1

Topic: hostname bace1566.virtua.com.br does not resolve to address 186.206.21

==== Required information ====
- iRedMail version: iRedMail-0.8.6
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Linux/BSD distribution name and version: Ubuntu 13.10 (GNU/Linux 3.12.6-x86_64-linode36 x86_64)
- Related log if you're reporting an issue:

Not send a email more sad

Feb  8 11:59:06 vps-trilha postfix/smtpd[3856]: warning: hostname bace1566.virtua.com.br does not resolve to address 186.206.21.102: Name or service not known
Feb  8 11:59:06 vps-trilha postfix/smtpd[3856]: connect from unknown[186.206.21.102]
Feb  8 11:59:07 vps-trilha postfix/smtpd[3859]: connect from calc41.calculoonline.in[76.164.221.41]
Feb  8 11:59:07 vps-trilha postfix/smtpd[3859]: C210F1AD9D: client=calc41.calculoonline.in[76.164.221.41]
Feb  8 11:59:07 vps-trilha postfix/cleanup[3869]: C210F1AD9D: message-id=<c1faaee5d6dfa9b7e74f76c2e69d7232@calculoonline.in>
Feb  8 11:59:07 vps-trilha postfix/qmgr[3785]: C210F1AD9D: from=<retorno@calculoonline.in>, size=8210, nrcpt=1 (queue active)
Feb  8 11:59:07 vps-trilha postfix/smtp[3875]: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused
Feb  8 11:59:07 vps-trilha postfix/smtp[3875]: C210F1AD9D: to=<marco@ferrarailhabela.com.br>, relay=none, delay=0.23, delays=0.21/0.02/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)
Feb  8 11:59:08 vps-trilha postfix/smtpd[3859]: disconnect from calc41.calculoonline.in[76.164.221.41]
Feb  8 11:59:08 vps-trilha postfix/smtpd[3856]: BC28B1AE26: client=unknown[186.206.21.102], sasl_method=LOGIN, sasl_username=marketing@trilhadobrasil.com.br
Feb  8 11:59:09 vps-trilha postfix/cleanup[3869]: BC28B1AE26: message-id=<005e01cf24c5$2fff4710$8ffdd530$@com.br>
Feb  8 11:59:09 vps-trilha postfix/qmgr[3785]: BC28B1AE26: from=<marketing@trilhadobrasil.com.br>, size=3185, nrcpt=1 (queue active)
Feb  8 11:59:09 vps-trilha postfix/smtp[3875]: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused
Feb  8 11:59:09 vps-trilha postfix/smtp[3875]: BC28B1AE26: to=<dore09@gmail.com>, relay=none, delay=0.74, delays=0.74/0/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)
Feb  8 11:59:12 vps-trilha postfix/smtpd[3856]: disconnect from unknown[186.206.21.102]




Feb  8 11:59:28 vps-trilha postfix/smtpd[3859]: connect from mail-ve0-f180.google.com[209.85.128.180]
Feb  8 11:59:28 vps-trilha postfix/smtpd[3859]: BEA271AE28: client=mail-ve0-f180.google.com[209.85.128.180]
Feb  8 11:59:28 vps-trilha postfix/cleanup[3869]: BEA271AE28: message-id=<CAEgsWP1EBv6Hn+JnZjikvThKvkDjEMdAfnTojxyMN0Sfkd9eTA@mail.gmail.com>
Feb  8 11:59:28 vps-trilha postfix/qmgr[3785]: BEA271AE28: from=<dore09@gmail.com>, size=2457, nrcpt=1 (queue active)
Feb  8 11:59:28 vps-trilha postfix/smtp[3875]: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused
Feb  8 11:59:28 vps-trilha postfix/smtp[3875]: BEA271AE28: to=<marketing@trilhadobrasil.com.br>, relay=none, delay=0.16, delays=0.16/0/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)
Feb  8 11:59:28 vps-trilha postfix/smtpd[3859]: disconnect from mail-ve0-f180.google.com[209.85.128.180]

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: hostname bace1566.virtua.com.br does not resolve to address 186.206.21

Your amavis service is not running. Try to restart it by:

service amavis restart

If it still doesn't work post here relevant lines from /var/log/syslog and/or /var/log/mail.log

Btw. the notice about xxx not resolving to yyy means, someone has badly set DNS records, it's nothing special or important.

3

Re: hostname bace1566.virtua.com.br does not resolve to address 186.206.21

camel1cz wrote:

Your amavis service is not running. Try to restart it by:

service amavis restart

If it still doesn't work post here relevant lines from /var/log/syslog and/or /var/log/mail.log

Btw. the notice about xxx not resolving to yyy means, someone has badly set DNS records, it's nothing special or important.


I restarted the service and have it in mail.log:

Feb  9 01:03:26 vps-trilha postfix/qmgr[3785]: CD8481ADCB: from=<zimbra@vps-trilha.tosystems.net>, size=633, nrcpt=1 (queue active)
Feb  9 01:03:26 vps-trilha postfix/qmgr[3785]: 52D811ADD3: from=<>, size=2626, nrcpt=1 (queue active)
Feb  9 01:03:26 vps-trilha postfix/qmgr[3785]: 52BAC1ADC9: from=<>, size=2626, nrcpt=1 (queue active)
Feb  9 01:03:26 vps-trilha postfix/qmgr[3785]: 510901ADBE: from=<>, size=2626, nrcpt=1 (queue active)
Feb  9 01:03:26 vps-trilha postfix/local[15067]: 52D811ADD3: to=<zimbra@vps-trilha.tosystems.net>, relay=local, delay=1800, delays=1800/0.03/0/0.14, dsn=4.3.0, status=deferred (temporary failure)
Feb  9 01:03:26 vps-trilha postfix/local[15068]: 52BAC1ADC9: to=<zimbra@vps-trilha.tosystems.net>, relay=local, delay=1800, delays=1800/0.02/0/0.13, dsn=4.3.0, status=deferred (temporary failure)
Feb  9 01:03:26 vps-trilha postfix/local[15067]: 510901ADBE: to=<zimbra@vps-trilha.tosystems.net>, relay=local, delay=1800, delays=1800/0.15/0/0.03, dsn=4.3.0, status=deferred (temporary failure)
Feb  9 01:03:28 vps-trilha amavis[15032]: (15032-01) (!)ClamAV-clamd: Can't connect to UNIX socket /tmp/clamd.socket: Connection refused, retrying (2)
Feb  9 01:03:34 vps-trilha amavis[15032]: (15032-01) (!)ClamAV-clamd av-scanner FAILED: run_av error: Too many retries to talk to /tmp/clamd.socket (Can't connect to UNIX socket /tmp/clamd.socket: Connection refused) at (eval 102) line 375.\n
Feb  9 01:03:34 vps-trilha amavis[15032]: (15032-01) (!!)WARN: all primary virus scanners failed, considering backups
Feb  9 01:03:46 vps-trilha postfix/smtpd[15077]: connect from localhost.localdomain[127.0.0.1]
Feb  9 01:03:46 vps-trilha postfix/smtpd[15077]: D43141ADF7: client=localhost.localdomain[127.0.0.1]
Feb  9 01:03:46 vps-trilha postfix/cleanup[15083]: D43141ADF7: message-id=<20140209004501.CD8481ADCB@vps-trilha.tosystems.net>
Feb  9 01:03:47 vps-trilha postfix/qmgr[3785]: D43141ADF7: from=<zimbra@vps-trilha.tosystems.net>, size=1147, nrcpt=1 (queue active)
Feb  9 01:03:47 vps-trilha postfix/smtpd[15077]: disconnect from localhost.localdomain[127.0.0.1]
Feb  9 01:03:47 vps-trilha amavis[15032]: (15032-01) Passed CLEAN, MYUSERS <zimbra@vps-trilha.tosystems.net> -> <zimbra@vps-trilha.tosystems.net>, Message-ID: <20140209004501.CD8481ADCB@vps-trilha.tosystems.net>, mail_id: orf-XeHjTuJ5, Hits: -0.001, size: 633, queued_as: D43141ADF7, 21287 ms
Feb  9 01:03:47 vps-trilha postfix/smtp[15063]: CD8481ADCB: to=<zimbra@vps-trilha.tosystems.net>, relay=127.0.0.1[127.0.0.1]:10024, delay=1126, delays=1104/0.02/0.09/22, dsn=2.0.0, status=sent (250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as D43141ADF7)
Feb  9 01:03:47 vps-trilha postfix/qmgr[3785]: CD8481ADCB: removed
Feb  9 01:03:48 vps-trilha postfix/local[15068]: D43141ADF7: to=<zimbra@vps-trilha.tosystems.net>, relay=local, delay=1.3, delays=0.54/0/0/0.8, dsn=4.3.0, status=deferred (temporary failure)

Please ask a help to understand the reason for still having problems connecting, it is postfix's services iredmail or is that Zimbra has been uninstalled and still some broken dependency.

4

Re: hostname bace1566.virtua.com.br does not resolve to address 186.206.21

The amavis is now up and running, but your antivirus isn't (clamav). You can try to restart it as well:

service clamav-daemon restart

...again post logs after this - if clamav still doesn't start, have a look in /var/log/clamav/clamav.log and /var/log/syslog for the reason.

5

Re: hostname bace1566.virtua.com.br does not resolve to address 186.206.21

camel1cz wrote:

The amavis is now up and running, but your antivirus isn't (clamav). You can try to restart it as well:

service clamav-daemon restart

...again post logs after this - if clamav still doesn't start, have a look in /var/log/clamav/clamav.log and /var/log/syslog for the reason.


The biggest problem is the authentication timeout and the involvement of postfix.
I just restarted the ClamAV and ran the tail-f command / var / log / mail.log and showed this error:

Feb  9 20:24:44 vps-trilha postfix/smtpd[1664]: connect from 173-12-246-153-memphis.hfc.comcastbusiness.net[173.12.246.153]
Feb  9 20:24:48 vps-trilha postfix/smtpd[1664]: warning: 173-12-246-153-memphis.hfc.comcastbusiness.net[173.12.246.153]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Feb  9 20:25:14  postfix/smtpd[1664]: last message repeated 2 times
Feb  9 20:25:14 vps-trilha postfix/smtpd[1664]: warning: 173-12-246-153-memphis.hfc.comcastbusiness.net[173.12.246.153]: SASL LOGIN authentication failed: Connection lost to authentication server
Feb  9 20:25:24 vps-trilha postfix/smtpd[1664]: warning: 173-12-246-153-memphis.hfc.comcastbusiness.net[173.12.246.153]: SASL LOGIN authentication failed: Connection lost to authentication server
Feb  9 20:25:24 vps-trilha postfix/smtpd[1664]: disconnect from 173-12-246-153-memphis.hfc.comcastbusiness.net[173.12.246.153]

Really do not understand why this is happening.

6

Re: hostname bace1566.virtua.com.br does not resolve to address 186.206.21

tyler.vortex wrote:

Feb  9 20:25:14 vps-trilha postfix/smtpd[1664]: warning: 173-12-246-153-memphis.hfc.comcastbusiness.net[173.12.246.153]: SASL LOGIN authentication failed: Connection lost to authentication server

In iRedMail, Dovecot is SASL authentication server.
Is Dovecot service running? If yes, please turn on debug mode for this client IP address in Postfix (debug_peer_*) to see why it happened.

7

Re: hostname bace1566.virtua.com.br does not resolve to address 186.206.21

ZhangHuangbin wrote:
tyler.vortex wrote:

Feb  9 20:25:14 vps-trilha postfix/smtpd[1664]: warning: 173-12-246-153-memphis.hfc.comcastbusiness.net[173.12.246.153]: SASL LOGIN authentication failed: Connection lost to authentication server

In iRedMail, Dovecot is SASL authentication server.
Is Dovecot service running? If yes, please turn on debug mode for this client IP address in Postfix (debug_peer_*) to see why it happened.

Which way to the dovecot logs?

8

Re: hostname bace1566.virtua.com.br does not resolve to address 186.206.21

See /var/log/dovecot.log

From the amount of services not running, I would suggest to restart the whole server / I recon it run out of memory and a lot of services was stopped to keep the system up.