Cette page explique l’analyse des fichiers de logs du serveur mail. Les programmes suivant sont utilisés:

• Postix: serveur SMTP
• Cyrus-Imapd: serveur POP/IMAP
• SASL: authentification
• Amavis
• Clamd: antivirus
• Spamassassin: antispam

Fichier des logs

/var/log/maillog

Synopsis

Date (Jour + Heure), IP, Programme (+PID), message

Erreurs

No such file or directory

Jan 22 12:28:44 ip-188-121-62-120 lmtpunix[3412]: IOERROR: fstating sieve script /var/lib/imap/sieve/domain/o/one-web.be/a/admin/defaultbc: No such file or directory

Operation not permitted

setrlimit: Unable to set file descriptors limit to -1: Operation not permitted

Operation not supported

Jan 22 11:13:04 ip-188-121-62-120 master[26297]: unable to setsocketopt(IP_TOS): Operation not supported

Reject

Relay Access Denied

Mar 26 08:39:28 ip-188-121-62-120 postfix/smtpd[15509]: NOQUEUE: reject: RCPT from 114-43-8-239.dynamic.hinet.net[114.43.8.239]: 554 5.7.1 <sanjinn232@yahoo.com.tw>: Relay access denied; from=<123@yahoo.com> to=<sanjinn232@yahoo.com.tw> proto=SMTP helo=<188.121.62.120>

Sender address rejected

User unknown in virtual mailbox table

Apr  8 14:14:51 ip-188-121-62-120 postfix/smtpd[32612]: NOQUEUE: reject: RCPT from host51-80.brs.com.br[177.11.51.80]: 550 5.1.0 <mapufg@spicerack.be>: Sender address rejected: User unknown in virtual mailbox table; from=<mapufg@spicerack.be> to=<teste3.pop3@hotmail.com> proto=ESMTP helo=

Domain not found

Mar 26 10:37:21 ip-188-121-62-120 postfix/smtpd[18288]: NOQUEUE: reject: RCPT from boo2.boosthoster.com[198.57.168.145]: 450 4.1.8 <shoppi12@shoppingmadeez.net>: Sender address rejected: Domain not found; from=<shoppi12@shoppingmadeez.net> to=<info@one-web.be> proto=ESMTP helo=

Recipient address rejected

User unknown in virtual mailbox table

Apr  9 09:39:38 ip-188-121-62-120 postfix/smtpd[5252]: NOQUEUE: reject: RCPT from 3.mo58.mail-out.ovh.net[178.33.41.144]: 550 5.1.1 <nfo@prowindows.be>: Recipient address rejected: User unknown in virtual mailbox table; from=<c4-return-1-nfo=prowindows.be@up2secure.eu> to=<nfo@prowindows.be> proto=ESMTP helo=

Server configuration error

Unknown smtpd restriction

Apr  8 02:18:13 ip-188-121-62-120 postfix/smtpd[13377]: warning: unknown smtpd restriction: "reject_unauth_pipeling"
Apr  8 02:18:13 ip-188-121-62-120 postfix/smtpd[13377]: NOQUEUE: reject: RCPT from mail-pb0-f51.google.com[209.85.160.51]: 451 4.3.5 Server configuration error; from=<rips.df@gmail.com> to=<info@one-web.be> proto=ESMTP helo=

Ceci arrive quand une ligne du fichier de configuration comprend une erreur, par exemple une règle inexistante.

Warnings

Les warnings indiquent qu’il faut faire attention

Illegal address syntax

Apr  9 14:59:49 ip-188-121-62-120 postfix/smtpd[14306]: warning: Illegal address syntax from unknown[115.86.35.15] in MAIL command: <drugstore_canadian3@??????-pc.kornet>

Unknonw smtpd restriction

Apr  8 02:18:13 ip-188-121-62-120 postfix/smtpd[13377]: warning: unknown smtpd restriction: "reject_unauth_pipeling"

Cyrus

> service cyrus-imapd stop
> rm /var/lib/imap/tls_sessions.db*
> rm /var/lib/imap/deliver.db*
> rm /var/lib/imap/db/*
> service cyrus-imapd start