HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)

- Server Operation (http://www.howtoforge.com/forums/forumdisplay.php?f=5)

- - Mail log entries? (http://www.howtoforge.com/forums/showthread.php?t=745)

Mail log entries?

Could anyone enlighten me as to what happened to cause these entries? Is it spam that was rejected or something of the sort?

Quote:

Oct 3 05:57:32 server1 postfix/smtpd[13711]: cannot load Certificate Authority data
Oct 3 05:57:32 server1 postfix/smtpd[13711]: warning: TLS library problem: 13711:error:02001002:system library:fopen:No such file or directory:bss_file.c:104:fopen('/etc/postfix/ssl/cacert.pem','r'):
Oct 3 05:57:32 server1 postfix/smtpd[13711]: warning: TLS library problem: 13711:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:107:
Oct 3 05:57:32 server1 postfix/smtpd[13711]: warning: TLS library problem: 13711:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:by_file.c:279:
Oct 3 05:57:32 server1 postfix/smtpd[13711]: connect from unknown[219.133.246.126]
Oct 3 05:57:33 server1 postfix/smtpd[13711]: NOQUEUE: reject: RCPT from unknown[219.133.246.126]: 554 <popogigi1975@yahoo.com.tw>: Relay access denied; from=<xdfgszdrgser@aol.com> to=<popogigi1975@yahoo.com.tw> proto=SMTP helo=<67.141.5.42>
Oct 3 05:58:24 server1 postfix/smtpd[13711]: lost connection after RCPT from unknown[219.133.246.126]
Oct 3 05:58:24 server1 postfix/smtpd[13711]: disconnect from unknown[219.133.246.126]
Oct 3 06:01:44 server1 postfix/anvil[13713]: statistics: max connection rate 1/60s for (smtp:219.133.246.126) at Oct 3 05:57:32
Oct 3 06:01:44 server1 postfix/anvil[13713]: statistics: max connection count 1 for (smtp:219.133.246.126) at Oct 3 05:57:32
Oct 3 06:01:44 server1 postfix/anvil[13713]: statistics: max cache size 1 at Oct 3 05:57:32

Quote:

Oct 3 05:57:32 server1 postfix/smtpd[13711]: warning: TLS library problem: 13711:error:02001002:system library:fopen:No such file or directory:bss_file.c:104:fopen('/etc/postfix/ssl/cacert.pem','r'):

This is because of a missing file (/etc/postfix/ssl/cacert.pem), but it's only a warning, nothing serious.

Quote:

Oct 3 05:57:33 server1 postfix/smtpd[13711]: NOQUEUE: reject: RCPT from unknown[219.133.246.126]: 554 <popogigi1975@yahoo.com.tw>: Relay access denied; from=<xdfgszdrgser@aol.com> to=<popogigi1975@yahoo.com.tw> proto=SMTP helo=<67.141.5.42>

There someone tried to send emails over your server; might be a spammer, but as you can see he wasn't successful... :D

Cool! Its nice to see the defense in action.

I had a similar entry that was showing that an email was blocked that I actually sent from another one of my email accounts (not hosted from my server). Where do I configure to allow access for this account? FYI, it is an identical error as the one I posted above, but with a known sender that I want to allow.

Quote:

Originally Posted by ctroyp

If you're sending with an email client, just enter your ISPConfig server as SMTP server, and use a username and password from your ISPConfig box.

Quote:

Originally Posted by falko

If you're sending with an email client, just enter your ISPConfig server as SMTP server, and use a username and password from your ISPConfig box.

I must have explained wrong...I am trying to send an email to this account using a yahoo account. The email doesn't come in the this account and it does not get kicked back to my yahoo account (which tells me it went somewhere). By the way, I am using UebiMiau to access the mail hosted from my server.

Quote:

Originally Posted by ctroyp

The mail from Yahoo should arrive without problems, unless the MX record for your domain is pointing to some other server. I'd check that ASAP.
Do you see anything in your mail logs when sending an email from Yahoo?

Actually, it does kick back to yahoo. It says that the message the remote server did not like the recipient "Relay acces denied".

Furthermore, I can access my email using Uebmiau but there are no messages. And, in my maillog, I get the message similar to what I posted earlier "relay access denied".

Where is it that I can setup the email aliases for my accounts within ISPConfig? Or, where can I locate the manual that will have this info?

Quote:

Originally Posted by ctroyp

Actually, it does kick back to yahoo. It says that the message the remote server did not like the recipient "Relay acces denied".

Then it seems as if you haven't created that email address in ISPConfig. :rolleyes:
Go to the email tab of the web site (domain) in question and create the appropriate email address.

Here is the actual entry in the maillog from my yahoo test mail:

Quote:

Oct 3 14:21:26 server1 postfix/smtpd[25562]: connect from web36204.mail.mud.yahoo.com[209.191.68.230]
Oct 3 14:21:26 server1 postfix/smtpd[25562]: NOQUEUE: reject: RCPT from web36204.mail.mud.yahoo.com[209.191.68.230]: 554 <web2_ctp@domain2.com>: Relay access denied; from=<me@yahoo.com> to=<web2_ctp@domain2.com> proto=SMTP helo=<web36204.mail.mud.yahoo.com>
Oct 3 14:21:26 server1 postfix/smtpd[25562]: disconnect from web36204.mail.mud.yahoo.com[209.191.68.230]

Quote:

Originally Posted by falko

Then it seems as if you haven't created that email address in ISPConfig. :rolleyes:
Go to the email tab of the web site (domain) in question and create the appropriate email address.

The account has been created under the "User & Email" tab of the respective domain. ...everything looks right?