Need help. all mail deferred

Not sure whats going on with my postfix/dovecot.   All mail is being deferred and will not clear unless I manually process the queue.  Using stream 8

From Mail Log

Code: [Select]

Dec 31 07:42:44 server postfix/smtpd[576611]: warning: database /etc/postfix/sender_whitelist.db is older than source file /etc/postfix/sender_whitelist
Dec 31 07:42:44 server postfix/smtpd[576611]: connect from mail-wm1-f52.google.com[209.85.128.52]
Dec 31 07:42:45 server postfix/smtpd[576611]: Anonymous TLS connection established from mail-wm1-f52.google.com[209.85.128.52] to mail.lakeservers.com: TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256
Dec 31 07:42:45 server postfix/smtpd[576611]: CC5694006F: client=mail-wm1-f52.google.com[209.85.128.52]
Dec 31 07:42:45 server postfix/cleanup[576616]: CC5694006F: message-id=
Dec 31 07:42:45 server postfix/qmgr[559991]: CC5694006F: from=, size=2971, nrcpt=1 (queue active)
Dec 31 07:42:45 server postfix/smtp[576617]: connect to 127.0.0.1[127.0.0.1]:10024: Connection refused
Dec 31 07:42:45 server postfix/smtp[576617]: CC5694006F: to=, relay=none, delay=0.19, delays=0.18/0.01/0/0, dsn=4.4.1, status=deferred (connect to 127.0.0.1[127.0.0.1]:10024: Connection refused)
Dec 31 07:42:46 server postfix/smtpd[576611]: disconnect from mail-wm1-f52.google.com[209.85.128.52] ehlo=2 starttls=1 mail=1 rcpt=1 bdat=1 quit=1 commands=7


I used the postfix config file from c7 and the problem went away.

So there appears to be a problem with stream8 postix config file.

dovecot error message:

Code: [Select]

Jan 01 07:56:02 imap(sales@madeiniran.com)<25299><yu/QqYTU8MwtIW62>: Error: open(/var/vmail/madeiniran.com/sales/dovecot.index.log) failed: Permission denied (euid=1000(scanmyid) egid=12(mail) missing +r perm: /var/vmail/madeiniran.com/sales/dovecot.index.log)
Jan 01 07:56:02 imap(sales@madeiniran.com)<25299><yu/QqYTU8MwtIW62>: Error: Mailbox INBOX: open(/var/vmail/madeiniran.com/sales/dovecot-uidlist) failed: Permission denied
Jan 01 07:56:02 imap(sales@madeiniran.com)<25299><yu/QqYTU8MwtIW62>: Error: Mailbox INBOX: open(/var/vmail/madeiniran.com/sales/dovecot-uidlist) failed: Permission denied

I noticed that :

stream server has owner/group vmail mail

and

centos 7 server has owner/group user mail

From postfix main.cf I see something in rules restrictions

smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, check_client_access hash:/etc/postfix/sender_whitelist, check_client_access hash:/etc/postfix/sender_blacklist, reject_unauth_destination, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_recipient_domain, reject_rbl_client zen.spamhaus.org, reject_rbl_client bl.spamcop.net

What is the result you have, issuing the following command?:

Code: [Select]

# ls -alF /var/vmail/madeiniran.com/sales/


What is the result you have, issuing the following command?:

Code: [Select]

# ls -alF /var/vmail/madeiniran.com/sales/


Code: [Select]

total 60
drwx------ 9 scanmyid mail 4096 Jan  1 20:50 ./
drwxrwx--- 3 vmail    mail 4096 Jan  1 19:56 ../
drwx------ 2 scanmyid mail 4096 Jan  1 19:56 cur/
-rw------- 1 scanmyid mail  408 Jan  1 19:56 dovecot.index.log
-rw------- 1 scanmyid mail 3048 Jan  1 20:20 dovecot.list.index.log
-rw------- 1 scanmyid mail   96 Jan  1 20:20 dovecot.mailbox.log
-rw------- 1 scanmyid mail   51 Jan  1 19:56 dovecot-uidlist
-rw------- 1 scanmyid mail    8 Jan  1 20:20 dovecot-uidvalidity
-r--r--r-- 1 scanmyid mail    0 Jan  1 19:56 dovecot-uidvalidity.61d0f83e
drwx------ 5 scanmyid mail 4096 Jan  1 20:20 .Drafts/
-rw------- 1 scanmyid mail    0 Jan  1 19:56 maildirfolder
drwx------ 2 scanmyid mail 4096 Jan  1 19:56 new/
drwx------ 5 scanmyid mail 4096 Jan  1 20:20 .Sent/
drwx------ 5 scanmyid mail 4096 Jan  1 20:05 .Spam/
-rw------- 1 scanmyid mail   28 Jan  1 20:20 subscriptions
drwx------ 2 scanmyid mail 4096 Jan  1 19:56 tmp/
drwx------ 5 scanmyid mail 4096 Jan  1 20:05 .Trash/

All of this happened after I upgraded to PRO.

The correct ownership for that files is not "scanmyid:mail", but "vmail:mail" instead.

I don't know why you change that ownership to "scanmyid" user, but you need to change to "vmail" user.

You can do it with:

Code: [Select]

# chown -R vmail:mail /var/vmail/


you should run this api command to fix mail permissions

Set quota for all email accounts based on the uid from the postfix.mailbox table

Code: [Select]

/scripts/cwp_api account mail_fix_permissions
info copied from:
http://wiki.centos-webpanel.com/cwp-admin-api

Thats good to know.  I searched wiki and it did not get indexed.

I removed some lines from main.cf that were not present in centos 7 panel.  I am curious if I put them back if the problem will return.  I may be talking about two different issues at this point.  I'll be back if the main.cf is not working with default settings.

Also.....why are we using a version of postfix which is 2 years old?  i.e. 3.4.5

So, My deferred queue is full of spam.....and thats good.

But, my legitimate mail is also in the queue and will not be processed until I remove the spam from the queue.

 

From postfix main.cf I see something in rules restrictions

smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, check_client_access hash:/etc/postfix/sender_whitelist, check_client_access hash:/etc/postfix/sender_blacklist, reject_unauth_destination, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_recipient_domain, reject_rbl_client zen.spamhaus.org, reject_rbl_client bl.spamcop.net

Shouldnt the reject_non_fqdn_sender rule be in the "smtpd_sender_restrictions" and not in the "smtpd_recipient_restrictions" rules.

permit_mynetworks, must be FIRST in the

Code: [Select]

smtpd_recipient_restrictions = String.

Default cwp postfix main.cf config is second position, at least in the Stream servers.

The correct ownership for that files is not "scanmyid:mail", but "vmail:mail" instead.

I don't know why you change that ownership to "scanmyid" user, but you need to change to "vmail" user.

You can do it with:

Code: [Select]

# chown -R vmail:mail /var/vmail/


This info seems to be incorrect. I have two other bugs relating to the domain folders inside the vmail folder having vmail:mail ownership instead of user:mail. So, they shouldnt be chowned vmail:mail

(...)
This info seems to be incorrect. I have two other bugs relating to the domain folders inside the vmail folder having vmail:mail ownership instead of user:mail. So, they shouldnt be chowned vmail:mail

What are the bugs..?!?!