Mail traffic stats not working anymore

Discussion in 'General' started by BenM, Jun 21, 2020.

  1. BenM

    BenM Member

    Hi,

    The mailtraffic stats are not working anymore. Last log in de database is from 2019.
    First part of the cron.log

    Sun Jun 21 00:04:48 CEST 2020 sh: line 0: cd: ?: No such file or directory
    Sun Jun 21 00:04:48 CEST 2020 sh: line 0: cd: ?: No such file or directory
    Sun Jun 21 00:04:48 CEST 2020 sh: line 0: cd: ?: No such file or directory
    Sun Jun 21 00:04:48 CEST 2020 sh: line 0: cd: ?: No such file or directory
    Sun Jun 21 00:04:48 CEST 2020 sh: line 0: cd: ?: No such file or directory
    Sun Jun 21 00:05:02 CEST 2020
    Sun Jun 21 00:05:02 CEST 2020
    Sun Jun 21 00:05:02 CEST 2020 finished.
    Sun Jun 21 00:05:17 CEST 2020 tar: ./dev/log: socket ignored
    Sun Jun 21 00:05:53 CEST 2020 tar: ./dev/log: socket ignored

    php /usr/local/ispconfig/server/cron_debug.php --cronjob=100-mailbox_stats.inc.php gives finished. statement
     
  2. BenM

    BenM Member

    Till, can you give me a hint?
     
  3. till

    till Super Moderator Staff Member ISPConfig Developer

    The mail log file of the system is there and it contains current records?
     
  4. BenM

    BenM Member

    what file must this exacly be, got a lot of logfiles?
     
  5. till

    till Super Moderator Staff Member ISPConfig Developer

    The mail log file is either /var/log/mail.log or /var/log/maillog
     
  6. BenM

    BenM Member

    Yes, /var/log/mail.log
    30-6-2020 24.310 kb, 644 owner root adm
     
  7. BenM

    BenM Member

    whats my next check?
     
  8. Th0m

    Th0m Active Member HowtoForge Supporter

    Can you share the content of mail.log?
     
  9. BenM

    BenM Member

    Yes, i can, but this system wil not support larger files en simply past info is blocked on words.
    Jun 28 06:25:19 server2 postfix/smtps/smtpd[9600]: connect from unknown[212.70.149.66]
    Jun 28 06:26:06 server2 postfix/smtpd[10585]: connect from best4you.icu[51.68.148.225]
    Jun 28 06:26:06 server2 postfix/smtpd[10585]: NOQUEUE: reject: RCPT from best4you.icu[51.68.148.225]: 454 4.7.1 <[email protected]>: Relay access denied; from=<> to=<[email protected]> proto=ESMTP helo=<best4you.icu>
    Jun 28 06:26:06 server2 postfix/smtpd[10585]: disconnect from best4you.icu[51.68.148.225] ehlo=1 mail=1 rcpt=0/1 data=0/1 quit=1 commands=3/5
    Jun 28 06:26:14 server2 postfix/smtps/smtpd[11104]: connect from unknown[40.115.142.48]
    Jun 28 06:26:20 server2 postfix/smtps/smtpd[9600]: warning: unknown[212.70.149.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jun 28 06:26:23 server2 postfix/smtps/smtpd[11104]: warning: unknown[40.115.142.48]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jun 28 06:26:23 server2 dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=193.169.255.18, lip=94.130.186.47, session=<kGErWB2pcCbBqf8S>
    Jun 28 06:26:24 server2 postfix/smtps/smtpd[11104]: disconnect from unknown[40.115.142.48] ehlo=1 auth=0/1 quit=1 commands=2/3
    Jun 28 06:26:28 server2 postfix/smtps/smtpd[9600]: lost connection after AUTH from unknown[212.70.149.66]
    Jun 28 06:26:28 server2 postfix/smtps/smtpd[9600]: disconnect from unknown[212.70.149.66] ehlo=1 auth=0/1 rset=1 commands=2/3
    Jun 28 06:26:50 server2 postfix/smtpd[10585]: connect from unknown[185.234.217.66]
    Jun 28 06:26:52 server2 postfix/smtpd[10585]: warning: unknown[185.234.217.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jun 28 06:26:52 server2 postfix/smtpd[10585]: lost connection after AUTH from unknown[185.234.217.66]
    Jun 28 06:26:52 server2 postfix/smtpd[10585]: disconnect from unknown[185.234.217.66] ehlo=1 auth=0/1 commands=1/2
    Jun 28 06:27:08 server2 postfix/smtpd[10585]: connect from unknown[185.234.216.206]
    Jun 28 06:27:10 server2 postfix/smtpd[10585]: warning: unknown[185.234.216.206]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jun 28 06:27:10 server2 postfix/smtpd[10585]: lost connection after AUTH from unknown[185.234.216.206]
    Jun 28 06:27:10 server2 postfix/smtpd[10585]: disconnect from unknown[185.234.216.206] ehlo=1 auth=0/1 commands=1/2
    Jun 28 06:27:37 server2 dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=<[email protected]>, method=PLAIN, rip=193.169.255.18, lip=94.130.186.47, session=<BIVKXB2pOAfBqf8S>
    Jun 28 06:27:55 server2 postfix/smtps/smtpd[11104]: connect from unknown[212.70.149.66]
    Jun 28 06:28:44 server2 postfix/smtps/smtpd[11175]: connect from unknown[40.115.142.48]
    Jun 28 06:28:53 server2 postfix/smtps/smtpd[11175]: warning: unknown[40.115.142.48]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
    Jun 28 06:28:55 server2 postfix/smtps/smtpd[11175]: disconnect from unknown[40.115.142.48] ehlo=1 auth=0/1 quit=1 commands=2/3
    Jun 28 06:28:57 server2 postfix/smtps/smtpd[11104]: warning: unknown[212.70.149.66]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
     
  10. BenM

    BenM Member

    Hi Thom, can you work with this?
     
  11. Th0m

    Th0m Active Member HowtoForge Supporter

    What version of ISPConfig are you using? Do you have a single or multi server setup? Are the stats working for websites on that server?
     
  12. elmacus

    elmacus Active Member HowtoForge Supporter

  13. BenM

    BenM Member

    Version 3.1.15p3 single setup. Stats for the websites are working okay.
     
  14. BenM

    BenM Member

    Yes, i use rspamd. and yes i did a reboot
     
  15. BenM

    BenM Member

    Oops, did not expect this to be a problem!
     
  16. elmacus

    elmacus Active Member HowtoForge Supporter

    Log in to bugtracker and vote for it to be fixed: thumbup ;-)
     
  17. BenM

    BenM Member

    I will give this a go, same for DNSSEC. Thanks for your FB
     
  18. Th0m

    Th0m Active Member HowtoForge Supporter

    What do you mean with this?
     
  19. BenM

    BenM Member

    a vote for dnssec for it to be fixed :)
     
  20. Th0m

    Th0m Active Member HowtoForge Supporter

    Several parts are "broken", so I'm wondering which you mean
     

Share This Page