Mail server gone wonky

Use this forum if you have installed hMailServer and want to ask a question related to a production release of hMailServer. Before posting, please read the troubleshooting guide. A large part of all reported issues are already described in detail here.
Post Reply
Cheator

Mail server gone wonky

Post by Cheator » 2004-07-26 05:20

hmailserver version 3.2.2
MySQL version 4.0.20a

Not sure how the hell this happned but it started kinda recently. I stopped receiving mail to my mail server and i suddenly could send mail.

What happens is i send the mail and it never reaches the receipient. As for receiving mail, I have sent many messages to me a couple of days ago and i still have nothing. It seems to be clogged.

When i went to go check the logs i found that all of them are roughly 200 megabyes in size starting the 20th of July.

I somehow opened up one of these massive files and got this from the log. It all looks pretty much like this


"DEBUG" 7200 "2004-07-25 06:03:09.000" "SocketConnection::~_WaitAndReceiveData() - E3"
"IMAPD" 7200 "2004-07-25 06:03:09.000" "*.*.*.*" "RECEIVED: ZZZZ LOGOUT"
"IMAPD" 7200 "2004-07-25 06:03:09.000" "*.*.*.*" "SENT: * BYE Have a nice day[nl]ZZZZ OK Logout completed[nl]"
"DEBUG" 7200 "2004-07-25 06:03:09.000" "SocketConnection::_SendData()"
"DEBUG" 7200 "2004-07-25 06:03:09.000" "SocketConnection::_SendBinaryData()"
"DEBUG" 7200 "2004-07-25 06:03:09.000" "SocketConnection::~_SendBinaryData() - E5"
"DEBUG" 7200 "2004-07-25 06:03:09.000" "SocketConnection::~_SendData() - E1"
"DEBUG" 7200 "2004-07-25 06:03:09.000" "SocketConnection::~SocketConnection()"
"TCPIP" 7200 "2004-07-25 06:03:09.000" "IMAPD - Connection to client 64.26.156.81 closed."
"APPLICATION" 7516 "2004-07-25 06:03:09.875" "SMTPDeliverer - Message 15056: Failed to connect to mx1.mail.yahoo.co.kr."
"DEBUG" 7516 "2004-07-25 06:03:09.875" "SMTPDeliverer::~_DeliverSingleMessageToRemoteServer() - E3"
"DEBUG" 7516 "2004-07-25 06:03:09.875" "SMTPDeliverer::~_RelayMessage() - E1"
"DEBUG" 7516 "2004-07-25 06:03:09.875" "SMTPDeliverer::_DeliverSingleMessageToRemoteServer()"
"DEBUG" 7516 "2004-07-25 06:03:10.140" "SocketConnection::SocketConnection()"
"DEBUG" 7516 "2004-07-25 06:03:10.140" "SocketConnection::HandleClient()"
"DEBUG" 7516 "2004-07-25 06:03:10.140" "SocketConnection::_InternalHandleClient()"
"DEBUG" 7516 "2004-07-25 06:03:10.140" "SocketConnection::_SendData()"
"DEBUG" 7516 "2004-07-25 06:03:10.140" "SocketConnection::~_SendData() - E2"
"DEBUG" 7516 "2004-07-25 06:03:10.140" "SocketConnection::_WaitAndReceiveData()"
"DEBUG" 7516 "2004-07-25 06:03:10.390" "SocketConnection::~_WaitAndReceiveData() - E3"
"DEBUG" 7516 "2004-07-25 06:03:10.390" "SMTPClientConnection::_ParseASCII()"
"SMTPC" 7516 "2004-07-25 06:03:10.390" "*.*.*.*" "RECEIVED: 421 VS1-IP Excessive unknown recipients - possible Open Relay http://help.yahoo.com/help/us/mail/spam/spam-18.html (#4.1.8)"
I thought it was cause someone was using my mail server as a relay so i set it so it only relays form local users. But i sitll don;t know how to fix it. Itsa big ass problem since i have customers.

Ideas? Questions?

Cheator
Normal user
Normal user
Posts: 45
Joined: 2004-07-26 05:22
Location: Ottawa, Canada
Contact:

Post by Cheator » 2004-07-26 05:24

oh and note that I changed an IP address or two in there to me *s

Cheator
Normal user
Normal user
Posts: 45
Joined: 2004-07-26 05:22
Location: Ottawa, Canada
Contact:

Post by Cheator » 2004-07-26 07:24

Shame on me for triple posting but i;d rather you guys not aste your time when it is fixed. The problem was I had accidently left it open to relay anything so i was spamming yahoo aparently. I fixed that, deleted the pending 6000 messages that were wanting to be sent through my SMTP and it seems to be working fine. Let this be a lesson to all those who think that it won;t be a big del and smappers won;t use your server. They will, no matter how big it is. Thanks for hmailserver. Its incredible.

polarunion
Normal user
Normal user
Posts: 245
Joined: 2004-04-05 20:21
Location: Ottawa, Canada
Contact:

Post by polarunion » 2004-07-26 07:42

hey cheator? from ottawa eh? small world.. how'd you find this?

Cheator
Normal user
Normal user
Posts: 45
Joined: 2004-07-26 05:22
Location: Ottawa, Canada
Contact:

Post by Cheator » 2004-07-26 07:47

hmail? well I was looking for a mail server a while ago, found this but never was able to use it. I was on teh serious n00bahol, man. But i foudn it again and needit cause i am setting up a hosting company and stuff. Anyway cool! an ottawa dude! PM me, man!

User avatar
martin
Developer
Developer
Posts: 6834
Joined: 2003-11-21 01:09
Location: Sweden
Contact:

Post by martin » 2004-07-26 11:28

One guess is that someone has used your server for spamming.The short snippet from the log doesn't say much.

How many messages do you have in your data folder (C:\Program FIles\hMailServer\Data) (Not included subfolders). Theese are mail that has not yet been sent by hMailServer. If there are a huge number of emails here, someone has probably used your server for psamming.

Do you have any outgoing email that must be saved? Otherwise I suggest that you do the following:
1) Stop the server
2) Delete all mail in the data folder C:\Program FIles\hMailServer\Data. (Do not the mails in the sub directories.)
3) Turn on application logging and turn on every other logging
4) Delete the log file
5) Start the server.

Now you should see a lot of "message could not be delivered because the data file is missing". After a number of those, you delivery should work fine again.

Cheator
Normal user
Normal user
Posts: 45
Joined: 2004-07-26 05:22
Location: Ottawa, Canada
Contact:

Post by Cheator » 2004-07-26 13:02

Thats exactly what I did to remedy this. Yeah it was that my server was being spammed. For some reason I had it set to 'Always Relay' Which was a bad thing. Its fixed now. After deleting the 6000 queued messages in my mail folder it worked like a charm. Now I just gota delete those massive log files. Thakns dude!

Post Reply