[Postfixbuch-users] postfix probleme

Marcel Hartmann mail at marcel-hartmann.com
So Feb 18 15:02:56 CET 2007


Hallo,

ich beobachte gerade das eine Unmenge an Connections an mein Postfix
ankommen.
Dieser läuft über MySQL-3.2 derzeit noch. Hier die MySQl Auslastung:

Abfragestatistik: Seit seinem Start wurden 1.770 Abfragen an diesen
MySQL-Server gesandt.
 Insgesamt  	 ø pro Stunde  	 ø pro Minute  	 ø pro Sekunde 
 1.770  	 22.676,16  	 377,94  	 6,30

Etwa sowas kommt dabei raus da die Load über 10 geht derzeit. load average:
12.18, 11.20, 7.41 !?

Feb 18 14:43:15 localhost postfix/smtpd[13918]: connect from
cicero1.cybercity.dk[212.242.40.4]
Feb 18 14:43:16 localhost postfix/smtpd[13922]: connect from
mailrelay.emel.cl[200.27.193.229]
Feb 18 14:43:17 localhost postfix/smtpd[13926]: connect from
ironportin-lyk-1.it.gu.se[130.241.151.96]
Feb 18 14:43:18 localhost postfix/smtpd[13927]: connect from
n3.grp.bbt.yahoo.co.jp[202.93.86.162]
Feb 18 14:43:26 localhost postfix/smtpd[13937]: connect from
unknown[72.9.234.146]
Feb 18 14:43:26 localhost postfix/smtpd[13934]: connect from
smtp3.winston.com[38.117.178.3]
Feb 18 14:43:26 localhost postfix/smtpd[13930]: connect from
hc-gw5.hitachi-cable.co.jp[219.124.60.60]
Feb 18 14:43:26 localhost postfix/smtpd[13935]: connect from
numedics.com[216.216.193.50]
Feb 18 14:43:26 localhost postfix/smtpd[13939]: connect from
94.f7.1343.static.theplanet.com[67.19.247.148]
Feb 18 14:43:26 localhost postfix/smtpd[13936]: warning: smtpd_peer_init:
64.49.92.163: hostname mail.92.49.64.in-addr.arpa verification
failed: Name or service not known
Feb 18 14:43:26 localhost postfix/smtpd[13936]: connect from
unknown[64.49.92.163]
Feb 18 14:43:26 localhost postfix/smtpd[13938]: connect from
hceusa.com[12.47.12.3]
Feb 18 14:43:26 localhost postfix/smtpd[13933]: warning: smtpd_peer_init:
209.85.21.162: hostname ev1s-209-85-21-162.ev1servers.net verif
ication failed: Name or service not known
Feb 18 14:43:26 localhost postfix/smtpd[13933]: connect from
unknown[209.85.21.162]
Feb 18 14:43:29 localhost postfix/smtpd[13957]: connect from
lb1.mail.stabletransit.com[64.49.241.20]
Feb 18 14:43:30 localhost postfix/smtpd[13960]: connect from
spur.electric.net[216.129.90.20]
Feb 18 14:43:31 localhost postfix/smtpd[13961]: connect from
unknown[221.214.4.148]
Feb 18 14:43:31 localhost postfix/smtpd[13964]: connect from
mail.wrightplumbing.com[216.85.0.190]
Sollte ich die Anzahl der Prozesse in der master.cf mal erhöhen?

das geht ellenlang so weiter!

Und das kommt dabei raus:

Feb 18 14:45:34 localhost postfix/master[14238]: warning: process
/usr/libexec/postfix/trivial-rewrite pid 14301 exit status 1
Feb 18 14:45:34 localhost postfix/master[14238]: warning:
/usr/libexec/postfix/trivial-rewrite: bad command startup -- throttling
Feb 18 14:45:34 localhost postfix/smtpd[14244]: warning: premature
end-of-input on private/rewrite socket while reading input attribute n
ame
Feb 18 14:45:34 localhost postfix/smtpd[14244]: warning: problem talking to
service rewrite: Success
Feb 18 14:45:34 localhost postfix/smtpd[14246]: warning: premature
end-of-input on private/rewrite socket while reading input attribute n
ame
Feb 18 14:45:34 localhost postfix/smtpd[14246]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14258]: warning: premature
end-of-input on private/rewrite socket while reading input attribute n
ame
Feb 18 14:45:34 localhost postfix/smtpd[14258]: warning: problem talking to
service rewrite: Success
Feb 18 14:45:34 localhost postfix/smtpd[14261]: warning: premature
end-of-input on private/rewrite socket while reading input attribute n
ame
Feb 18 14:45:34 localhost postfix/smtpd[14261]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14262]: warning: premature
end-of-input on private/rewrite socket while reading input attribute n
ame
Feb 18 14:45:34 localhost postfix/smtpd[14262]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14260]: warning: premature
end-of-input on private/rewrite socket while reading input attribute n
ame
Feb 18 14:45:34 localhost postfix/smtpd[14260]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14259]: warning: premature
end-of-input on private/rewrite socket while reading input attribute n
ame
Feb 18 14:45:34 localhost postfix/smtpd[14259]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14264]: warning: premature
end-of-input on private/rewrite socket while reading input attribute n
ame
Feb 18 14:45:34 localhost postfix/smtpd[14264]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14263]: warning: premature
end-of-input on private/rewrite socket while reading input attribute n
ame
Feb 18 14:45:34 localhost postfix/smtpd[14266]: warning: premature
end-of-input on private/rewrite socket while reading input attribute n
ame
Feb 18 14:45:34 localhost postfix/smtpd[14267]: warning: premature
end-of-input on private/rewrite socket while reading input attribute n
ame
Feb 18 14:45:34 localhost postfix/smtpd[14268]: warning: premature
end-of-input on private/rewrite socket while reading input attribute n
ame
Feb 18 14:45:34 localhost postfix/smtpd[14241]: warning: premature
end-of-input on private/rewrite socket while reading input attribute n
ame
Feb 18 14:45:34 localhost postfix/smtpd[14269]: warning: premature
end-of-input on private/rewrite socket while reading input attribute n
ame
Feb 18 14:45:34 localhost postfix/smtpd[14271]: warning: premature
end-of-input on private/rewrite socket while reading input attribute n
ame
Feb 18 14:45:34 localhost postfix/smtpd[14272]: warning: premature
end-of-input on private/rewrite socket while reading input attribute n
ame
Feb 18 14:45:34 localhost postfix/smtpd[14270]: warning: premature
end-of-input on private/rewrite socket while reading input attribute n
ame

und weiter...

Feb 18 14:45:34 localhost postfix/smtpd[14263]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14266]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14267]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14268]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14241]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14269]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14271]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14272]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14270]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14275]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14278]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14279]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14280]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14281]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14287]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14288]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14289]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14290]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14291]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14292]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14293]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14295]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14294]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14296]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14297]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14300]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14251]: warning: problem talking to
service rewrite: Success
Feb 18 14:45:34 localhost postfix/smtpd[14256]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/smtpd[14254]: warning: problem talking to
service rewrite: Success
Feb 18 14:45:34 localhost postfix/smtpd[14248]: warning: problem talking to
service rewrite: Connection reset by peer
Feb 18 14:45:34 localhost postfix/master[14238]: warning: process
/usr/libexec/postfix/trivial-rewrite pid 14302 exit status 1
Feb 18 14:45:34 localhost postfix/master[14238]: warning: process
/usr/libexec/postfix/trivial-rewrite pid 14303 exit status 1

und Ellen land so weiter!

Ich vermute das dort gerade eine SPAM Welle eingeht bzw. wieder eine dieser
unzustellbaren Mails von irgend einem SPAMMER oder sowas.

Mir wurde zwar hier mal gesagt das Unzustellbare Mails:

Feb 18 14:43:32 localhost postfix/smtpd[13939]: NOQUEUE: reject: RCPT from
94.f7.1343.static.theplanet.com[67.19.247.148]: 554 <Antoninus
'sChelsea at corestyle.net>: Recipient address rejected: NO APOSTROPH PLEASE!;
from=<postmaster at evilemail.com> to=<Antoninus'sChelsea at corest
yle.net> proto=SMTP helo=<evilemail.com>

nicht stören und fein geloggt gehören, aber ich habe am Tag ca. 30.000
Zustellversuche die abgewiesen werden. Diese muss meine Server aber
verarbeiten können, aus diesem Grund noch eine frage, wie man Hosts die
Mails an nicht existente Adressen wenigstens für ca.60 Minuten nicht
conecten lassen kann. Problematisch wird’s nur, wenn dort reale IPs gespooft
werden denke ich.

Irgendwie gerät mir das langsam aus den Fingern wie ich gerade im log sehe.

Hilfe, was kann ich tun? Sollte ich die Prozesse hochdrehen die postfix
startet? Steht derzeit
alles auf standard Postfix Installation.

master.cf:

smtp      inet  n       -       n       -       -       smtpd
smtps     inet  n       -       n       -       -       smtpd
  -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
#submission   inet    n       -       n       -       -       smtpd
#  -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes -o
smtpd_etrn_restrictions=reject
#628      inet  n       -       n       -       -       qmqpd
pickup    fifo  n       -       n       60      1       pickup
cleanup   unix  n       -       n       -       0       cleanup
qmgr      fifo  n       -       n       300     1       qmgr
#qmgr     fifo  n       -       n       300     1       oqmgr
#tlsmgr   fifo  -       -       n       300     1       tlsmgr
rewrite   unix  -       -       n       -       -       trivial-rewrite
bounce    unix  -       -       n       -       0       bounce
defer     unix  -       -       n       -       0       bounce
trace     unix  -       -       n       -       0       bounce
verify    unix  -       -       n       -       1       verify
flush     unix  n       -       n       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
smtp      unix  -       -       n       -       -       smtp
relay     unix  -       -       n       -       -       smtp
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq     unix  n       -       n       -       -       showq
error     unix  -       -       n       -       -       error
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       n       -       -       lmtp
anvil     unix  -       -       n       -       1       anvil

Gruß

Marcel






Mehr Informationen über die Mailingliste Postfixbuch-users