URGENT -- Server not working correctly after install.

jim.thornton

Verified User
Joined
Jan 1, 2008
Messages
334
I just setup a new CentOS server. I installed DA and everything installed fine. I'm having two issues (that I have noticed so far):

1. My mail is not sending. Exim is running, there are no domains setup on the account, but I created an admin user and the email did not send from the system. It is sitting in the queue.

2. I have a flooded email queue. 25 pages of tons of emails all from root. I think they might be from my CSF firewall, but I'm not sure. Here is a link to one of the messages: http://pastie.org/9305548

Can someone please help me troubleshoot these issues?
 
1. Which error do you get in the Mail queue?
2. You can turn notifications off. They are indeed from CSF.
 
Here are the errors that I get:

2014-06-18 19:02:19 1WxK6b-0000sS-On mail.domainsentto.ca [IP ADDRESS HERE] Connection timed out

*** for SEO purposes I changed the domain name and IP address, but the domain is correct and it resolves. ***

Code:

2014-06-18 19:01:34 1WxOrF-0000lg-HX == [email protected] R=localuser T=local_delivery defer (-29): User 0 set for local_delivery transport is on the never_users list
 
If you want to get mail for the root user on your server just create a file called /root/.forward and in that file put your email address and you will get all the email for the root user. You can probably also use like /etc/aliases too, but I am not sure if exim uses that file or not.
 
If you want to get mail for the root user on your server just create a file called /root/.forward and in that file put your email address and you will get all the email for the root user. You can probably also use like /etc/aliases too, but I am not sure if exim uses that file or not.

I found an article on that but the emails still aren't sending.

Here is more updated logs:
Code:
2014-06-19 14:27:38 1Wxh2h-0003HY-Am mail.thornton.ca [47.247.48.108] Connection timed out
2014-06-19 14:27:38 1Wxh2h-0003Ha-HQ mail.thornton.ca [47.247.48.108] Connection timed out
2014-06-19 14:27:38 1Wxh2h-0003He-Lc mail.thornton.ca [47.247.48.108] Connection timed out
2014-06-19 14:27:38 1Wxh2h-0003HY-Am == [email protected] <[email protected]> R=lookuphost T=remote_smtp defer (110): Connection timed out
2014-06-19 14:27:38 1Wxh2h-0003He-Lc == [email protected] <[email protected]> R=lookuphost T=remote_smtp defer (110): Connection timed out
2014-06-19 14:27:38 1Wxh2h-0003Ha-HQ == [email protected] <[email protected]> R=lookuphost T=remote_smtp defer (110): Connection timed out
2014-06-19 14:27:39 1Wxh2h-0003Hi-Om mail.thornton.ca [47.247.48.108] Connection timed out
2014-06-19 14:27:39 1Wxh2h-0003Hi-Om == [email protected] <[email protected]> R=lookuphost T=remote_smtp defer (110): Connection timed out
 
You can indeed use /etc/aliases to tell exim that root email should be sent to an alternative email, that is how I do it.

Try connecting to the remote smtp server via telnet from your server:
telnet 47.247.48.108 25
Assuming that 47.247.48.108 is the remote IP address you having problems. If that times out, it is not an exim issue, and is most likely a firewall issue. The firewall could exist anywhere from your box, your ISP's box or the remote SMTP server blocking your server.
 
You can indeed use /etc/aliases to tell exim that root email should be sent to an alternative email, that is how I do it.

Try connecting to the remote smtp server via telnet from your server:
telnet 47.247.48.108 25
Assuming that 47.247.48.108 is the remote IP address you having problems. If that times out, it is not an exim issue, and is most likely a firewall issue. The firewall could exist anywhere from your box, your ISP's box or the remote SMTP server blocking your server.

It seems like you are probably on the right track here. However, how can I fix this?

I shut off my firewall and tried to resend the messages in the queue and they still failed. I'm not sure why my other server would be rejecting a connection from this server. It is my main mail server so it should accept connections from anywhere, right?
 
is it open in your network?
stop iptables and csf

I just stopped CSF & iptables and then went into DA and checked all the messages in the queue and clicked "retry". They still did not send.

I don't understand why it's not working with the firewall disabled.
 

I patched it as suggested running those commands. I have definitely figured out that it is a CSF issue. I installed traceroute and ran a traceroute to the system and got "Operation Not Permitted".

Then I shut down iptables and CSF and the traceroute worked.
Then I turned iptables back on and it still worked.
Then I turned on CSF and it did not work.

I don't understand though... I have opened the ports in the conf file.
 
You shouldn't start iptables. CSF will start it for you.
It could be the iptables configuration makes some rules which are not overwritten by CSF/LFD.
Try turning off iptables and only use CSF/LFD
 
You shouldn't start iptables. CSF will start it for you.
It could be the iptables configuration makes some rules which are not overwritten by CSF/LFD.
Try turning off iptables and only use CSF/LFD

I tried that and it seems as thought if I stop iptables and then start csf, iptables automatically starts.

I figured out the traceroute thing... I didn't have the appropriate ports open for traceroute. That now works perfectly. However, messages still aren't sending.

I don't know why this is so difficult. This is what I did:

1. Install CentOS
2. Mount partitions with restricted permissions (/tmp, /var/tmp, /home)
3. Install CSF/LFD
4. Install DirectAdmin (using ./setup.sh)
5. Had all this trouble
6. Ran ./install.directadmin.sh to re-install CSF.

Did I do this in the wrong order??
 
Last edited:
I just ran the uninstall script for CSF and then re-ran install.directadmin.sh and I still can't send emails.
 
Update:

The re-install of CSF stopped all the notifications. I opened up the ports for traceroute and that works.

Emails are still not sending. Here is the information in my Mail Administration Queue:
Email Headers:
Code:
1WxovK-0001OD-8I-H
mail 8 12
<[email protected]>
1403232690 0
-helo_name [10.166.181.204]
-host_address ::1.40696
-host_name localhost
-host_auth login
-interface_address ::1.587
-received_protocol esmtpa
-body_linecount 2
-max_received_linelength 71
-auth_id admin
XX
1
[email protected]

226P Received: from localhost ([::1] helo=[10.166.181.204])
	by s2.boxsites.com with esmtpa (Exim 4.76)
	(envelope-from <[email protected]>)
	id 1WxovK-0001OD-8I
	for [email protected]; Thu, 19 Jun 2014 22:51:30 -0400
156P Received: from 13.0.19.7
        (SquirrelMail authenticated user jthornton)
        by 10.166.181.204 with HTTP;
        Thu, 19 Jun 2014 22:51:30 -0400
072I Message-ID: <[email protected]>
038  Date: Thu, 19 Jun 2014 22:51:30 -0400
010  Subject: 
024F From: [email protected]
026T To: [email protected]
038  User-Agent: SquirrelMail/1.4.23 [SVN]
018  MIME-Version: 1.0
044  Content-Type: text/plain;charset=iso-8859-1
032  Content-Transfer-Encoding: 8bit
023  X-Priority: 3 (Normal)
019  Importance: Normal

Email Body Chunk:
Code:
1WxovK-0001OD-8I-D

Log:
Code:
2014-06-19 22:51:30 Received from [email protected] H=localhost ([10.166.181.204]) [::1] P=esmtpa A=login:admin S=729 [email protected] T=""
2014-06-19 22:51:30 [email protected] R=lookuphost T=remote_smtp defer (-53): retry time not reached for any host
 
Back
Top