], delay=0.18, delays=0.14/0.01/0.01/0.03, dsn=2.0.0, status=sent (250 2.0.0 [email protected] yuweDMN4YWj9jSUAqg7qrw Saved)
    Jun 29 19:32:51 mail dovecot: lmtp(2461181): Disconnect from local: Client has quit the connection (state=READY)
    Jun 29 19:32:51 mail postfix/qmgr[2278646]: 0E33F2ECCD84: removed
    mail.info shows the exact same loglines, mail.warn shows nothing. uname -a gives:

    Code:
    5.10.0-21-amd64 #1 SMP Debian 5.10.162-1 (2023-01-21)
    For the life of me I can't figure out what is happening here, no doubt because of my inexperience with mail servers and sieve and all that.

    Anyone that can help me understand what is happening here, and how I can fix it?
     
  2. pyte

    pyte Well-Known Member HowtoForge Supporter

    Well the client "mail.mydomain.tld[111.222.33.44]" logins in with "[email protected]" and trys to send a message to "[email protected]", but this message gets rejected by your spamfilter(i assume rspamd) with "5.7.1 Spam message rejected".

    You should check what /var/log/rspamd/rspamd.log logs for this message. You can grep that by msgid "grep 3F5642ECCD3B /var/log/rspamd/rspamd.log" (This post is a week old, so you won't find that extact ID in this log anymore)
     

Share This Page