HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   General (http://www.howtoforge.com/forums/forumdisplay.php?f=15)
-   -   4000 bounced email in one hour (http://www.howtoforge.com/forums/showthread.php?t=9626)

Hellbound 7th January 2007 10:13

4000 bounced email in one hour
 
hi guys
since yesterday I had email problem so I was keep sending email for test purpose, I don't think the total was more than 200 email.
however today I could fix it after all by putting the correct hostname but now one of my box keep receive this email for more than 4000 times in last one hour:

Code:

This is the Postfix program at host host2.persiasys.com.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to <postmaster>

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

                        The Postfix program

<admispconfig@localhost.localdomain>: Host or domain name not found. Name
    service error for name=localhost.localdomain type=A: Host not found

Reporting-MTA: dns; host2.persiasys.com
X-Postfix-Queue-ID: 51EEA18A877C
X-Postfix-Sender: rfc822; web6_root@host2.persiasys.com
Arrival-Date: Sun,  7 Jan 2007 17:08:07 +0800 (MYT)

Final-Recipient: rfc822; admispconfig@localhost.localdomain
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; Host or domain name not found. Name service error
    for name=localhost.localdomain type=A: Host not found

Subject:          Mailsize: web6_root
Sender:          S. Mohammad add
Recipient:          undisclosed-recipients:;
Date:          Today 10:08

2630


till 7th January 2007 11:48

Please add localhost.localdomain at the end of the file /etc/postfix/local-host-names on your server and restart postfix. Make also sure that localhost.localdomain points to the IP 127.0.0.1 in your /etc/hosts file.

Hellbound 7th January 2007 13:49

thanks for the reply
I've added that, no I can receive email with no problem.

but there is small problem.
the email in roundcube shows up as : blahblah@www.ir-sr.com instead of blahblah@ir-sr.com

falko 8th January 2007 22:53

Quote:

Originally Posted by Hellbound
the email in roundcube shows up as : blahblah@www.ir-sr.com instead of blahblah@ir-sr.com

You must set the correct sender address in Roundcube, just as you do in every other email client.

friday 8th January 2009 16:38

Quote:

Originally Posted by till (Post 55317)
Please add localhost.localdomain at the end of the file /etc/postfix/local-host-names on your server and restart postfix. Make also sure that localhost.localdomain points to the IP 127.0.0.1 in your /etc/hosts file.

I just experienced this today on an email server that has ran flawlessly for nearly 2 years. About 4000 bounced emails, and many of those replies being copied to many email boxes on our email server.

Really. Really. Weird.

Added this above fix, and it seemed to have worked. I just have to know. What gave or broke?

Two years of being good. Then... BAM! 4000 emails being bounced. All having the same "admispconfig@localhost.localdomain name service for name localhost.localdomain type=AAAA: Host not found" message.

Was someone in my network being naughty? Do I need to ram their mouse and keyboard up their "you-know-what" for making me research this issue?

iratik 8th January 2009 23:08

ISPConfig Flooding System with E-Mails
 
I'm getting emails every second on the local machine to admispconfig@localhost.localdomain. I realize ispconfig uses this to send mail traffic statistics to itself. The problem is.. I don't have ispconfig.

I uninstalled ispconfig over a month ago .. there are no cron jobs no admispconfig user... and there is no /home/admispconfig anymore.

In fact, the emails were continuing to be sent despite there being no admispconfig user, and since 5-6 were being sent every second, each one would create a failure notice, causing a cascade of errors that have flooded my logs and taken up significant resources on our server for weeks now.

Please let me know how to stop this automated process, if you cannot do that... can you tell me how this automated process works because it apparently does not use cron.

till 9th January 2009 09:48

This is built into the procmail recipes for every mail account. You should have deleted every website and mailuser before you have deleted ispconfig.

So to stop this, remove the procmail recipes in the home directory from every user on your server.

iratik 9th January 2009 12:17

Procmail Local Mail Flooding
 
Here is what i did to hopefully fix the issue . The server where ispconfig was installed was a production server. As much as I would like to say that I had a redundant setup where i could take this machine down and have all our production domains stay up without interuption, I do not.
There was no way I could consider deleting all the websites and mail directories.
The ispconfig removal script gave me the choice of removing all the sites and ispconfig, or just removing ispconfig. I chose to only remove ispconfig.

Here is my solution (the commands prefixed with : are vim commands)

---------------------------------------------------------------------

locate .procmailrc > ~/tmp/procmailrc_locations
vim ~/tmp/procmailrc_locations
:%s/^\(.*\)$/cat \1 | sed -e 's\/^INCLUDERC\/## INCLUDERC\/' > \1
:w
:!bash ~/tmp/procmailrc_locations
locate .mailsizerc | xargs rm


All times are GMT +2. The time now is 23:27.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.