[Postfixbuch-users] queue file write error

Oliver Meißner-Knippschild lists.o at la-familia-grande.de
Di Jun 13 15:54:37 CEST 2006


Hallo Liste,

ich habe ein Problem mit der
Postfix/Amavis/Fetchmail/LDAP/Courier-Konfiguration:

Mails lasse ich von den externen Konten via fetchmail ins lokale
Postfix einfliefern. Das Abholen klappt soweit auch wirklich gut,
allerdings gibt es immerwieder Probleme mit der Wieder-Einlieferung
durch Amavis. (Vermute ich mal, s.u.)

Ich bekomme mehrmals am Tag Mails vom Mailer-Daemon:
[...]
 In:  MAIL FROM:<owner-postfix-users at postfix.org>
 Out: 250 Ok
 In:  RCPT TO:<lists_o_at_lfg_de at olly-eva.lan>
 Out: 250 Ok
 In:  DATA
 Out: 354 End data with <CR><LF>.<CR><LF>
 Out: 451 Error: queue file write error
[...]

Etwa zur gleichen Zeit:

anubis:/etc/postfix # mailq
-Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
539BA4804B40     2189 Tue Jun 13 15:20:29
owner-postfix-users at postfix.org (host 127.0.0.1[127.0.0.1] said: 451
4.6.0 Failed, id=24916-02, from MTA([127.0.0.1]:10025): 451 Error:
queue file write error (in reply to end of DATA command))
lists_o_at_lfg_de at olly-eva.lan

-- 2 Kbytes in 1 Request.
anubis:/etc/postfix #

Die Partition der Spool-Verzeichnisse ist mit XFS formatiert, genug
Platz ist auch da:
anubis:/etc/postfix # mount | grep hd
/dev/hda2 on / type xfs (rw)
/dev/hdb1 on /home type xfs (rw)
/dev/hde2 on /home/shares/daten/ablage type ext3 (rw,acl,user_xattr)
/dev/hde1 on /home/shares/daten/backup type xfs (rw)
/dev/hde3 on /home/shares/daten/iso type ext3 (rw,acl,user_xattr)
/dev/hdg2 on /home/shares/daten/iso2 type xfs (rw)

anubis:/etc/postfix # df -h /
Dateisystem          Größe Benut  Verf Ben% Eingehängt auf
/dev/hda2              24G  2,3G   22G  10% /

Festplatten-Probleme kann ich auch ausschließen, zumindest steht davon
weder was in den Logs noch in der Ausgabe von dmesg; andere Fehler die
daraufhin deuten sind mir auch nicht aufgefallen.

Hier der Auszug aus dem Mail-Log zur fraglichen Zeit:
Jun 13 15:20:19 anubis fetchmail[23718]: awakened at Tue Jun 13
15:20:19 2006 Jun 13 15:20:29 anubis fetchmail[23718]: 2 messages for
LFG0001_06 at mail1.comlab-computer.de (4860 octets). Jun 13 15:20:29
anubis fetchmail[23718]: reading message
LFG0001_06 at mail1.comlab-computer.de:1 of 2 (1824 octets) Jun 13
15:20:29 anubis postfix/smtpd[25092]: connect from localhost[127.0.0.1]
Jun 13 15:20:29 anubis postfix/smtpd[25092]: 539BA4804B40:
client=localhost[127.0.0.1] Jun 13 15:20:29 anubis postfix/cleanup
[25086]: 539BA4804B40:
message-id=<20060613131616.641FFBC093 at spike.porcupine.org> Jun 13
15:20:29 anubis fetchmail[23718]:  flushed Jun 13 15:20:29 anubis
postfix/qmgr[25069]: 539BA4804B40:
from=<owner-postfix-users at postfix.org>, size=2189, nrcpt=1 (queue
active) Jun 13 15:20:29 anubis fetchmail[23718]: reading message
LFG0001_06 at mail1.comlab-computer.de:2 of 2 (3036 octets) Jun 13
15:20:29 anubis amavis[24916]: (24916-02) WARN: all primary virus
scanners failed, considering backups Jun 13 15:20:38 anubis
postfix/smtpd[25092]: 5760C4804B43: client=localhost[127.0.0.1] Jun 13
15:20:38 anubis postfix/smtpd[25084]: connect from localhost[127.0.0.1]
Jun 13 15:20:38 anubis postfix/cleanup[25086]: 5760C4804B43:
message-id=<200606131517.14316.suse.mail.uw at arcor.de> Jun 13 15:20:38
anubis fetchmail[23718]:  flushed Jun 13 15:20:38 anubis postfix/qmgr
[25069]: 5760C4804B43: from=<suse.mail.uw at arcor.de>, size=3402, nrcpt=1
(queue active) Jun 13 15:20:38 anubis postfix/smtpd[25092]: disconnect
from localhost[127.0.0.1] Jun 13 15:20:38 anubis fetchmail[23718]:
sleeping at Tue Jun 13 15:20:38 2006 Jun 13 15:20:38 anubis
postfix/smtpd[25084]: 8555E4804B44: client=localhost[127.0.0.1] Jun 13
15:20:38 anubis amavis[24914]: (24914-03) WARN: all primary virus
scanners failed, considering backups Jun 13 15:20:47 anubis
postfix/cleanup[25086]: warning: dict_ldap_lookup: Search error -5:
Timed out Jun 13 15:20:47 anubis postfix/cleanup[25086]: warning:
8555E4804B44: virtual_alias_maps map lookup problem for
lists_o_at_lfg_de at olly-eva.lan Jun 13 15:20:47 anubis amavis[24916]:
(24916-02) FWD via SMTP: <owner-postfix-users at postfix.org> ->
<lists_o_at_lfg_de at olly-eva.lan>, 451 4.6.0 Failed, id=24916-02, from
MTA([127.0.0.1]:10025): 451 Error: queue file write error Jun 13
15:20:47 anubis amavis[24916]: (24916-02) Blocked CLEAN,
[168.100.189.2] <owner-postfix-users at postfix.org> ->
<lists_o_at_lfg_de at olly-eva.lan>, Message-ID:
<20060613131616.641FFBC093 at spike.porcupine.org>, mail_id: xCTFzRBBMZRS,
Hits: 0-3, 18409 ms Jun 13 15:20:47 anubis postfix/smtp[25080]:
539BA4804B40: to=<lists_o_at_lfg_de at olly-eva.lan>, relay=127.0.0.1
[127.0.0.1], delay=18, status=deferred (host 127.0.0.1[127.0.0.1] said:
451 4.6.0 Failed, id=24916-02, from MTA([127.0.0.1]:10025): 451 Error:
queue file write error (in reply to end of DATA command)) Jun 13
15:20:48 anubis postfix/smtpd[25101]: connect from localhost[127.0.0.1]
Jun 13 15:20:48 anubis postfix/cleanup[25086]: B5CDE4804B44:
message-id=<20060613132047.B5CDE4804B44 at ollym.homeip.net> Jun 13
15:20:48 anubis postfix/qmgr[25069]: B5CDE4804B44:
from=<double-bounce at ollym.homeip.net>, size=855, nrcpt=1 (queue active)
Jun 13 15:20:48 anubis postfix/smtpd[25084]: disconnect from localhost
[127.0.0.1] Jun 13 15:20:48 anubis postfix/smtpd[25101]: 255304804B45:
client=localhost[127.0.0.1] Jun 13 15:20:48 anubis postfix/pipe[25102]:
B5CDE4804B44: to=<oliver at olly-eva.lan>, orig_to=<postmaster>,
relay=maildrop, delay=1, status=sent (olly-eva.lan) Jun 13 15:20:48
anubis postfix/qmgr[25069]: B5CDE4804B44: removed Jun 13 15:20:48
anubis postfix/cleanup[25086]: 255304804B45:
message-id=<200606131517.14316.suse.mail.uw at arcor.de> Jun 13 15:20:48
anubis postfix/qmgr[25069]: 255304804B45: from=<suse.mail.uw at arcor.de>,
size=3865, nrcpt=1 (queue active) Jun 13 15:20:48 anubis postfix/smtpd
[25101]: disconnect from localhost[127.0.0.1] Jun 13 15:20:48 anubis
amavis[24914]: (24914-03) Passed CLEAN, [195.135.221.131]
<suse.mail.uw at arcor.de> -> <lists_o_at_lfg_de at olly-eva.lan>,
Message-ID: <200606131517.14316.suse.mail.uw at arcor.de>, mail_id:
hiF4dSEPIf8X, Hits: 0.025, 9844 ms Jun 13 15:20:48 anubis postfix/smtp
[25095]: 5760C4804B43: to=<lists_o_at_lfg_de at olly-eva.lan>,
relay=127.0.0.1[127.0.0.1], delay=10, status=sent (250 2.6.0 Ok,
id=24914-03, from MTA([127.0.0.1]:10025): 250 Ok: queued as
255304804B45) Jun 13 15:20:48 anubis postfix/qmgr[25069]: 5760C4804B43:
removed Jun 13 15:20:48 anubis postfix/pipe[25102]: 255304804B45:
to=<lists_o_at_lfg_de at olly-eva.lan>, relay=maildrop, delay=0,
status=sent (olly-eva.lan) Jun 13 15:20:48 anubis postfix/qmgr[25069]:
255304804B45: removed


anubis:/etc/postfix # postconf -n
alias_maps = hash:/etc/aliases
biff = no
canonical_maps = hash:/etc/postfix/canonical
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = amavisd-new:[127.0.0.1]:10024
daemon_directory = /usr/lib/postfix
debug_peer_level = 2
defer_transports =
disable_dns_lookups = no
disable_mime_output_conversion = no
fallback_transport = cyrus
html_directory = /usr/share/doc/packages/postfix/html
inet_interfaces = all
inet_protocols = all
local_recipient_maps = ldap:/etc/postfix/ldap/local_recipients.cf
local_transport = maildrop
mail_owner = postfix
mail_spool_directory = /var/mail
mailbox_size_limit = 0
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains =
masquerade_exceptions = root
message_size_limit = 10240000
mydestination = $myhostname localhost.$mydomain ollym.homeip.net
anubis.olly-eva.lan olly-eva.lan mydomain = olly-eva.lan
myhostname = ollym.homeip.net
mynetworks = 192.168.80.0/24 127.0.0.0/8
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/packages/postfix/README_FILES
recipient_delimiter = +
relayhost =
relocated_maps = hash:/etc/postfix/relocated
sample_directory = /usr/share/doc/packages/postfix/samples
sender_canonical_maps = hash:/etc/postfix/sender_canonical
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
smtp_sasl_auth_enable = no
smtp_use_tls = no
smtpd_client_restrictions =
smtpd_helo_required = no
smtpd_helo_restrictions =
smtpd_recipient_restrictions =
permit_mynetworks,reject_unauth_destination smtpd_sasl_auth_enable = no
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_use_tls = no
strict_8bitmime = no
strict_rfc821_envelopes = no
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550
virtual_alias_maps =
 ldap:/etc/postfix/ldap/virtual_aliases.cf,
 ldap:/etc/postfix/ldap/mailgroups.cf virtual_transport = maildrop 

Und die master.cf:
anubis:/etc/postfix # cat master.cf
#
# Postfix master process configuration file.  For details on the format
# of the file, see the Postfix master(5) manual page.
#
# ==========================================================================
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
# ==========================================================================
smtp      inet  n       -       n       -       -       smtpd
#submission inet n      -       n       -       -       smtpd
#       -o smtpd_etrn_restrictions=reject
#       -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#smtps    inet  n       -       n       -       -       smtpd -o
#smtpd_tls_wrappermode=yes
#  -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
#submission   inet    n       -       n       -       -       smtpd
#  -o smtpd_etrn_restrictions=reject
#  -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes
#628      inet  n       -       n       -       -       qmqpd
pickup    fifo  n       -       n       60      1       pickup
cleanup   unix  n       -       n       -       0       cleanup
qmgr      fifo  n       -       n       300     1       qmgr
#qmgr     fifo  n       -       n       300     1       oqmgr
#tlsmgr    unix  -       -       n       1000?   1       tlsmgr
rewrite   unix  -       -       n       -       -       trivial-rewrite
bounce    unix  -       -       n       -       0       bounce
defer     unix  -       -       n       -       0       bounce
trace     unix  -       -       n       -       0       bounce
verify    unix  -       -       n       -       1       verify
flush     unix  n       -       n       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
smtp      unix  -       -       n       -       -       smtp
# When relaying mail as backup MX, disable fallback_relay to avoid MX
# loops
relay     unix  -       -       n       -       -       smtp
        -o fallback_relay=
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq     unix  n       -       n       -       -       showq
error     unix  -       -       n       -       -       error
discard   unix  -       -       n       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       n       -       -       lmtp
anvil     unix  -       -       n       -       1       anvil
localhost:10025 inet    n       -       n       -       3       smtpd
 -o content_filter=
 -o local_recipient_maps=
 -o relay_recipient_maps=
 -o smtpd_restriction_classes=
 -o smtpd_client_restrictions=
 -o smtpd_helo_restrictions=
 -o smtpd_sender_restrictions=
 -o smtpd_recipient_restrictions=permit_mynetworks,reject
 -o mynetworks=127.0.0.0/8
scache    unix  -       -       n       -       1       scache
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent.  See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
amavisd-new unix -      -       n       -       2       smtp
 -o smtp_data-done_timeout=1200s
 -o disable_dns_lookups=yes
maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${user}
#cyrus    unix  -       n       n       -       -       pipe
#  user=cyrus argv=/usr/lib/cyrus/bin/deliver -e -r ${sender} -m
# ${extension} ${user}
uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail
($recipient)
#ifmail    unix  -       n       n       -       -       pipe
#  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop
$recipient
#procmail  unix  -       n       n       -       -       pipe
#  flags=R user=nobody argv=/usr/bin/procmail -t -m /etc/procmailrc
# ${sender} ${recipient}

So... was die LDAP-Konfiguration angeht:
anubis:/etc/postfix/ldap # cat local_recipients.cf
bind = no
server_host = ldap://localhost:389
search_base = dc=olly-eva,dc=lan
query_filter = (|(mail=%s)(uid=%u))
result_attribute = uid

anubis:/etc/postfix/ldap # cat mailgroups.cf
bind = no
server_host = ldap://localhost:389
search_base = dc=olly-eva,dc=lan
query_filter = (mail=%s)
special_result_attribute=member
result_attribute = uid

anubis:/etc/postfix/ldap # cat virtual_aliases.cf
bind = no
1erver_host = ldap://127.0.0.1:389
search_base = dc=olly-eva,dc=lan
query_filter = (mail=%s)
result_attribute = maildrop

Der Vollständigkeit halber noch die Amavis-Konfig:

use strict;
$max_servers = 4;
common) $daemon_user = 'vscan';
$daemon_group = 'vscan';
$mydomain = 'olly-eva.lan';
$MYHOME = '/var/spool/amavis';
$TEMPBASE = "$MYHOME/tmp";
manually $ENV{TMPDIR} = $TEMPBASE;
$QUARANTINEDIR = '/var/spool/amavis/virusmails';
@local_domains_maps = ( [".$mydomain"] );
$log_level = 0;
$log_recip_templ = undef;
$DO_SYSLOG = 1;
$SYSLOG_LEVEL = 'mail.debug';
$enable_db = 1;
$enable_global_cache = 1;
$inet_socket_port = 10024;   
$unix_socketname = "$MYHOME/amavisd.sock";  
$sa_tag_level_deflt  = -20.0; 
$sa_kill_level_deflt = 6.31; 
$sa_dsn_cutoff_level = 9;    
# $sa_quarantine_cutoff_level = 20; # spam level beyond which
# quarantine is off
$sa_mail_body_size_limit = 200*1024; 
$sa_local_tests_only = 1;
$sa_auto_whitelist = 1;
$virus_admin               = "virusalert\@$mydomain";
$mailfrom_notify_admin     = "virusalert\@$mydomain";  
sender $mailfrom_notify_recip     = "virusalert\@$mydomain";  
$mailfrom_notify_spamadmin = "spam.police\@$mydomain"; 
@addr_extension_virus_maps      = ('virus');

Achso... das Ganze läuft auf einer SuSE 10.0.
Postfix-Version: 2.2.5

Bis dahin erstmal... Evtl. hat jemand eine Idee???

Gruß, Olly
-- 
PM bitte an public.o at la-familia-grande.de




Mehr Informationen über die Mailingliste Postfixbuch-users