Sponsor:

Server and Web Integrator
Link:
Kloxo-MR logo
6.5.0 or 7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR is open-source.
Donate and or Sponsorship always welcome.
Click to:
Click Here
Please login or register. 2024-04-25, 12:37:22

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - barrysmoke

Pages: 1 [2]
16
all ports open, all addresses in dns point to the outside address.
no firewall blocking, verified with a packet capture, for some reason qmail never tries to establish an smtp connection with the mail servers for the domains I'm sending to.
one is my gmail account, one is an account on a cpanel server I manage.  watched the exim log, and no connection attempt.  that's when I started doing packet captures to figure out what was going on.

doing a lot of qmail searching right now to see if I can get it working.

17
not blacklisted, at least on the servers I'm testing.  out of the 30 or so blacklists, I am still on 1 blacklist service, but the server I'm test sending to doesn't use it.

also I verified with that packet capture, its not making it that far.  the remote mail server never recieves a connection from kloxo-mr.  qmail isn't even trying to connect.

I think I have this figured out...but not sure how to fix it.
hours of research, led me to look at dns resolution of the local server, in relation to how qmail tries to send mail out.  it has its own dns checks, and some logic in there.  I'm using 1 to 1 NAT, so that my public ip hits a pfsense firewall, that gives me a lot more control, and security to avoid hacks.  qmail doesn't like this set up.  I saw where people had applied patches, and tweaks to make qmail work behind nat.  I just can't believe I can't add an ip alias on the local centos ethernet adapter, and trick qmail into working that way. 

I've tried setting dual A records in the local dns, one with one entry being the internal private ip of the kloxo-mr server, and I tried ip aliasing.  not sure what to do next, other than switch to exim/dovecot.

18
oh, and if I try to disable spamdyke, sending breaks completely.
the mail sits in my client's outbox, tries to send, and qmail logs this:
Code: [Select]
Aug 24 04:14:12 srv1 smtp-ssl: 13560 < ?????????????????????????????????????????#???????????+
Aug 24 04:14:12 srv1 smtp-ssl: 13560 > 220 srv1.phatlabz.com - Welcome to Qmail ESMTP?
Aug 24 04:14:12 srv1 smtp-ssl: 13560 > 502 unimplemented (#5.5.1)?
Aug 24 04:14:12 srv1 smtp-ssl: 13560 > 502 unimplemented (#5.5.1)?
Aug 24 04:14:12 srv1 smtp-ssl: 13560 > 502 unimplemented (#5.5.1)?
Aug 24 04:14:12 srv1 smtp-ssl: 13560 < [EOF]
Aug 24 04:14:12 srv1 smtp-ssl: tcpserver: end 13560 status 256
Aug 24 04:14:12 srv1 smtp-ssl: tcpserver: status: 0/100
Aug 24 04:14:12 srv1 smtp-ssl: 13560 > [EOF]
Aug 24 04:14:12 srv1 smtp-ssl: tcpserver: status: 1/100

that makes sense, spamdyke was allowing the mail to come on in.
so, this issue might actually be in qmail-toaster



19
I'm a linux engineer, so I don't post unless I can't figure things out.
all mail sending is getting this in the /var/log/maillog :
Code: [Select]
Aug 24 03:03:02 srv1 send: delivery 9: deferral: Sorry,_I_wasn't_able_to_establish_an_SMTP_connection._(#4.4.1)/
Aug 24 03:03:02 srv1 send: status: local 0/10 remote 1/60
Aug 24 03:03:02 srv1 send: delivery 10: deferral: Sorry,_I_wasn't_able_to_establish_an_SMTP_connection._(#4.4.1)/
Aug 24 03:03:02 srv1 send: status: local 0/10 remote 0/60

I couldn't figure out why an smtp connection can't be established, tried to telnet manually to the servers I'm trying to send to, and it works fine, so no firewall issue between the server, and the recipient smtp servers.

then, I figured out, its not even trying.  I ran a packet capture on the firewall between this server, and the internet.  full packet capture. 
here is a summary of what I saw, I can attach the capture if you want to see it.
1)my mail client connects to server, sends email over smtp-ssl
2)qmail receives the mail, and does some name server querying of the ip address the sender is using, but does no querying on the recipients domain/mail server, I saw no query for an mx record, or anything.

with that information I suspected spamdyke, so I used kloxo-mr to whitelist my sending ip, so spamdyke would ignore it.

result is, I see a lot fewer queries for my mail client, 1 actually that I can find in this large dump file
(which on my home network, resolves to x.x.x.x.in-addr.arpa PTR x-x-x-x.fidanet.com)

I see the dns queries for my personal gmail account mx record, and my account on another private server I have access to its smtp log files.
no smtp connection was even attempted to either server.  I think something is broken in implementation, or combination of communication between spamdyke, and qmail smtp, it defers rather than actually attempting to try an smtp connection to send the mail.

I can provide remote access if you would like to login and check it out.

20
right, I disabled again, but wanted you to know that in your scripts, it looks for the /var/qmail/control/softlimit file, and in troubleshooting, I discovered actually putting that there breaks things, so wanted you to know.


21
I was looking at softlimit, if it was needed to fix an imap problem I was having with outlook.
turned out to be an outlook bug, but in the process, I found setting /var/qmail/control/softlimit triggers these service start failures:
Code: [Select]
Aug 24 01:23:24 srv1 submission: ./run: line 68: exec: 64000000: not found
Aug 24 01:23:24 srv1 smtp: ./run: line 69: exec: 64000000: not found
Aug 24 01:23:24 srv1 pop3: envdir: fatal: unable to run 64000000: file does not exist
Aug 24 01:23:24 srv1 smtp-ssl: ./run: line 69: exec: 64000000: not found
Aug 24 01:23:24 srv1 pop3-ssl: envdir: fatal: unable to run 64000000: file does not exist
Aug 24 01:23:24 srv1 imap4: envdir: fatal: unable to run 64000000: file does not exist
I think /var/bin/softlimit is supposed to preceed your edits, but I'll let you look into it, and test it out.

22
yep, that fixed it, yay!
was there a bug in the previous version, or just an installation error this fixed...no worries, I'm in business. ecstatic!

23
my bad, there was an update waiting this morning, its running now.

24
yep, did that many times, any new updates on the way?

25
oh, and to reproduce the hung server page, I click on servers, localhost which generates this link, and does render the background page, and top bar, but nothing else:
Code: [Select]
https://xxx.xxx.xxx.xxx:7777/display.php?frm_action=list&frm_o_cname=pserver

26
first, I'll say this is the closest to a fully working kloxo-mr I've been in 2 days. 
everything working perfectly except 2 things, a blank mail settings page, with no errors displayed.  I can't even find an error in a log file, telling me what's going on.

here is the link that is generated
Code: [Select]
https://xxx.xxx.xxx.xxx:7777/display.php?frm_action=updateform&frm_subaction=update&frm_o_o[0][class]=pserver&frm_o_o[0][nname]=localhost&frm_o_o[1][class]=servermail
I've re-installed *-toaster, ran cleanup, fix-all, fixmail-all, fixweb-all, done sh /script/upcp many many times, all of this has fixed several issues, but this one.
I just have no idea what to do next.
how much to have you take a look, I would pay consulting, or even just donate a bit.

here is my sysinfo:
Code: [Select]
[root@srv1 script]# sh sysinfo
A. Control Panel:
   - Kloxo-MR: 7.0.0.c-2017082301
   - Web: hiawatha-10.6.0-f.1.mr.el7.x86_64
   - PHP: php56s - 5.6.31-1.ius.centos7 (fpm mode)
B. Plateform:
   - OS: CentOS Linux release 7.3.1611 (Core) x86_64
   - Hostname: srv1.phatlabz.com
C. Services:
   1. MySQL: MariaDB-server-10.0.32-1.el7.centos.x86_64
   2. PHP:
      - Installed:
        - Branch: php56u-cli-5.6.31-1.ius.centos7.x86_64
      - Used: --PHP Branch--
      - Multiple: disable
   3. Web Used: apache
     - Hiawatha: hiawatha-10.6.0-f.1.mr.el7.x86_64
     - Lighttpd: lighttpd-1.4.45-1.el7.x86_64
     - Nginx: nginx-1.13.4-1.el7.ngx.x86_64
     - Apache: httpd24u-2.4.27-1.ius.centos7.x86_64
       - PHP Type: php-fpm_event
       - Secondary PHP: off
   4. WebCache: none
     - ATS: --uninstalled--
     - Squid: --uninstalled--
     - Varnish: --uninstalled--
   5. Dns: bind
     - Bind: bind-9.9.9-1.mr.el7.x86_64
     - DJBDns: djbdns-1.05-17.4.mr.el7.x86_64
     - NSD: nsd-4.1.16-1.el7.x86_64
     - PowerDNS: pdns-4.0.3-1.el7.MIND.x86_64
     - Yadifa: yadifa-2.2.5-1.mr.el7.x86_64
   6. Mail: qmail-toaster-1.03-1.3.57.mr.el7.x86_64
      - pop3/imap4: courier-imap-toaster-4.1.2-1.3.20.mr.el7.x86_64
      - smtp: qmail-toaster-1.03-1.3.57.mr.el7.x86_64
      - spam: --uninstalled--
   7. FTP: pure-ftpd
      - pure-ftpd: pure-ftpd-1.0.42-3.el7.x86_64
   8. Stats: awstats
      - awstats: kloxomr-stats-awstats-7.6-1.mr.noarch
D. Memory:
              total        used        free      shared  buff/cache   available
Mem:           2505        1020         857           9         627        1408
Swap:          2047           0        2047
E. Disk Space:
Filesystem           Size  Used Avail Use% Mounted on
/dev/mapper/cl-root   50G  2.6G   48G   6% /


*** Process Time: 00:00:00:20.20962 (dd:hh:mm:ss:xxxxxx) ***

* Note: run 'sh sysinfo -y' if you want run 'fix-service-list' also
        (importance after Kloxo-MR update)

Pages: 1 [2]

MRatWork Affiliates:    BIGRAF(R) Inc.    House of LMAR    EFARgrafix
Click Here

Page created in 0.063 seconds with 17 queries.

web stats analysis