Qmail, deferral

[Gorlist]

Hi, updated from Plesk 8 to latest plesk 9, though since then uffering from the following when sending to certain email address:


qmail: 1245924225.928713 delivery 147: deferral: Sorry,_I_wasn't_able_to_establish_an_SMTP_connection._(#4.4.1)/

Done allot of searching however not really sure what the error means, and the best solution?

Second topic is im getting allot of :


Jun 25 11:06:04 sv1 qmail-remote-handlers[4590]: Handlers Filter before-remote for qmail started ...
Jun 25 11:06:04 sv1 qmail-remote-handlers[4590]: from=servizi@posteitaliane.it
Jun 25 11:06:04 sv1 qmail-remote-handlers[4590]: to=21uyu@classnet.pl
Jun 25 11:06:04 sv1 qmail-remote-handlers[4590]: hook_dir = '/usr/local/psa/handlers/before-remote'
Jun 25 11:06:04 sv1 qmail-remote-handlers[4590]: recipient[3] = '21uyu@classnet.pl'
Jun 25 11:06:04 sv1 qmail-remote-handlers[4590]: handlers dir = '/usr/local/psa/handlers/before-remote/recipient/21uyu@classnet.pl'

Anyideas? I could add the ips to my firewall. I cleared the mail queue of the offending person and solved some of the problems with qmailm

Best Regards,

 

[Gorlist]

Okay my problems have somewhat chanaged. Flushed the remote list of un-processed emails and its somewhat working. However im now getting allot of Failed Notification emails, most similar to this:

Hi. This is the qmail-send program at sv1.myserver.com.
I tried to deliver a bounce message to this address, but the bounce bounced!

<admin@mydomain.co.uk>:
This address no longer accepts mail.

--- Below this line is the original bounce.

Return-Path: <>
Received: (qmail 20753 invoked for bounce); 25 Jun 2009 22:47:22 +0100
Date: 25 Jun 2009 22:47:22 +0100
From: MAILER-DAEMON@sv1.myserver.com
To: admin@mydomain.co.uk
Subject: failure notice

Hi. This is the qmail-send program at sv1.myserver.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<rveww9@chc03.vicp.net>:
Sorry, I couldn't find any host named chc03.vicp.net. (#5.1.2)

<rxx28@libero.it>:
212.52.84.84 does not like recipient.
Remote host said: 550 #5.1.0 Address rejected rxx28@libero.it
Giving up on 212.52.84.84.

<ryc@ravennayachtclub.com>:
62.149.128.154 does not like recipient.
Remote host said: 553 sorry, your envelope sender has been denied (#5.7.1)
Giving up on 62.149.128.154.

<ryfmag@waincrew.it>:
Sorry, I couldn't find any host named waincrew.it. (#5.1.2)

<ryrficxz@msn.com>:
65.54.245.104 does not like recipient.
Remote host said: 550 Requested action not taken: mailbox unavailable
Giving up on 65.54.245.104.

<rzanon@studiozanon.com>:
217.194.8.28 failed after I sent the message.
Remote host said: 550 5.7.1 Blocked by SpamAssassin

<s...@ddccdi.com>:
Sorry, I couldn't find any host named ddccdi.com. (#5.1.2)

<rzlmary@libero.it>:
212.52.84.84 does not like recipient.
Remote host said: 550 #5.1.0 Address rejected rzlmary@libero.it
Giving up on 212.52.84.84.

<s...@libero.it>:
212.52.84.83 does not like recipient.
Remote host said: 550 #5.1.0 Address rejected s...@libero.it
Giving up on 212.52.84.83.

<s.agger@epf.it>:
62.149.128.160 does not like recipient.
Remote host said: 553 sorry, your envelope sender has been denied (#5.7.1)
Giving up on 62.149.128.160.

<s.a.s@libero.it>:
212.52.84.83 does not like recipient.
Remote host said: 550 #5.1.0 Address rejected s.a.s@libero.it
Giving up on 212.52.84.83.

<s.andreaimmobili...@tiscali.it>:
213.205.33.249 does not like recipient.
Remote host said: 550 5.1.1 <"s.andreaimmobili..."@tiscali.it> recipient rejected
Giving up on 213.205.33.249.

<s.arbore@klikspa.it>:
88.41.151.3 does not like recipient.
Remote host said: 550 Requested action not taken: mailbox unavailable or not local
Giving up on 88.41.151.3.

<s.ballirano@aliceposta.it>:
85.33.2.53 does not like recipient.
Remote host said: 550 5.1.1 User unknown
Giving up on 85.33.2.53.

--- Below this line is a copy of the message.

Return-Path: <admin@mydomain.co.uk>
Received: (qmail 20731 invoked by uid 48); 25 Jun 2009 22:47:20 +0100
To: "=?UTF-8?B?dHdvZmxvd2Vy?=" <forum@user.co.uk>
Subject: =?UTF-8?B?VG9waWMgcmVwbHkgbm90aWZpY2F0aW9uIC0gIldhbnRlZCBNNCBDUUIgb3IgVzcz?= =?UTF-8?B?MyAoQ1FCIFdlYXBvbiki?=
X-PHP-Script: www.mydomain.co.uk/forums/cron.php for 81.78.65.234, 195.92.67.66
From: <admin@mydomain.co.uk>
Reply-To: <admin@mydomain.co.uk>
Sender: <admin@mydomain.co.uk>
MIME-Version: 1.0
Message-ID: <547a88e60d7391d1cb8e0d8c8442bbf1@www.mydomain.co.uk>
Date: Thu, 25 Jun 2009 22:40:39 +0100
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: PhpBB3
X-MimeOLE: phpBB3
X-phpBB-Origin: phpbb://www.mydomain.co.uk/forums

EMail Contents

Whats concerning is the amount of unusual bounce addresses? considering it should be going to "forum@user.co.uk" (ive adjusted it from the original address). It almost looks as if qmail has been compromised and is mass emailing all the emails sent through the server to other accounts (and of course the listed bounce ones have failed).

Any suggestions!

 

[Denis Sirochenko]

Hello,

A common advice from Knowledge Base, just in case:

I get bounce message which states that Qmail was not able to delivery bounce message.
http://kb.odin.com/en/1376

The server is saturated with SPAM. There are many messages in the queue. The mail is sent slowly.
http://kb.odin.com/en/766

Regards,
Denis.

 

[Gorlist]

Thanks Denis