Nedoručená pošta - message too old

Sat1

Nedoručená pošta - message too old
« kdy: 09. 08. 2018, 15:31:59 »
Dobry den,
uz asi dve hodiny laboruju nat chybou, ktera se obcas vraci protistrane, kdyz nam posila mail. Po trech dnech jim obcas prijde toto:
Kód: [Vybrat]
Remote Server returned '< #5.0.0 smtp; 5.4.7 - Delivery expired (message too old) 'timeout' (delivery attempts: 0)>'

Původní hlavičky zprávy:

X-RECVLIST: KB-INSIDE

X-IronPort-DK-Sig: DKIM-SGEF-CZ

X-IronPort-AV: E=Sophos;i="5.51,452,1526335200";

   d="pdf'?scan'208";a="34592060"

Date: Mon, 6 Aug 2018 13:29:07 +0200

From: <e-fakturace@sgef.cz>

To: <uctarna@ko*****.cz>

Message-ID: <2065340305.88.1533554947269@SAPSGEF001.ds.kb.cz>

Subject: =?Cp1250?Q?Doklad_=E8._013-26508/18?=

MIME-Version: 1.0

Content-Type: text/plain

X-Mailer: Twin Soft Mailer

ja v logu (postfix) vidim toto:
Kód: [Vybrat]
Aug  6 13:28:39 linux postfix/smtpd[22880]: connect from mail1-sgef.kb.cz[194.228.113.210]
Aug  6 13:28:40 linux postfix/smtpd[22880]: NOQUEUE: filter: RCPT from mail1-sgef.kb.cz[194.228.113.210]: <e-fakturace@sgef.cz>: Sender address triggers FILTER amavis:[127.0.0.1]:10026; from=<e-fakturace@sgef.cz> to=<uctarna@ko****.cz> proto=ESMTP helo=<mail1-sgef.kb.cz>
Aug  6 13:28:40 linux postfix/smtpd[22880]: NOQUEUE: filter: RCPT from mail1-sgef.kb.cz[194.228.113.210]: <e-fakturace@sgef.cz>: Sender address triggers FILTER amavis:[127.0.0.1]:10024; from=<e-fakturace@sgef.cz> to=<uctarna@ko****.cz> proto=ESMTP helo=<mail1-sgef.kb.cz>
Aug  6 13:28:40 linux postfix/smtpd[22880]: 2AD8395A5C: client=mail1-sgef.kb.cz[194.228.113.210]
Aug  6 13:28:40 linux postfix/cleanup[22887]: 2AD8395A5C: message-id=<367685878.82.1533554897034@SAPSGEF001.ds.kb.cz>
Aug  6 13:28:40 linux opendkim[3942]: 2AD8395A5C: s=alpha d=sgef.cz SSL error:04091068:rsa routines:INT_RSA_VERIFY:bad signature
Aug  6 13:28:40 linux opendkim[3942]: 2AD8395A5C: bad signature data
Aug  6 13:28:40 linux postfix/qmgr[4082]: 2AD8395A5C: from=<e-fakturace@sgef.cz>, size=71138, nrcpt=1 (queue active)
Aug  6 13:28:41 linux postfix/smtpd[22892]: connect from localhost[127.0.0.1]
Aug  6 13:28:41 linux postfix/smtpd[22892]: ED2C7961F5: client=localhost[127.0.0.1]
Aug  6 13:28:41 linux postfix/cleanup[22887]: ED2C7961F5: message-id=<367685878.82.1533554897034@SAPSGEF001.ds.kb.cz>
Aug  6 13:28:42 linux opendkim[3942]: ED2C7961F5: s=alpha d=sgef.cz SSL error:04091068:rsa routines:INT_RSA_VERIFY:bad signature
Aug  6 13:28:42 linux opendkim[3942]: ED2C7961F5: bad signature data
Aug  6 13:28:42 linux postfix/qmgr[4082]: ED2C7961F5: from=<e-fakturace@sgef.cz>, size=71741, nrcpt=2 (queue active)
Aug  6 13:28:42 linux amavis[19135]: (19135-13) Passed CLEAN {RelayedInbound}, [194.228.113.210]:18652 [194.228.113.210] <e-fakturace@sgef.cz> -> <uctarna@ko****.cz>, Queue-ID: 2AD8395A5C, Message-ID: <367685878.82.1533554897034@SAPSGEF001.ds.kb.cz>, mail_id: IqeOUrDNCLGp, Hits: -4.291, size: 71335, queued_as: ED2C7961F5, dkim_sd=alpha:sgef.cz, 1627 ms
Aug  6 13:28:42 linux postfix/smtpd[22892]: disconnect from localhost[127.0.0.1]
Aug  6 13:28:42 linux postfix/smtp[22888]: 2AD8395A5C: to=<uctarna@ko****.cz>, relay=127.0.0.1[127.0.0.1]:10024, delay=2, delays=0.37/0.01/0/1.6, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as ED2C7961F5)
Aug  6 13:28:42 linux postfix/qmgr[4082]: 2AD8395A5C: removed
Aug  6 13:28:42 linux dovecot: lda(eg****@ko****.cz): sieve: msgid=<367685878.82.1533554897034@SAPSGEF001.ds.kb.cz>: stored mail into mailbox 'INBOX'
Aug  6 13:28:42 linux postfix/pipe[22895]: ED2C7961F5: to=<eg****@ko****.cz>, orig_to=<uctarna@ko****.cz>, relay=dovecot, delay=0.49, delays=0.17/0.01/0/0.31, dsn=2.0.0, status=sent (delivered via dovecot service)
Aug  6 13:28:42 linux dovecot: lda(ko****@ko****.cz): sieve: msgid=<367685878.82.1533554897034@SAPSGEF001.ds.kb.cz>: stored mail into mailbox 'INBOX'
Aug  6 13:28:42 linux postfix/pipe[22896]: ED2C7961F5: to=<ko****@ko****.cz>, orig_to=<uctarna@ko****.cz>, relay=dovecot, delay=0.52, delays=0.17/0.02/0/0.33, dsn=2.0.0, status=sent (delivered via dovecot service)
Aug  6 13:28:42 linux postfix/qmgr[4082]: ED2C7961F5: removed
Aug  6 13:28:46 linux postfix/smtpd[22880]: disconnect from mail1-sgef.kb.cz[194.228.113.210]
Aug  6 13:28:47 linux postfix/smtpd[22880]: connect from mail1-sgef.kb.cz[194.228.113.210]
Aug  6 13:28:47 linux postfix/smtpd[22880]: NOQUEUE: filter: RCPT from mail1-sgef.kb.cz[194.228.113.210]: <e-fakturace@sgef.cz>: Sender address triggers FILTER amavis:[127.0.0.1]:10026; from=<e-fakturace@sgef.cz> to=<uctarna@ko****.cz> proto=ESMTP helo=<mail1-sgef.kb.cz>
Aug  6 13:28:47 linux postfix/smtpd[22880]: NOQUEUE: filter: RCPT from mail1-sgef.kb.cz[194.228.113.210]: <e-fakturace@sgef.cz>: Sender address triggers FILTER amavis:[127.0.0.1]:10024; from=<e-fakturace@sgef.cz> to=<uctarna@ko****.cz> proto=ESMTP helo=<mail1-sgef.kb.cz>
Aug  6 13:28:47 linux postfix/smtpd[22880]: A533D95A5C: client=mail1-sgef.kb.cz[194.228.113.210]
Aug  6 13:28:47 linux postfix/cleanup[22887]: A533D95A5C: message-id=<984175458.86.1533554927191@SAPSGEF001.ds.kb.cz>
Aug  6 13:28:47 linux opendkim[3942]: A533D95A5C: s=alpha d=sgef.cz SSL error:04091068:rsa routines:INT_RSA_VERIFY:bad signature
Aug  6 13:28:47 linux opendkim[3942]: A533D95A5C: bad signature data
Aug  6 13:28:47 linux postfix/qmgr[4082]: A533D95A5C: from=<e-fakturace@sgef.cz>, size=70801, nrcpt=1 (queue active)
Aug  6 13:28:48 linux postfix/smtpd[22892]: connect from localhost[127.0.0.1]
Aug  6 13:28:48 linux postfix/smtpd[22892]: 8BCFA961E4: client=localhost[127.0.0.1]
Aug  6 13:28:48 linux postfix/cleanup[22887]: 8BCFA961E4: message-id=<984175458.86.1533554927191@SAPSGEF001.ds.kb.cz>
Aug  6 13:28:48 linux opendkim[3942]: 8BCFA961E4: s=alpha d=sgef.cz SSL error:04091068:rsa routines:INT_RSA_VERIFY:bad signature
Aug  6 13:28:48 linux opendkim[3942]: 8BCFA961E4: bad signature data
Aug  6 13:28:48 linux postfix/qmgr[4082]: 8BCFA961E4: from=<e-fakturace@sgef.cz>, size=71404, nrcpt=2 (queue active)
Aug  6 13:28:48 linux postfix/smtpd[22892]: disconnect from localhost[127.0.0.1]
Aug  6 13:28:48 linux amavis[17587]: (17587-19) Passed CLEAN {RelayedInbound}, [194.228.113.210]:18735 [194.228.113.210] <e-fakturace@sgef.cz> -> <uctarna@ko****.cz>, Queue-ID: A533D95A5C, Message-ID: <984175458.86.1533554927191@SAPSGEF001.ds.kb.cz>, mail_id: Al6Tu2PcxbNz, Hits: -4.291, size: 70996, queued_as: 8BCFA961E4, dkim_sd=alpha:sgef.cz, 802 ms
Aug  6 13:28:48 linux postfix/smtp[22888]: A533D95A5C: to=<uctarna@ko****.cz>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.1, delays=0.28/0/0/0.8, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 8BCFA961E4)
Aug  6 13:28:48 linux postfix/qmgr[4082]: A533D95A5C: removed
Aug  6 13:28:48 linux dovecot: lda(eg****@ko****.cz): sieve: msgid=<984175458.86.1533554927191@SAPSGEF001.ds.kb.cz>: stored mail into mailbox 'INBOX'
Aug  6 13:28:48 linux postfix/pipe[22896]: 8BCFA961E4: to=<eg****@ko****.cz>, orig_to=<uctarna@ko****.cz>, relay=dovecot, delay=0.32, delays=0.13/0/0/0.18, dsn=2.0.0, status=sent (delivered via dovecot service)
Aug  6 13:28:48 linux dovecot: lda(ko****@ko****.cz): sieve: msgid=<984175458.86.1533554927191@SAPSGEF001.ds.kb.cz>: stored mail into mailbox 'INBOX'
Aug  6 13:28:48 linux postfix/pipe[22895]: 8BCFA961E4: to=<ko****@ko****.cz>, orig_to=<uctarna@ko****.cz>, relay=dovecot, delay=0.32, delays=0.13/0/0/0.18, dsn=2.0.0, status=sent (delivered via dovecot service)
Aug  6 13:28:48 linux postfix/qmgr[4082]: 8BCFA961E4: removed
Aug  6 13:28:53 linux postfix/smtpd[22880]: disconnect from mail1-sgef.kb.cz[194.228.113.210]
Aug  6 13:29:17 linux postfix/smtpd[22880]: connect from mail1-sgef.kb.cz[194.228.113.210]
Aug  6 13:29:17 linux postfix/smtpd[22880]: NOQUEUE: filter: RCPT from mail1-sgef.kb.cz[194.228.113.210]: <e-fakturace@sgef.cz>: Sender address triggers FILTER amavis:[127.0.0.1]:10026; from=<e-fakturace@sgef.cz> to=<uctarna@ko****.cz> proto=ESMTP helo=<mail1-sgef.kb.cz>
Aug  6 13:29:17 linux postfix/smtpd[22880]: NOQUEUE: filter: RCPT from mail1-sgef.kb.cz[194.228.113.210]: <e-fakturace@sgef.cz>: Sender address triggers FILTER amavis:[127.0.0.1]:10024; from=<e-fakturace@sgef.cz> to=<uctarna@ko****.cz> proto=ESMTP helo=<mail1-sgef.kb.cz>
Aug  6 13:29:17 linux postfix/smtpd[22880]: BC14995A5C: client=mail1-sgef.kb.cz[194.228.113.210]
Aug  6 13:29:17 linux postfix/cleanup[22887]: BC14995A5C: message-id=<699150110.90.1533554957363@SAPSGEF001.ds.kb.cz>
Aug  6 13:29:17 linux opendkim[3942]: BC14995A5C: s=alpha d=sgef.cz SSL error:04091068:rsa routines:INT_RSA_VERIFY:bad signature
Aug  6 13:29:17 linux opendkim[3942]: BC14995A5C: bad signature data
Aug  6 13:29:18 linux postfix/qmgr[4082]: BC14995A5C: from=<e-fakturace@sgef.cz>, size=71127, nrcpt=1 (queue active)
Aug  6 13:29:18 linux postfix/smtpd[22892]: connect from localhost[127.0.0.1]
Aug  6 13:29:18 linux postfix/smtpd[22892]: D8CD6961F5: client=localhost[127.0.0.1]
Aug  6 13:29:18 linux postfix/cleanup[22887]: D8CD6961F5: message-id=<699150110.90.1533554957363@SAPSGEF001.ds.kb.cz>
Aug  6 13:29:18 linux opendkim[3942]: D8CD6961F5: s=alpha d=sgef.cz SSL error:04091068:rsa routines:INT_RSA_VERIFY:bad signature
Aug  6 13:29:18 linux opendkim[3942]: D8CD6961F5: bad signature data
Aug  6 13:29:19 linux postfix/qmgr[4082]: D8CD6961F5: from=<e-fakturace@sgef.cz>, size=71730, nrcpt=2 (queue active)
Aug  6 13:29:19 linux postfix/smtpd[22892]: disconnect from localhost[127.0.0.1]
Aug  6 13:29:19 linux amavis[19135]: (19135-14) Passed CLEAN {RelayedInbound}, [194.228.113.210]:18815 [194.228.113.210] <e-fakturace@sgef.cz> -> <uctarna@ko****.cz>, Queue-ID: BC14995A5C, Message-ID: <699150110.90.1533554957363@SAPSGEF001.ds.kb.cz>, mail_id: ekaadYpZqtZy, Hits: -4.291, size: 71323, queued_as: D8CD6961F5, dkim_sd=alpha:sgef.cz, 1013 ms
Aug  6 13:29:19 linux postfix/smtp[22888]: BC14995A5C: to=<uctarna@ko****.cz>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.3, delays=0.31/0/0/1, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as D8CD6961F5)
Aug  6 13:29:19 linux postfix/qmgr[4082]: BC14995A5C: removed
Aug  6 13:29:19 linux dovecot: lda(eg****@ko****.cz): sieve: msgid=<699150110.90.1533554957363@SAPSGEF001.ds.kb.cz>: stored mail into mailbox 'INBOX'
Aug  6 13:29:19 linux postfix/pipe[22896]: D8CD6961F5: to=<eg****@ko****.cz>, orig_to=<uctarna@ko****.cz>, relay=dovecot, delay=0.4, delays=0.14/0/0/0.26, dsn=2.0.0, status=sent (delivered via dovecot service)
Aug  6 13:29:19 linux dovecot: lda(ko****@ko****.cz): sieve: msgid=<699150110.90.1533554957363@SAPSGEF001.ds.kb.cz>: stored mail into mailbox 'INBOX'
Aug  6 13:29:19 linux postfix/pipe[22895]: D8CD6961F5: to=<ko****@ko****.cz>, orig_to=<uctarna@ko****.cz>, relay=dovecot, delay=0.4, delays=0.14/0/0/0.27, dsn=2.0.0, status=sent (delivered via dovecot service)
Aug  6 13:29:19 linux postfix/qmgr[4082]: D8CD6961F5: removed
Aug  6 13:29:23 linux postfix/smtpd[22880]: disconnect from mail1-sgef.kb.cz[194.228.113.210]
Aug  6 13:38:22 linux postfix/anvil[22882]: statistics: max connection rate 3/60s for (smtp:194.228.113.210) at Aug  6 13:29:17
Aug  6 13:38:22 linux postfix/anvil[22882]: statistics: max connection count 1 for (smtp:194.228.113.210) at Aug  6 13:28:39
Aug  6 13:38:22 linux postfix/anvil[22882]: statistics: max message rate 3/60s for (smtp:194.228.113.210) at Aug  6 13:29:17
Aug  6 13:38:22 linux postfix/anvil[22882]: statistics: max cache size 1 at Aug  6 13:28:39

Co jsem nasel, tak vzdycky tato chyba byla spojena s ms exchange, tak nevim... Od nikoho jineho se to nestava. Prosim o radu. Dekuji
« Poslední změna: 13. 08. 2018, 14:07:56 od Petr Krčmář »


Sat1

Re:nedorucena posta - message too old
« Odpověď #1 kdy: 10. 08. 2018, 12:29:05 »
Tak dnes jsme prisli na to, ze ne vsechno se doruci. Posilaji treba 9 mailu najednou a dojde jich 6 - 7.

ddd

Re:nedorucena posta - message too old
« Odpověď #2 kdy: 10. 08. 2018, 12:39:47 »
normal, ty co nedojdou sou posilany pres servery cesky posty

Sat1

Re:nedorucena posta - message too old
« Odpověď #3 kdy: 10. 08. 2018, 20:47:27 »
Tak badam dal a koukam, ze by to bylo ono?
Kód: [Vybrat]
Aug 10 09:30:29 linux postfix/scache[14539]: statistics: start interval Aug 10 09:27:10
Aug 10 09:30:29 linux postfix/scache[14539]: statistics: domain lookup hits=3 miss=2 success=60%
Aug 10 09:30:29 linux postfix/scache[14539]: statistics: max simultaneous domains=1 addresses=1 connection=2

Dnes dorazilo 7 z 9.
postconf -n | grep limit
Kód: [Vybrat]
dovecot_destination_recipient_limit = 1
mailbox_size_limit = 0
maildrop_destination_concurrency_limit = 1
maildrop_destination_recipient_limit = 1
message_size_limit = 0
recipient_delimiter = +
smtpd_client_message_rate_limit = 100
Mam nastavene jen odchozi limity. To je to prichozi default tak malo?
Zese je mi divne, ze kdyz z jineho postfixu poslu:
Kód: [Vybrat]
smtp-source -s 20 -l 95120 -m 1000 -c -f ondrej@c***.cz -t test@ko******.cz linux.ko******.cz:25Tak to normalne zarizne kolem stovky se spravnym hlasenim
Kód: [Vybrat]
fatal: sender rejected: 450 4.7.1 Error: too much mail from 77.x.x.xCo je to tedy za limit???

ET

Re:nedorucena posta - message too old
« Odpověď #4 kdy: 10. 08. 2018, 23:31:17 »
zacal bych
* castou kontrolou fronty na postfixu - prikaz mailq
* tcpdump z 194.228.113.210 na tcp 25/etc...

tipuju, ze je problem nekde u nich (se to "zasprcne" na 3dny) - v tech chybovych hlavickach je videt, ze mail prochazi "AV sophos" a posila to "Twin Soft Mailer", takze buhvi, jak je to udelane


Sat1

Re:nedorucena posta - message too old
« Odpověď #5 kdy: 10. 08. 2018, 23:42:29 »
Bohuzel je problem to testovat po ruznych zmenach. Tezko budu xkrat za den uhanet zamestnance KB, at mi zkusi znovu poslat mail, natoz jejich IT. Uz jen podle toho DKIM to asi bude stat za to.
Ale dekuji za ochotu. V pondeli zkusim zapnout v postfixu debug na tu ip, tcpdump a zavolam te pani zda by mi to mohla poslat jeste jednou.

ET

Re:nedorucena posta - message too old
« Odpověď #6 kdy: 10. 08. 2018, 23:49:15 »
interval/timeout je 3dny, tak staci jednou denne mrknout do fronty, jestli tam neco nevisi, popr. si napis skript mail/sms do cronu

Sat1

Re:nedorucena posta - message too old
« Odpověď #7 kdy: 10. 08. 2018, 23:53:58 »
Dne dopoledne 2 z 9 nedorazily (zaroven to posilali v kopii na gmail) a ted:
Kód: [Vybrat]
root@linux:~# mailq
Mail queue is empty
Zacina mi to pripadat, ze to odmitne jeste neco pred postfixem, ale v iptables nic neni.

ET

Re:nedorucena posta - message too old
« Odpověď #8 kdy: 11. 08. 2018, 00:17:39 »
ze to odmitne jeste neco pred postfixem
to bys pak mel videt v tom tcpdumpu, kdyz nic nechytnes - idealne na pokusy povolit z ty jejich IP pouze port 25 (TLS/SSL docasne zakazat) at je tcpdump pekne citelnej a je videt i co kam (ne)slo - jestli to je do 20mailu/den tak to bude par MB (pak na ten tcpdump pust treba wireshark)

Lol Phirae

Re:nedorucena posta - message too old
« Odpověď #9 kdy: 11. 08. 2018, 01:10:23 »
A co jako řešíš? Proč tu mrdku nedáš do whitelistu? A když už ne, tak proč těm kreténům aspoň neřekneš, ať si spraví rozbitý DKIM?

 ::)

megalumen

Re:nedorucena posta - message too old
« Odpověď #10 kdy: 11. 08. 2018, 01:24:58 »
Mel bys predevsim u sebe v logu najit stejne cislo chyby. Protoze pokud tam neni, tak mozna mas spatne MX v DNS. A taky zkontrolovat, co ti presne dela amavisd a zda nemas shnile overovani DKIM.