Can't go to Mail Queue Administration

P

phiizik

New member
Joined
Sep 14, 2010
Messages
8
hello!

I want to create many adresses such as
[email protected]
[email protected]
[email protected]

and redirect it to [email protected]

But..... few problems! :)

I can't go at Mail Queue Administration at Admin-Level
Your connection has timed out
Click to expand...
WHY)
in var/log/maillog i has
Sep 13 16:15:22 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (auth failed, 1 attempts): user=<lizdy>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:15:25 hosted-by dovecot[2565]: auth(default): shadow(sybase,83.19.8.35): unknown user
Sep 13 16:15:25 hosted-by dovecot[2565]: auth(default): passwd-file(sybase,83.19.8.35): no passwd file: /etc/virtual//passwd
Sep 13 16:15:25 hosted-by dovecot[2565]: pop3-login: Disconnected: Inactivity (no auth attempts): rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:15:28 hosted-by dovecot[2565]: auth(default): shadow(oracle,83.19.8.35): unknown user
Sep 13 16:15:28 hosted-by dovecot[2565]: auth(default): passwd-file(oracle,83.19.8.35): no passwd file: /etc/virtual//passwd
Sep 13 16:15:30 hosted-by dovecot[2565]: auth(default): shadow(lizdy,83.19.8.35): unknown user
Sep 13 16:15:30 hosted-by dovecot[2565]: auth(default): passwd-file(lizdy,83.19.8.35): no passwd file: /etc/virtual//passwd
Sep 13 16:15:30 hosted-by dovecot[2565]: auth(default): shadow(backup,83.19.8.35): unknown user
Sep 13 16:15:30 hosted-by dovecot[2565]: auth(default): passwd-file(backup,83.19.8.35): no passwd file: /etc/virtual//passwd
Sep 13 16:15:32 hosted-by dovecot[2565]: imap-login: Disconnected (auth failed, 1 attempts): user=<sybase>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:15:32 hosted-by dovecot[2565]: pop3-login: Disconnected: Inactivity (no auth attempts): rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:15:32 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (no auth attempts): rip=83.19.8.35, lip=62.212.67.131
Sep 13 16:15:33 hosted-by dovecot[2565]: pop3-login: Disconnected: Inactivity (auth failed, 1 attempts): user=<account>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:15:33 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (auth failed, 1 attempts): user=<lizdy>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:15:34 hosted-by dovecot[2565]: pop3-login: Disconnected: Inactivity (no auth attempts): rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:15:34 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (no auth attempts): rip=83.19.8.35, lip=62.212.67.131
Sep 13 16:15:35 hosted-by dovecot[2565]: imap-login: Disconnected (auth failed, 1 attempts): user=<oracle>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:15:37 hosted-by dovecot[2565]: imap-login: Disconnected (auth failed, 1 attempts): user=<backup>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:15:37 hosted-by dovecot[2565]: imap-login: Disconnected (auth failed, 1 attempts): user=<lizdy>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:15:37 hosted-by dovecot[2565]: pop3-login: Disconnected: Inactivity (auth failed, 1 attempts): user=<data>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:15:45 hosted-by dovecot[2565]: pop3-login: Disconnected: Inactivity (no auth attempts): rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:15:51 hosted-by dovecot[2565]: pop3-login: Disconnected: Inactivity (auth failed, 1 attempts): user=<oracle8>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:16:01 hosted-by dovecot[2565]: auth(default): shadow(lizdy,83.19.8.35): unknown user
Sep 13 16:16:01 hosted-by dovecot[2565]: auth(default): passwd-file(lizdy,83.19.8.35): no passwd file: /etc/virtual//passwd
Sep 13 16:16:06 hosted-by dovecot[2565]: imap-login: Disconnected (auth failed, 1 attempts): user=<lizdy>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:16:06 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (no auth attempts): rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:16:08 hosted-by dovecot[2565]: imap-login: Disconnected (auth failed, 1 attempts): user=<lizdy>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:16:09 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (auth failed, 1 attempts): user=<root>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:16:09 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (no auth attempts): rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:16:16 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (no auth attempts): rip=83.19.8.35, lip=62.212.67.131
Sep 13 16:16:18 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (auth failed, 1 attempts): user=<root>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:16:18 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (auth failed, 1 attempts): user=<pwrchute>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:16:20 hosted-by dovecot[2565]: auth(default): shadow(pwrchute,83.19.8.35): unknown user
Sep 13 16:16:20 hosted-by dovecot[2565]: auth(default): passwd-file(pwrchute,83.19.8.35): no passwd file: /etc/virtual//passwd
Sep 13 16:16:21 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (no auth attempts): rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:16:22 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (auth failed, 1 attempts): user=<root>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:16:22 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (auth failed, 1 attempts): user=<oracle8>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:16:23 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (auth failed, 1 attempts): user=<informix>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:16:24 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (no auth attempts): rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:16:27 hosted-by dovecot[2565]: imap-login: Disconnected (auth failed, 1 attempts): user=<pwrchute>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:16:28 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (auth failed, 1 attempts): user=<server>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:16:30 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (auth failed, 1 attempts): user=<user>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:16:39 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (auth failed, 1 attempts): user=<data>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:16:44 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (auth failed, 1 attempts): user=<oracle8>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:16:45 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (no auth attempts): rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:16:48 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (auth failed, 1 attempts): user=<server>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 13 16:17:04 hosted-by dovecot[2565]: imap-login: Disconnected: Inactivity (auth failed, 1 attempts): user=<sybase>, method=PLAIN, rip=83.19.8.35, lip=62.212.67.162
Sep 14 19:24:36 hosted-by dovecot[2565]: dovecot: Killed with signal 15 (by pid=21617 uid=0 code=kill)
Sep 14 19:24:37 hosted-by dovecot[21669]: Dovecot v1.2.11 starting up (core dumps disabled)
Click to expand...

sorry for bad English
help me please
 
- Login as admin
- Go to 'Administrator Settings'
- Increase the 'Timeout' to e.g. 900 (15 minutes)
- Wait a few minutes so the changes are made
- Try again the Mail Queue Administration
 
I did it

[root@intok /]# killall -9 exim ; for file in /var/spool/exim/input/* /var/s pool/exim/msglog/* ; do rm -rf $file ; done ; /etc/init.d/exim restart

has been no effect :(
 
I'd work out what/who is causing the queue to get large... Is it via php or actual email locally.... When you found out and shut that aspect up, the clean up will be easier......
 
phiizik said:
[root@intok /]# killall -9 exim ; for file in /var/spool/exim/input/* /var/s pool/exim/msglog/* ; do rm -rf $file ; done ; /etc/init.d/exim restart

has been no effect :(
Click to expand...
Is that a typo in your post above, or in your actual command? If in your command, rerun it with out those spaces between the s and the pool.

Jeff
 
to Peter Laws
locally? mmm.... how i can find the reason? maybe some log file

to jlasman
i tried accurately, without spaces between the s and the pool


in admin-level i saw
2010-09-17 19:59:03 1OwfDC-00080M-Cz SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx1.gmx.net [213.165.64.102]: 450 4.3.2 Too many mails (mail bomb), try again in 1 hour(s) 12 minute(s) and see ( http://portal.gmx.net/serverrules ) {mx116}
2010-09-17 19:59:03 1OwfDC-00080L-Au == [email protected] R=lookuphost T=remote_smtp defer (-44): SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx1.gmx.net [213.165.64.102]: 450 4.3.2 Too many mails (mail bomb), try again in 1 hour(s) 12 minute(s) and see ( http://portal.gmx.net/serverrules ) {mx093}
2010-09-17 19:59:03 1OwfDC-00080B-71 == [email protected] R=lookuphost T=remote_smtp defer (-44): SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx0.gmx.net [213.165.64.100]: 450 4.3.2 Too many mails (mail bomb), try again in 1 hour(s) 12 minute(s) and see ( http://portal.gmx.net/serverrules ) {mx096}
2010-09-17 19:59:03 1OwfDC-00080K-B6 == [email protected] R=lookuphost T=remote_smtp defer (-44): SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx0.gmx.net [213.165.64.100]: 450 4.3.2 Too many mails (mail bomb), try again in 1 hour(s) 12 minute(s) and see ( http://portal.gmx.net/serverrules ) {mx011}
2010-09-17 19:59:03 1OwfDC-00080W-Ge == [email protected] R=lookuphost T=remote_smtp defer (-44): SMTP error from remote mail server after RCPT TO:<[email protected]>: host mx1.gmx.net [213.165.64.102]: 450 4.3.2 Too many mails (mail bomb), try again in 1 hour(s) 12 minute(s) and see ( http://portal.gmx.net/serverrules ) {mx044}
Click to expand...
what is it? may be the reason

i saw two scary words! MAIL BOMB :)
 
I'm not sure why you posted your friend's email address? I hope you got his permission :).

It appears that gmx.com thinks your friend is getting mail-bombed, so his account is locked. Do they think you're doing the mail-bombing? Maybe. It appears that you're sending many email every minute to them. Why? I don't know because I haven't studied your logs.

You might be getting bombed yourself, from their server, and trying to return undeliverable messages, especially if your friend has a compromised server.

Which is possible; we're getting hundreds of attempts every day across our network from a virus (worm? I'm not sure of the technology) which is infecting a lot of desktp systems through an attached html file with a javascript attack and we can't block html attachments because if we did we'd be blocking every html email. I always said html email was a lousy idea. It's with mixed emotions that I notice I've always been right.

Did you ever succeed in emptying your queue? That's your first requirement; you're queue is full of emails which your server continues to try to deliver; soon you'll be listed as a spammer on one or more blocklists, if you're not already.

If you can't do it following suggestions posted here, then try this last step, and if it doesn't work, or if the queue starts filling again, consider hiring us or someone else to find and fix all your email problems.

Try this:

1) turn off exim from the DirectAdmin control panel

2) run these commands:
Code: 
# cd /var/spool/exim
# mv input old-input
# mv msglog old-msglog
# mkdir input
# mkdir msglog
# chown mail:mail input
# chown mail:mail msglog
3) Restart exim from the control panel.

Then the old directories won't be used; you can delete them later at your convenience but at least your mail server won't be spamming.

If the queues fill up again then you need someone who understands what's going on, whether us or someone else, to study your email configuration.

Note that when the latest exim.conf (SpamBlocker Version) comes out later today I'd definitely upgrade; it may help.

Jeff
 
Maybe you should check the /server-status page if there is a php script thats spamming with your mailserver.
 
i did it! cool! it works!
can i delete old folders with command
cd /var/spool/exim; rm -r old-input; rm -r old-msglog;
Click to expand...
I'm afraid that I can remove something else.... :o
 
You must log in or register to reply here.
Back
Top