Trying to decifer sendmail logs....

From what I can tell it all looks like spam bounces that are getting bounced back and then getting lost for some reason. Or something. It is just concerning me that maybe I'm loosing legitimate mail. I doubt
Lately I've noticed I've been getting a lot of these in my maillog: Losing ./qfhB7AvXZ20553: savemail panic SYSERR(root): savemail: cannot save rejected email anywhere Sendmail mail logs make little sense to me.... Here is an example: hB438B623222: to=oliver(a)deeper.co.nz, delay=3+07:49:20, xdelay=00:00:00, mailer=cyrus, pri=121146, relay=localhost, dsn=5.6.0, stat=Service unavailable hB438B623222: hB7AvXZ20553: DSN: Service unavailable hB7AvXZ20553: to=<jimmiegodwinan(a)yahoo.com>, delay=00:00:01, xdelay=00:00:01, mailer=esmtp, pri=30985, relay=mx1.mail.yahoo.com. [64.157.4.78], dsn=5.0.0, stat=Service unavailable hB7AvXZ20553: hB7AvXa20553: return to sender: Service unavailable hB7AvXa20553: to=postmaster, delay=00:00:00, xdelay=00:00:00, mailer=cyrus, pri=31085, relay=localhost [[UNIX: /var/imap/socket/lmtp]], dsn=5.6.0, stat=Service unavailable hB7AvXZ20553: Losing ./qfhB7AvXZ20553: savemail panic hB7AvXZ20553: SYSERR(root): savemail: cannot save rejected email anywhere this but it is a worry. I did a search on the web for error messages like this and they indicated that I might not have a postmaster alias setup. Well I don't. I have a "postmaster" mail account setup in cyrus so that spam bounces didn't fill up my personal mailbox. I get enough spam as it is. Which is why stuff like "to=postmaster, ... mailer=cyrus, ... stat=Service unavailable" worries me. If someone can help me identify what the fsck is wrong (if anything) and make those worrisome message go away I'd be most grateful (ie gifts would be dolled out). Regards -- Oliver Jones <oliver(a)deeper.co.nz> Deeper Design Limited

Hi Oliver, I've seen this many times. "Service Unavailable" is sendmails interpretation of the exit code from it's delivery process (in your case, probably cyrus' "deliver" binary). It has been one of three things in my experience. 1. The "deliver" binary does not have permission to write to the mail spool - unlikely if you've changed nothing, and it's just started happening. 2. The binary is corrupt. 3. The email is malformed - probably spam, not to worry. Actually, just a thought, check your 8-bit settings as well. Hope this helps. G. ----- Original Message ----- From: "Oliver Jones" <oliver(a)deeper.co.nz> To: "Waikato Linux Users Group" <wlug(a)list.waikato.ac.nz> Sent: Monday, December 08, 2003 12:12 AM Subject: [wlug] Trying to decifer sendmail logs....
Lately I've noticed I've been getting a lot of these in my maillog:
Losing ./qfhB7AvXZ20553: savemail panic SYSERR(root): savemail: cannot save rejected email anywhere
Sendmail mail logs make little sense to me.... Here is an example:
hB438B623222: to=oliver(a)deeper.co.nz, delay=3+07:49:20, xdelay=00:00:00, mailer=cyrus, pri=121146, relay=localhost, dsn=5.6.0, stat=Service unavailable hB438B623222: hB7AvXZ20553: DSN: Service unavailable hB7AvXZ20553: to=<jimmiegodwinan(a)yahoo.com>, delay=00:00:01, xdelay=00:00:01, mailer=esmtp, pri=30985, relay=mx1.mail.yahoo.com. [64.157.4.78], dsn=5.0.0, stat=Service unavailable hB7AvXZ20553: hB7AvXa20553: return to sender: Service unavailable hB7AvXa20553: to=postmaster, delay=00:00:00, xdelay=00:00:00, mailer=cyrus, pri=31085, relay=localhost [[UNIX: /var/imap/socket/lmtp]], dsn=5.6.0, stat=Service unavailable hB7AvXZ20553: Losing ./qfhB7AvXZ20553: savemail panic hB7AvXZ20553: SYSERR(root): savemail: cannot save rejected email anywhere
From what I can tell it all looks like spam bounces that are getting bounced back and then getting lost for some reason. Or something. It is just concerning me that maybe I'm loosing legitimate mail. I doubt this but it is a worry.
I did a search on the web for error messages like this and they indicated that I might not have a postmaster alias setup. Well I don't. I have a "postmaster" mail account setup in cyrus so that spam bounces didn't fill up my personal mailbox. I get enough spam as it is. Which is why stuff like "to=postmaster, ... mailer=cyrus, ... stat=Service unavailable" worries me.
If someone can help me identify what the fsck is wrong (if anything) and make those worrisome message go away I'd be most grateful (ie gifts would be dolled out).
Regards -- Oliver Jones <oliver(a)deeper.co.nz> Deeper Design Limited
_______________________________________________ wlug mailing list wlug(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/wlug

My sendmail is configured to deliver via LMTP (Unix socket listened to by Cyrus). So I don't think it uses Cyrus' deliver executable. I also wonder if it has anything to do with MailScanner. I run a two stage SMTP queue. SMTP mail is received and stored in /var/spool/mqueue.in and then MailScanner (www.mailscanner.info) scans it for viruses. If the mail is clean it moves the mail to /var/spool/mqueue which another sendmail process regularly flushes. How would I go about checking my 8 bit settings?? Regards On Mon, 2003-12-08 at 20:13, Greig McGill wrote:
Hi Oliver,
I've seen this many times. "Service Unavailable" is sendmails interpretation of the exit code from it's delivery process (in your case, probably cyrus' "deliver" binary).
It has been one of three things in my experience.
1. The "deliver" binary does not have permission to write to the mail spool - unlikely if you've changed nothing, and it's just started happening.
2. The binary is corrupt.
3. The email is malformed - probably spam, not to worry. Actually, just a thought, check your 8-bit settings as well.
Hope this helps.
G.
----- Original Message ----- From: "Oliver Jones" <oliver(a)deeper.co.nz> To: "Waikato Linux Users Group" <wlug(a)list.waikato.ac.nz> Sent: Monday, December 08, 2003 12:12 AM Subject: [wlug] Trying to decifer sendmail logs....
Lately I've noticed I've been getting a lot of these in my maillog:
Losing ./qfhB7AvXZ20553: savemail panic SYSERR(root): savemail: cannot save rejected email anywhere
Sendmail mail logs make little sense to me.... Here is an example:
hB438B623222: to=oliver(a)deeper.co.nz, delay=3+07:49:20, xdelay=00:00:00, mailer=cyrus, pri=121146, relay=localhost, dsn=5.6.0, stat=Service unavailable hB438B623222: hB7AvXZ20553: DSN: Service unavailable hB7AvXZ20553: to=<jimmiegodwinan(a)yahoo.com>, delay=00:00:01, xdelay=00:00:01, mailer=esmtp, pri=30985, relay=mx1.mail.yahoo.com. [64.157.4.78], dsn=5.0.0, stat=Service unavailable hB7AvXZ20553: hB7AvXa20553: return to sender: Service unavailable hB7AvXa20553: to=postmaster, delay=00:00:00, xdelay=00:00:00, mailer=cyrus, pri=31085, relay=localhost [[UNIX: /var/imap/socket/lmtp]], dsn=5.6.0, stat=Service unavailable hB7AvXZ20553: Losing ./qfhB7AvXZ20553: savemail panic hB7AvXZ20553: SYSERR(root): savemail: cannot save rejected email anywhere
From what I can tell it all looks like spam bounces that are getting bounced back and then getting lost for some reason. Or something. It is just concerning me that maybe I'm loosing legitimate mail. I doubt this but it is a worry.
I did a search on the web for error messages like this and they indicated that I might not have a postmaster alias setup. Well I don't. I have a "postmaster" mail account setup in cyrus so that spam bounces didn't fill up my personal mailbox. I get enough spam as it is. Which is why stuff like "to=postmaster, ... mailer=cyrus, ... stat=Service unavailable" worries me.
If someone can help me identify what the fsck is wrong (if anything) and make those worrisome message go away I'd be most grateful (ie gifts would be dolled out).
Regards -- Oliver Jones <oliver(a)deeper.co.nz> Deeper Design Limited
_______________________________________________ wlug mailing list wlug(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/wlug
_______________________________________________ wlug mailing list wlug(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/wlug
-- Oliver Jones » Director » oliver.jones(a)deeperdesign.com » +64 (21) 41 2238 Deeper Design Limited » +64 (7) 377 3328 » www.deeperdesign.com

My sendmail is configured to deliver via LMTP (Unix socket listened to by Cyrus). So I don't think it uses Cyrus' deliver executable.
True, and you said it's only happening to some email, correct? I've had this problem once before, but it was ALL mail, and the problem was that the permissions on the socket were too restrictive.
I also wonder if it has anything to do with MailScanner. I run a two stage SMTP queue. SMTP mail is received and stored in /var/spool/mqueue.in and then MailScanner (www.mailscanner.info) scans it for viruses. If the mail is clean it moves the mail to /var/spool/mqueue which another sendmail process regularly flushes.
Possibly - queue re-injection issue? Check Mailscanner archives maybe?
How would I go about checking my 8 bit settings??
In the MAILER definition, check that sendmail is using 7 as a flag rather than 8. I'm away from my docs and my internet connection is painfully slow, or I'd be more detailed...anyway, good luck! -- Greig McGill

True, and you said it's only happening to some email, correct? I've had this problem once before, but it was ALL mail, and the problem was that the permissions on the socket were too restrictive.
Well I don't think that is the case here.
In the MAILER definition, check that sendmail is using 7 as a flag rather than 8. I'm away from my docs and my internet connection is painfully slow, or I'd be more detailed...anyway, good luck!
It has a long set of flags. Not 8 or 7.... Regards -- Oliver Jones » Director » oliver.jones(a)deeperdesign.com » +64 (21) 41 2238 Deeper Design Limited » +64 (7) 377 3328 » www.deeperdesign.com
participants (2)
-
Greig McGill
-
Oliver Jones