Mail not coming in for one Mailbox

codes9

Verified User
Joined
Sep 5, 2019
Messages
63
Having an issue with one Mailbox that stopped receiving mail without running out of Quota (renamed to mariaan@problemdomain.me in the logs below). It's got around 2Gb of mail with a 6Gb quota.

What I've done so far:
Exim.log
2021-05-13 22:02:41 1lhHXb-00FY4z-Li <= codes9@example.com U=mail P=spam-scanned S=19902 id=8c8a9683-0027-da20-121f-f379aee67949@example.com T="test" from <codes9@example.com> for mariaan@problemdomain.me
2021-05-13 22:02:41 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1lhHXb-00FY4z-Li
2021-05-13 22:02:41 1lhHXb-00FY4z-Li => mariaan <mariaan@problemdomain.me> F=<codes9@example.com> R=virtual_user T=dovecot_lmtp_udp S=20349 C="250 2.0.0 <mariaan@problemdomain.me> Fli3EOGFnWC01TYABaNj1A Saved"
2021-05-13 22:02:41 1lhHXb-00FY4z-Li Completed
2021-05-13 22:02:41 1lhHXb-00FY4s-0G => mariaan <mariaan@problemdomain.me> F=<codes9@example.com> R=spamcheck_director T=spamcheck S=19783
2021-05-13 22:02:41 1lhHXb-00FY4s-0G Completed
2021-05-13 22:03:08 cwd=/etc/csf 4 args: /usr/sbin/sendmail -f root -t
2021-05-13 22:03:08 1lhHY4-00FY81-Fg <= root@20.example.com U=root P=local S=690 T="lfd on 20.example.com: Excessive resource usage: rngd (770 (Parent PID:770))" from <root@20.example.com> for root
2021-05-13 22:03:08 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1lhHY4-00FY81-Fg
2021-05-13 22:03:08 1lhHY4-00FY81-Fg User 0 set for local_delivery transport is on the never_users list
2021-05-13 22:03:08 1lhHY4-00FY81-Fg == root@20.example.com R=localuser T=local_delivery defer (-29): User 0 set for local_delivery transport is on the never_users list
2021-05-13 22:03:08 1lhHY4-00FY81-Fg ** root@20.example.com: retry timeout exceeded
2021-05-13 22:03:08 cwd=/etc/csf 4 args: /usr/sbin/sendmail -f root -t
2021-05-13 22:03:08 cwd=/var/spool/exim 7 args: /usr/sbin/exim -t -oem -oi -f <> -E1lhHY4-00FY81-Fg
2021-05-13 22:03:08 1lhHY4-00FY8J-LD <= <> R=1lhHY4-00FY81-Fg U=mail P=local S=1985 T="Mail delivery failed: returning message to sender" from <> for root@20.example.com
2021-05-13 22:03:08 1lhHY4-00FY8G-MA <= root@20.example.com U=root P=local S=725 T="lfd on 20.example.com: Excessive resource usage: apache (2025381 (Parent PID:2025360))" from <root@20.example.com> for root
2021-05-13 22:03:08 1lhHY4-00FY81-Fg Completed
2021-05-13 22:03:08 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1lhHY4-00FY8J-LD
2021-05-13 22:03:08 1lhHY4-00FY8J-LD User 0 set for local_delivery transport is on the never_users list
2021-05-13 22:03:08 1lhHY4-00FY8J-LD == root@20.example.com R=localuser T=local_delivery defer (-29): User 0 set for local_delivery transport is on the never_users list
2021-05-13 22:03:08 1lhHY4-00FY8J-LD ** root@20.example.com: retry timeout exceeded
 

Richard G

Verified User
Joined
Jul 6, 2008
Messages
6,373
Location
Maastricht
User 0 set for local_delivery transport is on the never_users list
This is a known error which causes root mails not to be send or received to. Mostly when an old exim.conf is used.

Be sure you're using the newest spamblocker exim.conf and next to that, create a forwarder for root so you can read what's going on.
This can be done 2 ways.
Either edit the /etc/aliases file and create a forward like this on the bottom:
root: your@emailadres.com
and restart Exim.
Or create a .forward file in /root and put your email address in there. Personally I use the aliases file, as I know that always works.
 

codes9

Verified User
Joined
Sep 5, 2019
Messages
63
This is a known error which causes root mails not to be send or received to. Mostly when an old exim.conf is used.

Be sure you're using the newest spamblocker exim.conf and next to that, create a forwarder for root so you can read what's going on.
This can be done 2 ways.
Either edit the /etc/aliases file and create a forward like this on the bottom:
root: your@emailadres.com
and restart Exim.
Or create a .forward file in /root and put your email address in there. Personally I use the aliases file, as I know that always works.
Thanks for the heads-up Richard. I've updated Exim configs and also added an entry for root into the aliases file. That error has disappeared now.

I can send email from the user mailbox in question but replying using an account on the same server still does not go through.

Exim log
2021-05-14 08:37:23 1lhRRq-002vT5-Na <= codes9@example.com H=([10.0.0.100]) [105.244.33.248] P=esmtpsa X=TLS1.3:TLS_AES_256_GCM_SHA384:256 CV=no A=plain:codes9@example.com S=19446 id=2f4b28a6-91cb-645f-20b5-6334b4b1219c@example.com T="test" from <codes9@example.com> for mariaan@problemdomain.me
2021-05-14 08:37:23 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1lhRRq-002vT5-Na
2021-05-14 08:37:23 cwd=/tmp 4 args: /usr/sbin/exim -oMr spam-scanned -bS
2021-05-14 08:37:25 1lhRRr-002vwj-FF <= codes9@example.com U=mail P=spam-scanned S=19905 id=2f4b28a6-91cb-645f-20b5-6334b4b1219c@example.com T="test" from <codes9@example.com> for mariaan@problemdomain.me
2021-05-14 08:37:25 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1lhRRr-002vwj-FF
2021-05-14 08:37:25 1lhRRr-002vwj-FF => mariaan <mariaan@problemdomain.me> F=<codes9@example.com> R=virtual_user T=dovecot_lmtp_udp S=20352 C="250 2.0.0 <mariaan@problemdomain.me> SUpbEKUanmBNmwoABaNj1A Saved"
2021-05-14 08:37:25 1lhRRr-002vwj-FF Completed
2021-05-14 08:37:25 1lhRRq-002vT5-Na => mariaan <mariaan@problemdomain.me> F=<codes9@example.com> R=spamcheck_director T=spamcheck S=19784
2021-05-14 08:37:25 1lhRRq-002vT5-Na Completed
2021-05-14 08:41:19 cwd=/ 3 args: /usr/sbin/exim -bd -q1h
2021-05-14 08:41:19 exim 4.94.2 daemon started: pid=750494, -q1h, listening for SMTP on port 25 (IPv4) port 587 (IPv4) and for SMTPS on port 465 (IPv4)
2021-05-14 08:41:19 cwd=/var/spool/exim 2 args: /usr/sbin/exim -q
 

codes9

Verified User
Joined
Sep 5, 2019
Messages
63
What does the dovecot lmtp log say?
Hi Kristan, curiously for this mailbox there's never a moment that lmtp says storing mail to Inbox. See tons of those for other mailboxes. For the one in question all I see is the connections to check for new mail.

This checks out when I look at the user's imap inbox I don't see any new mail only mail in cur. I've updated configs for exim and dovecot and rebuilt both.

May 14 08:37:25 lmtp(mariaan@problemdomain.me)<695117><SUpbEKUanmBNmwoABaNj1A>: Info: sieve: msgid=<2f4b28a6-91cb-645f-20b5-6334b4b1219c@examp$
May 14 08:37:25 lmtp(695117): Info: Disconnect from local: Client has quit the connection (state=READY)
May 14 08:43:06 lmtp(761987): Info: Connect from local
 

kristian

Verified User
Joined
Nov 4, 2005
Messages
204
Location
Norway
A normal delivery should look something like this:

Code:
May 14 12:45:59 lmtp(11159): Info: Connect from local
May 14 12:45:59 lmtp(<redacted>)<11159><<redacted>>: Info: sieve: msgid=<<redacted>@<redacted>>: stored mail into mailbox 'INBOX'
May 14 12:45:59 lmtp(11159): Info: Disconnect from local: Client has quit the connection (state=READY)

Your log line seems cut off. Check the error log, and check the system log for any reports from dovecot. I'd also check the maildir of this user and see if there are any sieve related files, or other things that might confuse dovecot, or cause syntax errors or something like that.
 
Top