Mail not coming in for one Mailbox

codes9

Verified User
Joined
Sep 5, 2019
Messages
73
Having an issue with one Mailbox that stopped receiving mail without running out of Quota (renamed to [email protected] in the logs below). It's got around 2Gb of mail with a 6Gb quota.

What I've done so far:
Exim.log
2021-05-13 22:02:41 1lhHXb-00FY4z-Li <= [email protected] U=mail P=spam-scanned S=19902 id=[email protected] T="test" from <[email protected]> for [email protected]
2021-05-13 22:02:41 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1lhHXb-00FY4z-Li
2021-05-13 22:02:41 1lhHXb-00FY4z-Li => mariaan <[email protected]> F=<[email protected]> R=virtual_user T=dovecot_lmtp_udp S=20349 C="250 2.0.0 <[email protected]> Fli3EOGFnWC01TYABaNj1A Saved"
2021-05-13 22:02:41 1lhHXb-00FY4z-Li Completed
2021-05-13 22:02:41 1lhHXb-00FY4s-0G => mariaan <[email protected]> F=<[email protected]> R=spamcheck_director T=spamcheck S=19783
2021-05-13 22:02:41 1lhHXb-00FY4s-0G Completed
2021-05-13 22:03:08 cwd=/etc/csf 4 args: /usr/sbin/sendmail -f root -t
2021-05-13 22:03:08 1lhHY4-00FY81-Fg <= [email protected] U=root P=local S=690 T="lfd on 20.example.com: Excessive resource usage: rngd (770 (Parent PID:770))" from <[email protected]> for root
2021-05-13 22:03:08 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1lhHY4-00FY81-Fg
2021-05-13 22:03:08 1lhHY4-00FY81-Fg User 0 set for local_delivery transport is on the never_users list
2021-05-13 22:03:08 1lhHY4-00FY81-Fg == [email protected] R=localuser T=local_delivery defer (-29): User 0 set for local_delivery transport is on the never_users list
2021-05-13 22:03:08 1lhHY4-00FY81-Fg ** [email protected]: retry timeout exceeded
2021-05-13 22:03:08 cwd=/etc/csf 4 args: /usr/sbin/sendmail -f root -t
2021-05-13 22:03:08 cwd=/var/spool/exim 7 args: /usr/sbin/exim -t -oem -oi -f <> -E1lhHY4-00FY81-Fg
2021-05-13 22:03:08 1lhHY4-00FY8J-LD <= <> R=1lhHY4-00FY81-Fg U=mail P=local S=1985 T="Mail delivery failed: returning message to sender" from <> for [email protected]
2021-05-13 22:03:08 1lhHY4-00FY8G-MA <= [email protected] U=root P=local S=725 T="lfd on 20.example.com: Excessive resource usage: apache (2025381 (Parent PID:2025360))" from <[email protected]> for root
2021-05-13 22:03:08 1lhHY4-00FY81-Fg Completed
2021-05-13 22:03:08 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1lhHY4-00FY8J-LD
2021-05-13 22:03:08 1lhHY4-00FY8J-LD User 0 set for local_delivery transport is on the never_users list
2021-05-13 22:03:08 1lhHY4-00FY8J-LD == [email protected] R=localuser T=local_delivery defer (-29): User 0 set for local_delivery transport is on the never_users list
2021-05-13 22:03:08 1lhHY4-00FY8J-LD ** [email protected]: retry timeout exceeded
 
User 0 set for local_delivery transport is on the never_users list
This is a known error which causes root mails not to be send or received to. Mostly when an old exim.conf is used.

Be sure you're using the newest spamblocker exim.conf and next to that, create a forwarder for root so you can read what's going on.
This can be done 2 ways.
Either edit the /etc/aliases file and create a forward like this on the bottom:
root: [email protected]
and restart Exim.
Or create a .forward file in /root and put your email address in there. Personally I use the aliases file, as I know that always works.
 
This is a known error which causes root mails not to be send or received to. Mostly when an old exim.conf is used.

Be sure you're using the newest spamblocker exim.conf and next to that, create a forwarder for root so you can read what's going on.
This can be done 2 ways.
Either edit the /etc/aliases file and create a forward like this on the bottom:
root: [email protected]
and restart Exim.
Or create a .forward file in /root and put your email address in there. Personally I use the aliases file, as I know that always works.
Thanks for the heads-up Richard. I've updated Exim configs and also added an entry for root into the aliases file. That error has disappeared now.

I can send email from the user mailbox in question but replying using an account on the same server still does not go through.

Exim log
2021-05-14 08:37:23 1lhRRq-002vT5-Na <= [email protected] H=([10.0.0.100]) [105.244.33.248] P=esmtpsa X=TLS1.3:TLS_AES_256_GCM_SHA384:256 CV=no A=plain:[email protected] S=19446 id=[email protected] T="test" from <[email protected]> for [email protected]
2021-05-14 08:37:23 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1lhRRq-002vT5-Na
2021-05-14 08:37:23 cwd=/tmp 4 args: /usr/sbin/exim -oMr spam-scanned -bS
2021-05-14 08:37:25 1lhRRr-002vwj-FF <= [email protected] U=mail P=spam-scanned S=19905 id=[email protected] T="test" from <[email protected]> for [email protected]
2021-05-14 08:37:25 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1lhRRr-002vwj-FF
2021-05-14 08:37:25 1lhRRr-002vwj-FF => mariaan <[email protected]> F=<[email protected]> R=virtual_user T=dovecot_lmtp_udp S=20352 C="250 2.0.0 <[email protected]> SUpbEKUanmBNmwoABaNj1A Saved"
2021-05-14 08:37:25 1lhRRr-002vwj-FF Completed
2021-05-14 08:37:25 1lhRRq-002vT5-Na => mariaan <[email protected]> F=<[email protected]> R=spamcheck_director T=spamcheck S=19784
2021-05-14 08:37:25 1lhRRq-002vT5-Na Completed
2021-05-14 08:41:19 cwd=/ 3 args: /usr/sbin/exim -bd -q1h
2021-05-14 08:41:19 exim 4.94.2 daemon started: pid=750494, -q1h, listening for SMTP on port 25 (IPv4) port 587 (IPv4) and for SMTPS on port 465 (IPv4)
2021-05-14 08:41:19 cwd=/var/spool/exim 2 args: /usr/sbin/exim -q
 
What does the dovecot lmtp log say?
Hi Kristan, curiously for this mailbox there's never a moment that lmtp says storing mail to Inbox. See tons of those for other mailboxes. For the one in question all I see is the connections to check for new mail.

This checks out when I look at the user's imap inbox I don't see any new mail only mail in cur. I've updated configs for exim and dovecot and rebuilt both.

May 14 08:37:25 lmtp([email protected])<695117><SUpbEKUanmBNmwoABaNj1A>: Info: sieve: msgid=<2f4b28a6-91cb-645f-20b5-6334b4b1219c@examp$
May 14 08:37:25 lmtp(695117): Info: Disconnect from local: Client has quit the connection (state=READY)
May 14 08:43:06 lmtp(761987): Info: Connect from local
 
A normal delivery should look something like this:

Code:
May 14 12:45:59 lmtp(11159): Info: Connect from local
May 14 12:45:59 lmtp(<redacted>)<11159><<redacted>>: Info: sieve: msgid=<<redacted>@<redacted>>: stored mail into mailbox 'INBOX'
May 14 12:45:59 lmtp(11159): Info: Disconnect from local: Client has quit the connection (state=READY)

Your log line seems cut off. Check the error log, and check the system log for any reports from dovecot. I'd also check the maildir of this user and see if there are any sieve related files, or other things that might confuse dovecot, or cause syntax errors or something like that.
 
Back
Top