Qmail, deferral

[Gorlist]

Hi, updated from Plesk 8 to latest plesk 9, though since then uffering from the following when sending to certain email address:


qmail: 1245924225.928713 delivery 147: deferral: Sorry,_I_wasn't_able_to_establish_an_SMTP_connection._(#4.4.1)/

Done allot of searching however not really sure what the error means, and the best solution?

Second topic is im getting allot of :


Jun 25 11:06:04 sv1 qmail-remote-handlers[4590]: Handlers Filter before-remote for qmail started ...
Jun 25 11:06:04 sv1 qmail-remote-handlers[4590]: [email protected]
Jun 25 11:06:04 sv1 qmail-remote-handlers[4590]: [email protected]
Jun 25 11:06:04 sv1 qmail-remote-handlers[4590]: hook_dir = '/usr/local/psa/handlers/before-remote'
Jun 25 11:06:04 sv1 qmail-remote-handlers[4590]: recipient[3] = '[email protected]'
Jun 25 11:06:04 sv1 qmail-remote-handlers[4590]: handlers dir = '/usr/local/psa/handlers/before-remote/recipient/[email protected]'

Anyideas? I could add the ips to my firewall. I cleared the mail queue of the offending person and solved some of the problems with qmailm

Best Regards,

 

[Gorlist]

Okay my problems have somewhat chanaged. Flushed the remote list of un-processed emails and its somewhat working. However im now getting allot of Failed Notification emails, most similar to this:

Hi. This is the qmail-send program at sv1.myserver.com.
I tried to deliver a bounce message to this address, but the bounce bounced!

<[email protected]>:
This address no longer accepts mail.

--- Below this line is the original bounce.

Return-Path: <>
Received: (qmail 20753 invoked for bounce); 25 Jun 2009 22:47:22 +0100
Date: 25 Jun 2009 22:47:22 +0100
From: [email protected]
To: [email protected]
Subject: failure notice

Hi. This is the qmail-send program at sv1.myserver.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<[email protected]>:
Sorry, I couldn't find any host named chc03.vicp.net. (#5.1.2)

<[email protected]>:
212.52.84.84 does not like recipient.
Remote host said: 550 #5.1.0 Address rejected [email protected]
Giving up on 212.52.84.84.

<[email protected]>:
62.149.128.154 does not like recipient.
Remote host said: 553 sorry, your envelope sender has been denied (#5.7.1)
Giving up on 62.149.128.154.

<[email protected]>:
Sorry, I couldn't find any host named waincrew.it. (#5.1.2)

<[email protected]>:
65.54.245.104 does not like recipient.
Remote host said: 550 Requested action not taken: mailbox unavailable
Giving up on 65.54.245.104.

<[email protected]>:
217.194.8.28 failed after I sent the message.
Remote host said: 550 5.7.1 Blocked by SpamAssassin

<[email protected]>:
Sorry, I couldn't find any host named ddccdi.com. (#5.1.2)

<[email protected]>:
212.52.84.84 does not like recipient.
Remote host said: 550 #5.1.0 Address rejected [email protected]
Giving up on 212.52.84.84.

<[email protected]>:
212.52.84.83 does not like recipient.
Remote host said: 550 #5.1.0 Address rejected [email protected]
Giving up on 212.52.84.83.

<[email protected]>:
62.149.128.160 does not like recipient.
Remote host said: 553 sorry, your envelope sender has been denied (#5.7.1)
Giving up on 62.149.128.160.

<[email protected]>:
212.52.84.83 does not like recipient.
Remote host said: 550 #5.1.0 Address rejected [email protected]
Giving up on 212.52.84.83.

<[email protected]>:
213.205.33.249 does not like recipient.
Remote host said: 550 5.1.1 <"s.andreaimmobili..."@tiscali.it> recipient rejected
Giving up on 213.205.33.249.

<[email protected]>:
88.41.151.3 does not like recipient.
Remote host said: 550 Requested action not taken: mailbox unavailable or not local
Giving up on 88.41.151.3.

<[email protected]>:
85.33.2.53 does not like recipient.
Remote host said: 550 5.1.1 User unknown
Giving up on 85.33.2.53.

--- Below this line is a copy of the message.

Return-Path: <[email protected]>
Received: (qmail 20731 invoked by uid 48); 25 Jun 2009 22:47:20 +0100
To: "=?UTF-8?B?dHdvZmxvd2Vy?=" <[email protected]>
Subject: =?UTF-8?B?VG9waWMgcmVwbHkgbm90aWZpY2F0aW9uIC0gIldhbnRlZCBNNCBDUUIgb3IgVzcz?= =?UTF-8?B?MyAoQ1FCIFdlYXBvbiki?=
X-PHP-Script: www.mydomain.co.uk/forums/cron.php for 81.78.65.234, 195.92.67.66
From: <[email protected]>
Reply-To: <[email protected]>
Sender: <[email protected]>
MIME-Version: 1.0
Message-ID: <[email protected]>
Date: Thu, 25 Jun 2009 22:40:39 +0100
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: PhpBB3
X-MimeOLE: phpBB3
X-phpBB-Origin: phpbb://www.mydomain.co.uk/forums

EMail Contents

Whats concerning is the amount of unusual bounce addresses? considering it should be going to "[email protected]" (ive adjusted it from the original address). It almost looks as if qmail has been compromised and is mass emailing all the emails sent through the server to other accounts (and of course the listed bounce ones have failed).

Any suggestions!

 

[Denis Sirochenko]

Hello,

A common advice from Knowledge Base, just in case:

I get bounce message which states that Qmail was not able to delivery bounce message.
http://kb.odin.com/en/1376

The server is saturated with SPAM. There are many messages in the queue. The mail is sent slowly.
http://kb.odin.com/en/766

Regards,
Denis.

 

[Gorlist]

Thanks Denis