1 Topic by christophk

  • christophk
  • Member
  • Offline
  • Registered: 2016-05-23
  • Posts: 54

Topic: Postfix "Connection Refused" - Email Server can't send receive emails

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):
- Deployed with iRedMail Easy or the downloadable installer?
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hi

Last night the email server stopped to send or receive emails.
Emails that I sent still got synced from my email client to the iredmail server though. But they never made their way out from the email server.

I haven't done anything to the server. It just stopped tonight.

I am posting a large extract of the /var/log/maillog
It seems that a problem occurred for the first time 2:48 with this "max connection rate " and then at 3:30 with the "Connection refused".

I have no clue what is going on and I don't understand the current behaviour (syncing between clients and server works but no email coming in or going out).

I would be very grateful if someone would know what is going on.
Happy to send more logs!

Sep  3 02:23:13 office postfix/postscreen[30900]: CONNECT from [173.225.106.10]:52662 to [213.136.86.149]:25
Sep  3 02:23:13 office postfix/dnsblog[8905]: addr 173.225.106.10 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 02:23:13 office postfix/dnsblog[8905]: addr 173.225.106.10 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 02:23:13 office postfix/postscreen[30900]: PREGREET 14 after 0.09 from [173.225.106.10]:52662: EHLO ylmf-pc\r\n
Sep  3 02:23:13 office postfix/postscreen[30900]: DISCONNECT [173.225.106.10]:52662
Sep  3 02:23:13 office postfix/postscreen[30900]: CONNECT from [173.225.106.10]:52317 to [213.136.86.149]:25
Sep  3 02:23:13 office postfix/dnsblog[8897]: addr 173.225.106.10 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 02:23:13 office postfix/dnsblog[8897]: addr 173.225.106.10 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 02:23:13 office postfix/postscreen[30900]: PREGREET 14 after 0.09 from [173.225.106.10]:52317: EHLO ylmf-pc\r\n
Sep  3 02:23:13 office postfix/postscreen[30900]: DISCONNECT [173.225.106.10]:52317
Sep  3 02:24:33 office postfix/postscreen[30900]: CONNECT from [212.70.149.4]:25846 to [213.136.86.149]:25
Sep  3 02:24:33 office postfix/dnsblog[8883]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 02:24:33 office postfix/dnsblog[8900]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 02:24:33 office postfix/dnsblog[8900]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 02:24:33 office postfix/dnsblog[8900]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 02:24:34 office postfix/postscreen[30900]: PREGREET 11 after 1.1 from [212.70.149.4]:25846: EHLO User\r\n
Sep  3 02:24:34 office postfix/postscreen[30900]: DISCONNECT [212.70.149.4]:25846
Sep  3 02:25:06 office postfix/anvil[10902]: statistics: max connection rate 1/60s for (submission:37.49.230.33) at Sep  3 02:21:45
Sep  3 02:25:06 office postfix/anvil[10902]: statistics: max connection count 1 for (submission:37.49.230.33) at Sep  3 02:21:45
Sep  3 02:25:06 office postfix/anvil[10902]: statistics: max cache size 1 at Sep  3 02:21:45
Sep  3 02:26:34 office clamd[317]: SelfCheck: Database status OK.
Sep  3 02:27:44 office postfix/postscreen[11998]: CONNECT from [212.70.149.4]:43448 to [213.136.86.149]:25
Sep  3 02:27:44 office postfix/dnsblog[12001]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 02:27:44 office postfix/dnsblog[12001]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 02:27:44 office postfix/dnsblog[12001]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 02:27:44 office postfix/dnsblog[12001]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 02:27:45 office postfix/postscreen[11998]: PREGREET 11 after 0.8 from [212.70.149.4]:43448: EHLO User\r\n
Sep  3 02:27:45 office postfix/postscreen[11998]: DISCONNECT [212.70.149.4]:43448
Sep  3 02:29:58 office postfix/submission/smtpd[12266]: connect from unknown[37.49.230.33]
Sep  3 02:29:59 office postfix/submission/smtpd[12266]: lost connection after CONNECT from unknown[37.49.230.33]
Sep  3 02:29:59 office postfix/submission/smtpd[12266]: disconnect from unknown[37.49.230.33]
Sep  3 02:30:55 office postfix/postscreen[12397]: CONNECT from [212.70.149.4]:60764 to [213.136.86.149]:25
Sep  3 02:30:55 office postfix/dnsblog[12398]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 02:30:55 office postfix/dnsblog[12398]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 02:30:55 office postfix/dnsblog[12398]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 02:30:55 office postfix/dnsblog[12398]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 02:30:55 office postfix/postscreen[12397]: PREGREET 11 after 0.9 from [212.70.149.4]:60764: EHLO User\r\n
Sep  3 02:30:55 office postfix/postscreen[12397]: DISCONNECT [212.70.149.4]:60764
Sep  3 02:31:46 office postfix/postscreen[12397]: CONNECT from [193.56.28.205]:51562 to [213.136.86.149]:25
Sep  3 02:31:46 office postfix/dnsblog[12399]: addr 193.56.28.205 listed by domain zen.spamhaus.org as 127.0.0.11
Sep  3 02:31:46 office postfix/dnsblog[12399]: addr 193.56.28.205 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 02:31:46 office postfix/postscreen[12397]: PREGREET 11 after 0.04 from [193.56.28.205]:51562: EHLO User\r\n
Sep  3 02:31:46 office postfix/postscreen[12397]: DISCONNECT [193.56.28.205]:51562
Sep  3 02:33:19 office postfix/anvil[12272]: statistics: max connection rate 1/60s for (submission:37.49.230.33) at Sep  3 02:29:59
Sep  3 02:33:19 office postfix/anvil[12272]: statistics: max connection count 1 for (submission:37.49.230.33) at Sep  3 02:29:59
Sep  3 02:33:19 office postfix/anvil[12272]: statistics: max cache size 1 at Sep  3 02:29:59
Sep  3 02:34:05 office postfix/postscreen[12984]: CONNECT from [212.70.149.4]:13360 to [213.136.86.149]:25
Sep  3 02:34:05 office postfix/dnsblog[12986]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 02:34:05 office postfix/dnsblog[12986]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 02:34:05 office postfix/dnsblog[12986]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 02:34:05 office postfix/dnsblog[12986]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 02:34:06 office postfix/postscreen[12984]: PREGREET 11 after 0.91 from [212.70.149.4]:13360: EHLO User\r\n
Sep  3 02:34:06 office postfix/postscreen[12984]: DISCONNECT [212.70.149.4]:13360
Sep  3 02:36:35 office clamd[317]: SelfCheck: Database status OK.
Sep  3 02:37:03 office postfix/submission/smtpd[13633]: connect from unknown[37.49.230.33]
Sep  3 02:37:03 office postfix/submission/smtpd[13633]: disconnect from unknown[37.49.230.33]
Sep  3 02:37:15 office postfix/postscreen[13668]: CONNECT from [212.70.149.4]:30728 to [213.136.86.149]:25
Sep  3 02:37:15 office postfix/dnsblog[13669]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 02:37:15 office postfix/dnsblog[13669]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 02:37:15 office postfix/dnsblog[13669]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 02:37:15 office postfix/dnsblog[13669]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 02:37:16 office postfix/postscreen[13668]: PREGREET 11 after 1 from [212.70.149.4]:30728: EHLO User\r\n
Sep  3 02:37:16 office postfix/postscreen[13668]: DISCONNECT [212.70.149.4]:30728
Sep  3 02:40:20 office postfix/postscreen[14240]: CONNECT from [212.70.149.4]:47960 to [213.136.86.149]:25
Sep  3 02:40:20 office postfix/dnsblog[14241]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 02:40:20 office postfix/dnsblog[14241]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 02:40:20 office postfix/dnsblog[14241]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 02:40:20 office postfix/dnsblog[14241]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 02:40:20 office postfix/postscreen[14240]: PREGREET 11 after 0.03 from [212.70.149.4]:47960: EHLO User\r\n
Sep  3 02:40:20 office postfix/postscreen[14240]: DISCONNECT [212.70.149.4]:47960
Sep  3 02:40:23 office postfix/anvil[13635]: statistics: max connection rate 1/60s for (submission:37.49.230.33) at Sep  3 02:37:03
Sep  3 02:40:23 office postfix/anvil[13635]: statistics: max connection count 1 for (submission:37.49.230.33) at Sep  3 02:37:03
Sep  3 02:40:23 office postfix/anvil[13635]: statistics: max cache size 1 at Sep  3 02:37:03
Sep  3 02:43:26 office postfix/postscreen[14819]: CONNECT from [212.70.149.4]:64828 to [213.136.86.149]:25
Sep  3 02:43:26 office postfix/dnsblog[14820]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 02:43:26 office postfix/dnsblog[14820]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 02:43:26 office postfix/dnsblog[14820]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 02:43:26 office postfix/dnsblog[14820]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 02:43:27 office postfix/postscreen[14819]: PREGREET 11 after 1 from [212.70.149.4]:64828: EHLO User\r\n
Sep  3 02:43:27 office postfix/postscreen[14819]: DISCONNECT [212.70.149.4]:64828
Sep  3 02:44:40 office postfix/postscreen[14819]: CONNECT from [193.56.28.205]:52351 to [213.136.86.149]:25
Sep  3 02:44:40 office postfix/dnsblog[14821]: addr 193.56.28.205 listed by domain zen.spamhaus.org as 127.0.0.11
Sep  3 02:44:40 office postfix/dnsblog[14821]: addr 193.56.28.205 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 02:44:40 office postfix/postscreen[14819]: PREGREET 11 after 0.04 from [193.56.28.205]:52351: EHLO User\r\n
Sep  3 02:44:40 office postfix/postscreen[14819]: DISCONNECT [193.56.28.205]:52351
Sep  3 02:44:58 office postfix/submission/smtpd[15091]: connect from unknown[37.49.230.33]
Sep  3 02:44:58 office postfix/submission/smtpd[15091]: disconnect from unknown[37.49.230.33]
Sep  3 02:46:31 office postfix/postscreen[15390]: CONNECT from [212.70.149.4]:17014 to [213.136.86.149]:25
Sep  3 02:46:31 office postfix/dnsblog[15391]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 02:46:31 office postfix/dnsblog[15391]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 02:46:31 office postfix/dnsblog[15391]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 02:46:31 office postfix/dnsblog[15391]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 02:46:32 office postfix/postscreen[15390]: PREGREET 11 after 1.1 from [212.70.149.4]:17014: EHLO User\r\n
Sep  3 02:46:32 office postfix/postscreen[15390]: DISCONNECT [212.70.149.4]:17014
Sep  3 02:46:35 office clamd[317]: SelfCheck: Database status OK.
Sep  3 02:48:18 office postfix/anvil[15093]: statistics: max connection rate 1/60s for (submission:37.49.230.33) at Sep  3 02:44:58
Sep  3 02:48:18 office postfix/anvil[15093]: statistics: max connection count 1 for (submission:37.49.230.33) at Sep  3 02:44:58
Sep  3 02:48:18 office postfix/anvil[15093]: statistics: max cache size 1 at Sep  3 02:44:58
Sep  3 02:49:39 office postfix/postscreen[15986]: CONNECT from [212.70.149.4]:34298 to [213.136.86.149]:25
Sep  3 02:49:39 office postfix/dnsblog[15987]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 02:49:39 office postfix/dnsblog[15987]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 02:49:39 office postfix/dnsblog[15987]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 02:49:39 office postfix/dnsblog[15987]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 02:49:40 office postfix/postscreen[15986]: PREGREET 11 after 0.79 from [212.70.149.4]:34298: EHLO User\r\n
Sep  3 02:49:40 office postfix/postscreen[15986]: DISCONNECT [212.70.149.4]:34298
Sep  3 02:52:42 office postfix/submission/smtpd[16549]: connect from unknown[37.49.230.33]
Sep  3 02:52:42 office postfix/submission/smtpd[16549]: disconnect from unknown[37.49.230.33]
Sep  3 02:52:49 office postfix/postscreen[16572]: CONNECT from [212.70.149.4]:51334 to [213.136.86.149]:25
Sep  3 02:52:49 office postfix/dnsblog[16573]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 02:52:49 office postfix/dnsblog[16573]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 02:52:49 office postfix/dnsblog[16573]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 02:52:49 office postfix/dnsblog[16573]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 02:52:50 office postfix/postscreen[16572]: PREGREET 11 after 0.82 from [212.70.149.4]:51334: EHLO User\r\n
Sep  3 02:52:50 office postfix/postscreen[16572]: DISCONNECT [212.70.149.4]:51334
Sep  3 02:55:59 office postfix/postscreen[17178]: CONNECT from [212.70.149.4]:3718 to [213.136.86.149]:25
Sep  3 02:55:59 office postfix/dnsblog[17179]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 02:55:59 office postfix/dnsblog[17179]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 02:55:59 office postfix/dnsblog[17179]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 02:55:59 office postfix/dnsblog[17179]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 02:56:00 office postfix/postscreen[17178]: PREGREET 11 after 1 from [212.70.149.4]:3718: EHLO User\r\n
Sep  3 02:56:00 office postfix/postscreen[17178]: DISCONNECT [212.70.149.4]:3718
Sep  3 02:56:02 office postfix/anvil[16551]: statistics: max connection rate 1/60s for (submission:37.49.230.33) at Sep  3 02:52:42
Sep  3 02:56:02 office postfix/anvil[16551]: statistics: max connection count 1 for (submission:37.49.230.33) at Sep  3 02:52:42
Sep  3 02:56:02 office postfix/anvil[16551]: statistics: max cache size 1 at Sep  3 02:52:42
Sep  3 02:56:35 office clamd[317]: SelfCheck: Database status OK.
Sep  3 02:57:26 office postfix/postscreen[17178]: CONNECT from [193.56.28.205]:52098 to [213.136.86.149]:25
Sep  3 02:57:26 office postfix/dnsblog[17180]: addr 193.56.28.205 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 02:57:26 office postfix/dnsblog[17180]: addr 193.56.28.205 listed by domain zen.spamhaus.org as 127.0.0.11
Sep  3 02:57:26 office postfix/postscreen[17178]: PREGREET 11 after 0.04 from [193.56.28.205]:52098: EHLO User\r\n
Sep  3 02:57:26 office postfix/postscreen[17178]: DISCONNECT [193.56.28.205]:52098
Sep  3 02:59:10 office postfix/postscreen[17771]: CONNECT from [212.70.149.4]:20478 to [213.136.86.149]:25
Sep  3 02:59:10 office postfix/dnsblog[17772]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 02:59:10 office postfix/dnsblog[17772]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 02:59:10 office postfix/dnsblog[17772]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 02:59:10 office postfix/dnsblog[17772]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 02:59:11 office postfix/postscreen[17771]: PREGREET 11 after 1.1 from [212.70.149.4]:20478: EHLO User\r\n
Sep  3 02:59:11 office postfix/postscreen[17771]: DISCONNECT [212.70.149.4]:20478
Sep  3 03:00:09 office postfix/submission/smtpd[17949]: connect from unknown[37.49.230.33]
Sep  3 03:00:09 office postfix/submission/smtpd[17949]: disconnect from unknown[37.49.230.33]
Sep  3 03:02:21 office postfix/postscreen[18387]: CONNECT from [212.70.149.4]:37234 to [213.136.86.149]:25
Sep  3 03:02:21 office postfix/dnsblog[18388]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 03:02:21 office postfix/dnsblog[18388]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 03:02:21 office postfix/dnsblog[18388]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 03:02:21 office postfix/dnsblog[18388]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 03:02:22 office postfix/postscreen[18387]: PREGREET 11 after 0.94 from [212.70.149.4]:37234: EHLO User\r\n
Sep  3 03:02:22 office postfix/postscreen[18387]: DISCONNECT [212.70.149.4]:37234
Sep  3 03:03:29 office postfix/anvil[17951]: statistics: max connection rate 1/60s for (submission:37.49.230.33) at Sep  3 03:00:09
Sep  3 03:03:29 office postfix/anvil[17951]: statistics: max connection count 1 for (submission:37.49.230.33) at Sep  3 03:00:09
Sep  3 03:03:29 office postfix/anvil[17951]: statistics: max cache size 1 at Sep  3 03:00:09
Sep  3 03:05:32 office postfix/postscreen[18982]: CONNECT from [212.70.149.4]:54658 to [213.136.86.149]:25
Sep  3 03:05:32 office postfix/dnsblog[18984]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 03:05:32 office postfix/dnsblog[18984]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 03:05:32 office postfix/dnsblog[18984]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 03:05:32 office postfix/dnsblog[18984]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 03:05:33 office postfix/postscreen[18982]: PREGREET 11 after 0.37 from [212.70.149.4]:54658: EHLO User\r\n
Sep  3 03:05:33 office postfix/postscreen[18982]: DISCONNECT [212.70.149.4]:54658
Sep  3 03:06:20 office postfix/postscreen[18982]: cache btree:/var/lib/postfix/postscreen_cache full cleanup: retained=341 dropped=33 entries
Sep  3 03:06:35 office clamd[317]: SelfCheck: Database status OK.
Sep  3 03:07:55 office postfix/submission/smtpd[19422]: connect from unknown[37.49.230.33]
Sep  3 03:07:55 office postfix/submission/smtpd[19422]: disconnect from unknown[37.49.230.33]
Sep  3 03:08:43 office postfix/postscreen[19564]: CONNECT from [212.70.149.4]:7002 to [213.136.86.149]:25
Sep  3 03:08:43 office postfix/dnsblog[19566]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 03:08:43 office postfix/dnsblog[19566]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 03:08:43 office postfix/dnsblog[19566]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 03:08:43 office postfix/dnsblog[19566]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 03:08:44 office postfix/postscreen[19564]: PREGREET 11 after 0.99 from [212.70.149.4]:7002: EHLO User\r\n
Sep  3 03:08:44 office postfix/postscreen[19564]: DISCONNECT [212.70.149.4]:7002
Sep  3 03:10:09 office postfix/postscreen[19564]: CONNECT from [193.56.28.205]:51607 to [213.136.86.149]:25
Sep  3 03:10:09 office postfix/dnsblog[19567]: addr 193.56.28.205 listed by domain zen.spamhaus.org as 127.0.0.11
Sep  3 03:10:09 office postfix/dnsblog[19567]: addr 193.56.28.205 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 03:10:09 office postfix/postscreen[19564]: PREGREET 11 after 0.04 from [193.56.28.205]:51607: EHLO User\r\n
Sep  3 03:10:09 office postfix/postscreen[19564]: DISCONNECT [193.56.28.205]:51607
Sep  3 03:11:16 office postfix/anvil[19424]: statistics: max connection rate 1/60s for (submission:37.49.230.33) at Sep  3 03:07:55
Sep  3 03:11:16 office postfix/anvil[19424]: statistics: max connection count 1 for (submission:37.49.230.33) at Sep  3 03:07:55
Sep  3 03:11:16 office postfix/anvil[19424]: statistics: max cache size 1 at Sep  3 03:07:55
Sep  3 03:11:55 office postfix/postscreen[20140]: CONNECT from [212.70.149.4]:23912 to [213.136.86.149]:25
Sep  3 03:11:55 office postfix/dnsblog[20141]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 03:11:55 office postfix/dnsblog[20141]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 03:11:55 office postfix/dnsblog[20141]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 03:11:55 office postfix/dnsblog[20141]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 03:11:56 office postfix/postscreen[20140]: PREGREET 11 after 0.89 from [212.70.149.4]:23912: EHLO User\r\n
Sep  3 03:11:56 office postfix/postscreen[20140]: DISCONNECT [212.70.149.4]:23912
Sep  3 03:15:07 office postfix/postscreen[20742]: CONNECT from [212.70.149.4]:40984 to [213.136.86.149]:25
Sep  3 03:15:07 office postfix/dnsblog[20744]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 03:15:07 office postfix/dnsblog[20744]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 03:15:07 office postfix/dnsblog[20744]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 03:15:07 office postfix/dnsblog[20744]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 03:15:08 office postfix/postscreen[20742]: PREGREET 11 after 1.1 from [212.70.149.4]:40984: EHLO User\r\n
Sep  3 03:15:08 office postfix/postscreen[20742]: DISCONNECT [212.70.149.4]:40984
Sep  3 03:15:20 office postfix/submission/smtpd[20788]: connect from unknown[37.49.230.33]
Sep  3 03:15:20 office postfix/submission/smtpd[20788]: disconnect from unknown[37.49.230.33]
Sep  3 03:16:35 office clamd[317]: SelfCheck: Database status OK.
Sep  3 03:18:20 office postfix/postscreen[21329]: CONNECT from [212.70.149.4]:58350 to [213.136.86.149]:25
Sep  3 03:18:20 office postfix/dnsblog[21331]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 03:18:20 office postfix/dnsblog[21331]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 03:18:20 office postfix/dnsblog[21331]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 03:18:20 office postfix/dnsblog[21331]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 03:18:21 office postfix/postscreen[21329]: PREGREET 11 after 0.88 from [212.70.149.4]:58350: EHLO User\r\n
Sep  3 03:18:21 office postfix/postscreen[21329]: DISCONNECT [212.70.149.4]:58350
Sep  3 03:18:40 office postfix/anvil[20790]: statistics: max connection rate 1/60s for (submission:37.49.230.33) at Sep  3 03:15:20
Sep  3 03:18:40 office postfix/anvil[20790]: statistics: max connection count 1 for (submission:37.49.230.33) at Sep  3 03:15:20
Sep  3 03:18:40 office postfix/anvil[20790]: statistics: max cache size 1 at Sep  3 03:15:20
Sep  3 03:21:31 office postfix/postscreen[21911]: CONNECT from [212.70.149.4]:10880 to [213.136.86.149]:25
Sep  3 03:21:31 office postfix/dnsblog[21912]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 03:21:31 office postfix/dnsblog[21912]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 03:21:31 office postfix/dnsblog[21912]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 03:21:31 office postfix/dnsblog[21912]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 03:21:31 office postfix/postscreen[21911]: PREGREET 11 after 0.03 from [212.70.149.4]:10880: EHLO User\r\n
Sep  3 03:21:31 office postfix/postscreen[21911]: DISCONNECT [212.70.149.4]:10880
Sep  3 03:21:50 office postfix/postscreen[21911]: CONNECT from [71.6.232.5]:48776 to [213.136.86.149]:25
Sep  3 03:21:50 office postfix/postscreen[21911]: PREGREET 26 after 0 from [71.6.232.5]:48776: EHLO zx1.quadmetrics.com\r\n
Sep  3 03:21:50 office postfix/postscreen[21911]: DISCONNECT [71.6.232.5]:48776
Sep  3 03:21:50 office postfix/dnsblog[21913]: addr 71.6.232.5 listed by domain zen.spamhaus.org as 127.0.0.2
Sep  3 03:22:48 office postfix/submission/smtpd[22133]: connect from unknown[37.49.230.33]
Sep  3 03:22:49 office postfix/submission/smtpd[22133]: disconnect from unknown[37.49.230.33]
Sep  3 03:23:16 office postfix/postscreen[21911]: CONNECT from [193.56.28.205]:53180 to [213.136.86.149]:25
Sep  3 03:23:16 office postfix/dnsblog[21913]: addr 193.56.28.205 listed by domain zen.spamhaus.org as 127.0.0.11
Sep  3 03:23:16 office postfix/dnsblog[21913]: addr 193.56.28.205 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 03:23:16 office postfix/postscreen[21911]: PREGREET 11 after 0.04 from [193.56.28.205]:53180: EHLO User\r\n
Sep  3 03:23:16 office postfix/postscreen[21911]: DISCONNECT [193.56.28.205]:53180
Sep  3 03:24:44 office postfix/postscreen[21911]: CONNECT from [212.70.149.4]:28016 to [213.136.86.149]:25
Sep  3 03:24:44 office postfix/dnsblog[21913]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 03:24:44 office postfix/dnsblog[21913]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 03:24:44 office postfix/dnsblog[21912]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 03:24:44 office postfix/dnsblog[21913]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 03:24:45 office postfix/postscreen[21911]: PREGREET 11 after 0.98 from [212.70.149.4]:28016: EHLO User\r\n
Sep  3 03:24:45 office postfix/postscreen[21911]: DISCONNECT [212.70.149.4]:28016
Sep  3 03:26:09 office postfix/anvil[22135]: statistics: max connection rate 1/60s for (submission:37.49.230.33) at Sep  3 03:22:48
Sep  3 03:26:09 office postfix/anvil[22135]: statistics: max connection count 1 for (submission:37.49.230.33) at Sep  3 03:22:48
Sep  3 03:26:09 office postfix/anvil[22135]: statistics: max cache size 1 at Sep  3 03:22:48
Sep  3 03:26:35 office clamd[317]: SelfCheck: Database status OK.
Sep  3 03:27:55 office postfix/postscreen[23076]: CONNECT from [212.70.149.4]:45194 to [213.136.86.149]:25
Sep  3 03:27:55 office postfix/dnsblog[23077]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 03:27:55 office postfix/dnsblog[23077]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 03:27:55 office postfix/dnsblog[23077]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 03:27:55 office postfix/dnsblog[23077]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 03:27:56 office postfix/postscreen[23076]: PREGREET 11 after 0.92 from [212.70.149.4]:45194: EHLO User\r\n
Sep  3 03:27:56 office postfix/postscreen[23076]: DISCONNECT [212.70.149.4]:45194
Sep  3 03:30:37 office postfix/pickup[23453]: A0E49183981CEB: uid=0 from=<root>
Sep  3 03:30:37 office postfix/cleanup[23658]: A0E49183981CEB: message-id=<20200903013037.A0E49183981CEB@office.mydomain.com>
Sep  3 03:30:37 office postfix/qmgr[15891]: A0E49183981CEB: from=<root@office.mydomain.com>, size=1686, nrcpt=1 (queue active)
Sep  3 03:30:38 office postfix/smtp[23671]: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused
Sep  3 03:30:39 office postfix/submission/smtpd[23670]: connect from unknown[37.49.230.33]
Sep  3 03:30:39 office postfix/smtp[23671]: A0E49183981CEB: to=<root@office.mydomain.com>, relay=none, delay=2, delays=1/1/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)
Sep  3 03:30:39 office postfix/submission/smtpd[23670]: disconnect from unknown[37.49.230.33]
Sep  3 03:31:10 office postfix/postscreen[23766]: CONNECT from [212.70.149.4]:62330 to [213.136.86.149]:25
Sep  3 03:31:10 office postfix/dnsblog[23769]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 03:31:10 office postfix/dnsblog[23769]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 03:31:10 office postfix/dnsblog[23769]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 03:31:10 office postfix/dnsblog[23769]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 03:31:10 office postfix/postscreen[23766]: PREGREET 11 after 0.3 from [212.70.149.4]:62330: EHLO User\r\n
Sep  3 03:31:10 office postfix/postscreen[23766]: DISCONNECT [212.70.149.4]:62330
Sep  3 03:33:59 office postfix/anvil[23676]: statistics: max connection rate 1/60s for (submission:37.49.230.33) at Sep  3 03:30:39
Sep  3 03:33:59 office postfix/anvil[23676]: statistics: max connection count 1 for (submission:37.49.230.33) at Sep  3 03:30:39
Sep  3 03:33:59 office postfix/anvil[23676]: statistics: max cache size 1 at Sep  3 03:30:39
Sep  3 03:34:17 office postfix/postscreen[24317]: CONNECT from [212.70.149.4]:14976 to [213.136.86.149]:25
Sep  3 03:34:17 office postfix/dnsblog[24318]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 03:34:17 office postfix/dnsblog[24318]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 03:34:17 office postfix/dnsblog[24318]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 03:34:17 office postfix/dnsblog[24318]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 03:34:18 office postfix/postscreen[24317]: PREGREET 11 after 0.81 from [212.70.149.4]:14976: EHLO User\r\n
Sep  3 03:34:18 office postfix/postscreen[24317]: DISCONNECT [212.70.149.4]:14976
Sep  3 03:35:29 office postfix/pickup[23453]: 32B52189AE8295: uid=0 from=<root>
Sep  3 03:35:29 office postfix/cleanup[24895]: 32B52189AE8295: message-id=<20200903013529.32B52189AE8295@office.mydomain.com>
Sep  3 03:35:29 office postfix/qmgr[15891]: 32B52189AE8295: from=<root@office.mydomain.com>, size=58483, nrcpt=1 (queue active)
Sep  3 03:35:29 office postfix/smtp[24910]: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused
Sep  3 03:35:29 office postfix/smtp[24910]: 32B52189AE8295: to=<root@office.mydomain.com>, relay=none, delay=64, delays=64/0.03/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)
Sep  3 03:36:18 office postfix/postscreen[25056]: CONNECT from [193.56.28.205]:53832 to [213.136.86.149]:25
Sep  3 03:36:18 office postfix/dnsblog[25057]: addr 193.56.28.205 listed by domain zen.spamhaus.org as 127.0.0.11
Sep  3 03:36:18 office postfix/dnsblog[25057]: addr 193.56.28.205 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 03:36:18 office postfix/postscreen[25056]: PREGREET 11 after 0.04 from [193.56.28.205]:53832: EHLO User\r\n
Sep  3 03:36:18 office postfix/postscreen[25056]: DISCONNECT [193.56.28.205]:53832
Sep  3 03:36:35 office clamd[317]: SelfCheck: Database status OK.
Sep  3 03:37:24 office postfix/postscreen[25056]: CONNECT from [212.70.149.4]:32116 to [213.136.86.149]:25
Sep  3 03:37:24 office postfix/dnsblog[25057]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 03:37:24 office postfix/dnsblog[25058]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 03:37:24 office postfix/dnsblog[25058]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 03:37:24 office postfix/dnsblog[25058]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 03:37:25 office postfix/postscreen[25056]: PREGREET 11 after 0.92 from [212.70.149.4]:32116: EHLO User\r\n
Sep  3 03:37:25 office postfix/postscreen[25056]: DISCONNECT [212.70.149.4]:32116
Sep  3 03:37:43 office postfix/qmgr[15891]: A0E49183981CEB: from=<root@office.mydomain.com>, size=1686, nrcpt=1 (queue active)
Sep  3 03:37:43 office postfix/smtp[25314]: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused
Sep  3 03:37:43 office postfix/smtp[25314]: A0E49183981CEB: to=<root@office.mydomain.com>, relay=none, delay=426, delays=426/0.03/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)
Sep  3 03:38:02 office postfix/submission/smtpd[25374]: connect from unknown[37.49.230.33]
Sep  3 03:38:02 office postfix/submission/smtpd[25374]: disconnect from unknown[37.49.230.33]
Sep  3 03:40:32 office postfix/postscreen[25791]: CONNECT from [212.70.149.4]:49024 to [213.136.86.149]:25
Sep  3 03:40:32 office postfix/dnsblog[25792]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 03:40:32 office postfix/dnsblog[25792]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 03:40:32 office postfix/dnsblog[25792]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 03:40:32 office postfix/dnsblog[25792]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 03:40:33 office postfix/postscreen[25791]: PREGREET 11 after 1.2 from [212.70.149.4]:49024: EHLO User\r\n
Sep  3 03:40:33 office postfix/postscreen[25791]: DISCONNECT [212.70.149.4]:49024
Sep  3 03:41:22 office postfix/anvil[25375]: statistics: max connection rate 1/60s for (submission:37.49.230.33) at Sep  3 03:38:02
Sep  3 03:41:22 office postfix/anvil[25375]: statistics: max connection count 1 for (submission:37.49.230.33) at Sep  3 03:38:02
Sep  3 03:41:22 office postfix/anvil[25375]: statistics: max cache size 1 at Sep  3 03:38:02
Sep  3 03:42:43 office postfix/qmgr[15891]: 32B52189AE8295: from=<root@office.mydomain.com>, size=58483, nrcpt=1 (queue active)
Sep  3 03:42:43 office postfix/smtp[26166]: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused
Sep  3 03:42:43 office postfix/smtp[26166]: 32B52189AE8295: to=<root@office.mydomain.com>, relay=none, delay=498, delays=498/0.03/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)
Sep  3 03:43:44 office postfix/postscreen[26345]: CONNECT from [212.70.149.4]:1818 to [213.136.86.149]:25
Sep  3 03:43:44 office postfix/dnsblog[26346]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 03:43:44 office postfix/dnsblog[26346]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 03:43:44 office postfix/dnsblog[26346]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 03:43:44 office postfix/dnsblog[26346]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 03:43:45 office postfix/postscreen[26345]: PREGREET 11 after 0.98 from [212.70.149.4]:1818: EHLO User\r\n
Sep  3 03:43:45 office postfix/postscreen[26345]: DISCONNECT [212.70.149.4]:1818
Sep  3 03:45:45 office postfix/submission/smtpd[26697]: connect from unknown[37.49.230.33]
Sep  3 03:45:45 office postfix/submission/smtpd[26697]: disconnect from unknown[37.49.230.33]
Sep  3 03:46:35 office clamd[317]: SelfCheck: Database status OK.
Sep  3 03:46:55 office postfix/postscreen[26892]: CONNECT from [212.70.149.4]:19064 to [213.136.86.149]:25
Sep  3 03:46:55 office postfix/dnsblog[26893]: addr 212.70.149.4 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  3 03:46:55 office postfix/dnsblog[26893]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.10
Sep  3 03:46:55 office postfix/dnsblog[26893]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  3 03:46:55 office postfix/dnsblog[26893]: addr 212.70.149.4 listed by domain zen.spamhaus.org as 127.0.0.3
Sep  3 03:46:56 office postfix/postscreen[26892]: PREGREET 11 after 0.91 from [212.70.149.4]:19064: EHLO User\r\n
Sep  3 03:46:56 office postfix/postscreen[26892]: DISCONNECT [212.70.149.4]:19064
Sep  3 03:47:43 office postfix/qmgr[15891]: A0E49183981CEB: from=<root@office.mydomain.com>, size=1686, nrcpt=1 (queue active)
Sep  3 03:47:43 office postfix/smtp[27043]: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused
Sep  3 03:47:43 office postfix/smtp[27043]: A0E49183981CEB: to=<root@office.mydomain.com>, relay=none, delay=1027, delays=1027/0.02/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)
Sep  3 03:47:50 office postfix/postscreen[26892]: CONNECT from [2a01:111:f400:7e08::206]:6160 to [2a02:c207:3001:5812::1]:25
Sep  3 03:47:56 office postfix/postscreen[26892]: PASS NEW [2a01:111:f400:7e08::206]:6160
Sep  3 03:47:57 office postfix/smtpd[27079]: connect from mail-am5eur03lp0206.outbound.protection.outlook.com[2a01:111:f400:7e08::206]
Sep  3 03:47:57 office postfix/smtpd[27079]: Anonymous TLS connection established from mail-am5eur03lp0206.outbound.protection.outlook.com[2a01:111:f400:7e08::206]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Sep  3 03:47:57 office postfix/smtpd[27079]: disconnect from mail-am5eur03lp0206.outbound.protection.outlook.com[2a01:111:f400:7e08::206]
Sep  3 03:49:20 office postfix/postscreen[26892]: CONNECT from [193.56.28.205]:54600 to [213.136.86.149]:25

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 30,768

Re: Postfix "Connection Refused" - Email Server can't send receive emails

I suppose you're running CentOS, if yes, it's a bug caused by the new Amavisd package, package maintainer renamed it to "amavis" package but didn't enable this service automatically.

Please fix it with commands below:

systemctl enable amavisd
systemctl restart amavisd
postqueue -f