US: 1-941-4621-069
  
Cyprus: 3-572-2052-781

Go Back   ISPsystem.com Forums > ISPmanager > Troubleshooting


Reply
 
Thread Tools
Old 06-10-2009, 07:48 AM   #11
Junior Member
 
Join Date: Jun 2009
Posts: 25
seanpeace is on a distinguished road
Default I now have the correct message

Ok, now that I install that I got the right response.

I am running centos and yes, the mailscanner, clamav and spamassassin are installed. It looks like they are running just fine.

I will check tomorrow to see if there is anything that gets bounced with the same error.
seanpeace is offline   Reply With Quote
Old 06-10-2009, 07:55 AM   #12
Junior Member
 
Join Date: Jun 2009
Posts: 25
seanpeace is on a distinguished road
Default New log

the log you looked at was when it was broken.

Here is a new log.

Jun 10 00:47:51 songvestdev dovecot: POP3(sean.peace@group19.com): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0
Jun 10 00:47:52 songvestdev MailScanner[1539]: ----------- SCAN SUMMARY -----------
Jun 10 00:47:52 songvestdev MailScanner[1539]: Known viruses: 572030
Jun 10 00:47:52 songvestdev MailScanner[1539]: Engine version: 0.95.1
Jun 10 00:47:52 songvestdev MailScanner[1539]: Scanned directories: 2
Jun 10 00:47:52 songvestdev MailScanner[1539]: Scanned files: 3
Jun 10 00:47:52 songvestdev MailScanner[1539]: Infected files: 0
Jun 10 00:47:52 songvestdev MailScanner[1539]: Data scanned: 0.00 MB
Jun 10 00:47:52 songvestdev MailScanner[1539]: Data read: 0.00 MB (ratio 0.00:1)
Jun 10 00:47:52 songvestdev MailScanner[1539]: Time: 1.088 sec (0 m 1 s)
Jun 10 00:47:52 songvestdev MailScanner[1539]: Uninfected: Delivered 1 messages
Jun 10 00:47:52 songvestdev sendmail[2012]: n5A4lho9001978: to=\\virtuser_505, delay=00:00:09, xdelay=00:00:00, mailer=local, pri=121219, dsn=2.0.0, stat=Sent

Does this look correct?
seanpeace is offline   Reply With Quote
Old 06-10-2009, 08:01 AM   #13
ISPsystem team
 
slava's Avatar
 
Join Date: May 2008
Location: ISPsystem
Posts: 588
slava is on a distinguished road
Default

Quote:
Jun 10 00:47:52 songvestdev sendmail[2012]: n5A4lho9001978: to=\\virtuser_505, delay=00:00:09, xdelay=00:00:00, mailer=local, pri=121219, dsn=2.0.0, stat=Sent
Now I see message put to /var/mail/virtuser_505.
You can't get this message by pop3 or what problem? Or this bounce with error message text?
slava is offline   Reply With Quote
Old 06-10-2009, 03:55 PM   #14
Junior Member
 
Join Date: Jun 2009
Posts: 25
seanpeace is on a distinguished road
Default Everything looks good right now

Right now it all looks good. I just need to monitor the email logs today and make sure there are no bounced emails with the authentication problem we have been having.

Thanks so much for the help and I hope this works.
seanpeace is offline   Reply With Quote
Old 06-10-2009, 04:54 PM   #15
Junior Member
 
Join Date: Jun 2009
Posts: 25
seanpeace is on a distinguished road
Default One last question

Do you know where this id is comming from? c18-ss-1-lb.cnet.com

I see that when I try to send mail via sendmail from a php program (Sugar CRM) that is is trying to deliver and send from songvest.com, see below, but that it is also using this weird cnet.com address. I can't find the cnet address anywhere and it is killing me.

Jun 10 09:45:10 songvestdev sendmail[10789]: n5ADjA54010789: Authentication-Warning: songvestdev.com: apache set sender to seanpeace@songvest.com using -f
Jun 10 09:45:10 songvestdev sendmail[10789]: n5ADjA54010789: from=seanpeace@songvest.com, size=1440, class=0, nrcpts=2, msgid=<20d138e11f8fe29e2b249e87c5d16ed2@www.songve st.com>, relay=apache@localhost
Jun 10 09:45:10 songvestdev sendmail[10791]: STARTTLS=server, relay=localhost [127.0.0.1], version=TLSv1/SSLv3, verify=NO, cipher=DHE-RSA-AES256-SHA, bits=256/256
Jun 10 09:45:10 songvestdev sendmail[10789]: STARTTLS=client, relay=[127.0.0.1], version=TLSv1/SSLv3, verify=FAIL, cipher=DHE-RSA-AES256-SHA, bits=256/256
Jun 10 09:45:10 songvestdev sendmail[10791]: n5ADjAWw010791: from=<seanpeace@c18-ss-1-lb.cnet.com>, size=1661, class=0, nrcpts=2, msgid=<20d138e11f8fe29e2b249e87c5d16ed2@www.songve st.com>, proto=ESMTP, daemon=MTA, relay=localhost [127.0.0.1]
Jun 10 09:45:10 songvestdev sendmail[10791]: n5ADjAWw010791: to=<seanpeace@c18-ss-1-lb.cnet.com>, delay=00:00:00, mailer=esmtp, pri=61661, stat=queued
Jun 10 09:45:10 songvestdev sendmail[10791]: n5ADjAWw010791: to=<sean@c18-ss-1-lb.cnet.com>, delay=00:00:00, mailer=esmtp, pri=61661, stat=queued
Jun 10 09:45:10 songvestdev sendmail[10789]: n5ADjA54010789: to=seanpeace@songvest.com,sean@songvest.com, ctladdr=seanpeace@songvest.com (48/4, delay=00:00:00, xdelay=00:00:00, mailer=relay, pri=61440, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (n5ADjAWw010791 Message accepted for delivery)
Jun 10 09:45:12 songvestdev MailScanner[9962]: New Batch: Scanning 1 messages, 2246 bytes
Jun 10 09:45:16 songvestdev dovecot: pop3-login: Login: user=<david@songvest.com>, method=PLAIN, rip=::ffff:66.222.125.66, lip=::ffff:68.169.44.214
Jun 10 09:45:16 songvestdev dovecot: POP3(david@songvest.com): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0
Jun 10 09:45:18 songvestdev MailScanner[9962]: Virus and Content Scanning: Starting
Jun 10 09:45:28 songvestdev MailScanner[9962]: ----------- SCAN SUMMARY -----------
Jun 10 09:45:28 songvestdev MailScanner[9962]: Known viruses: 572030
Jun 10 09:45:28 songvestdev MailScanner[9962]: Engine version: 0.95.1
Jun 10 09:45:28 songvestdev MailScanner[9962]: Scanned directories: 2
Jun 10 09:45:28 songvestdev MailScanner[9962]: Scanned files: 3
Jun 10 09:45:28 songvestdev MailScanner[9962]: Infected files: 0
Jun 10 09:45:28 songvestdev MailScanner[9962]: Data scanned: 0.00 MB
Jun 10 09:45:28 songvestdev MailScanner[9962]: Data read: 0.00 MB (ratio 0.00:1)
Jun 10 09:45:28 songvestdev MailScanner[9962]: Time: 10.478 sec (0 m 10 s)
Jun 10 09:45:29 songvestdev MailScanner[9962]: Found ip-based phishing fraud from .. in n5ADjAWw010791
Jun 10 09:45:29 songvestdev MailScanner[9962]: Content Checks: Detected and have disarmed phishing tags in HTML message in n5ADjAWw010791 from seanpeace@c18-ss-1-lb.cnet.com
Jun 10 09:45:29 songvestdev MailScanner[9962]: Uninfected: Delivered 1 messages
seanpeace is offline   Reply With Quote
Old 06-10-2009, 07:01 PM   #16
ISPsystem team
 
slava's Avatar
 
Join Date: May 2008
Location: ISPsystem
Posts: 588
slava is on a distinguished road
Default

songvest.com does not resolve to IP address in your server and root name servers .com zone transform domain name to c18-ss-1-lb.cnet.com where client (if it typed in web-browser) see advertisements ...
slava is offline   Reply With Quote
Old 06-10-2009, 07:54 PM   #17
Junior Member
 
Join Date: Jun 2009
Posts: 25
seanpeace is on a distinguished road
Default Not sure I understand

I am not sure I understand what I should look for or change in your response.
seanpeace is offline   Reply With Quote
Old 06-10-2009, 08:53 PM   #18
ISPsystem team
 
slava's Avatar
 
Join Date: May 2008
Location: ISPsystem
Posts: 588
slava is on a distinguished road
Default

Check domain resolving in your server
Code:
host songvest.com
or
Code:
ping songvest.com
must work into your VPS, if in does not work - check /etc/resolv.conf - are this nameservers correct?
slava is offline   Reply With Quote
Old 06-10-2009, 09:44 PM   #19
Junior Member
 
Join Date: Jun 2009
Posts: 25
seanpeace is on a distinguished road
Default We are still getting problems

Here is one that should have come through this morning.

Jun 10 09:40:09 songvestdev sendmail[10551]: n5ADe8uP010551: ruleset=check_rcpt, arg1=<david@songvest.com>, relay=mta11.charter.net [216.33.127.80], reject=550 5.7.1 <david@songvest.com>... Relaying denied. Proper authentication required.
Jun 10 09:40:09 songvestdev sendmail[10551]: n5ADe8uP010551: from=<jprohaska@charter.net>, size=897, class=0, nrcpts=0, proto=ESMTP, daemon=MTA, relay=mta11.charter.net [216.33.127.80]
seanpeace is offline   Reply With Quote
Old 06-10-2009, 10:08 PM   #20
Junior Member
 
Join Date: Jun 2009
Posts: 25
seanpeace is on a distinguished road
Default I need to migrate

slava

Can you be most specific, meaning i am not a technical person on how to migrate to a new email package like exim or postfix.

Do I need to resinstall ispmanager? Will I loose all my data on the webistes? What are the specific steps I need to take.

Thanks!!!
seanpeace is offline   Reply With Quote
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 07:19 PM.