Do any other also got troubles in messaging @bluewin.ch customers?
Nov 2 14:32:54 postfix/smtp[8102]: <XXXX>: to=XXXXX@bluewin.ch, relay=mxbw.lb.bluewin.ch[195.186.99.50]:25, delay=0.07, delays=0/0/0.03/0.03, dsn=5.5.0, status=bounced (Protocol error: host mxbw.lb.bluewin.ch[195.186.99.50] said: 250 2.0.0 RCPT TO accepted (in reply to DATA command))
TIA - Dan
Hält sich in Grenzen:
# grep postfix-submit /var/log/mail.log | grep relay=mxbw.lb.bluewin.ch | grep -i bounce | wc -l
64
# grep postfix-submit /var/log/mail.log | grep relay=mxbw.lb.bluewin.ch | grep -i -v bounce | wc -l
2919
-Benoît Panizzon-
Hi Dan,
We don't see a general pattern, but can you contact me off-list so we might figure out if there is a wider issue here?
Regards Marcel
-----Original Message----- From: swinog-bounces@lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Daniel Kamm Sent: Monday, November 02, 2015 2:36 PM To: swinog@swinog.ch Subject: [swinog] Bluewin MX Protocol Errors
Do any other also got troubles in messaging @bluewin.ch customers?
Nov 2 14:32:54 postfix/smtp[8102]: <XXXX>: to=XXXXX@bluewin.ch, relay=mxbw.lb.bluewin.ch[195.186.99.50]:25, delay=0.07, delays=0/0/0.03/0.03, dsn=5.5.0, status=bounced (Protocol error: host mxbw.lb.bluewin.ch[195.186.99.50] said: 250 2.0.0 RCPT TO accepted (in reply to DATA command))
TIA - Dan
_______________________________________________ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Hallo
Ja, wir haben da seit dem 2. November auch ein paar.
(ep01-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog | wc -l 27 (ep01-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog.0.bz2 | wc -l 71 (ep02-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog | wc -l 24 (ep02-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog.0.bz2 | wc -l 63 (ep03-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog | wc -l 24 (ep03-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog.0.bz2 | wc -l 64 (ep04-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog | wc -l 10 (ep04-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog.0.bz2 | wc -l 45
Von insgesamt:
(ep01-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog | wc -l 140 (ep01-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog.0.bz2 | wc -l 602 (ep02-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog | wc -l 149 (ep02-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog.0.bz2 | wc -l 582 (ep03-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog | wc -l 122 (ep03-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog.0.bz2 | wc -l 625 (ep04-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog | wc -l 138 (ep04-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog.0.bz2 | wc -l 584
Wir nutzen:
(ep01-zcs-prod <log>) 0 # pkg info | grep postfix postfix-2.11.3_3,1 Secure alternative to widely-used Sendmail
Grüsse Alexander
Many thanks to Marcel Gschwandl, we are still investigating together the root cause for these problems.
For a workaround, try to disable TLS for @bluewin.ch and @bluemail.ch
Postfix/main.cf smtp_tls_policy_maps = hash:/etc/postfix/tls_policy
# cat tls_policy bluewin.ch none bluemail.ch none
Bests, - Dan
On 03.11.2015 09:43, Skwar Alexander wrote:
Hallo
Ja, wir haben da seit dem 2. November auch ein paar.
(ep01-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog | wc -l 27 (ep01-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog.0.bz2 | wc -l 71 (ep02-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog | wc -l 24 (ep02-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog.0.bz2 | wc -l 63 (ep03-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog | wc -l 24 (ep03-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog.0.bz2 | wc -l 64 (ep04-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog | wc -l 10 (ep04-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog.0.bz2 | wc -l 45
Von insgesamt:
(ep01-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog | wc -l 140 (ep01-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog.0.bz2 | wc -l 602 (ep02-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog | wc -l 149 (ep02-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog.0.bz2 | wc -l 582 (ep03-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog | wc -l 122 (ep03-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog.0.bz2 | wc -l 625 (ep04-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog | wc -l 138 (ep04-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog.0.bz2 | wc -l 584
Wir nutzen:
(ep01-zcs-prod <log>) 0 # pkg info | grep postfix postfix-2.11.3_3,1 Secure alternative to widely-used Sendmail
Grüsse Alexander
Hi
I made this change as well. Let's see, what happens. But no TLS is not such a good solution… :)
Cheers Alexander
EveryWare AG Alexander Skwar Systems Engineer Zurlindenstrasse 52a CH-8003 Zürich
tel: +41 44 466 60 00 fax: +41 44 466 60 10 mail: alexander.skwar@everyware.ch web: http://www.everyware.ch
On 03.11.2015 10:23, Daniel Kamm wrote:
Many thanks to Marcel Gschwandl, we are still investigating together the root cause for these problems.
For a workaround, try to disable TLS for @bluewin.ch and @bluemail.ch
Postfix/main.cf smtp_tls_policy_maps = hash:/etc/postfix/tls_policy
# cat tls_policy bluewin.ch none bluemail.ch none
Bests,
- Dan
On 03.11.2015 09:43, Skwar Alexander wrote:
Hallo
Ja, wir haben da seit dem 2. November auch ein paar.
(ep01-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog | wc -l 27 (ep01-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog.0.bz2 | wc -l 71 (ep02-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog | wc -l 24 (ep02-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog.0.bz2 | wc -l 63 (ep03-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog | wc -l 24 (ep03-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog.0.bz2 | wc -l 64 (ep04-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog | wc -l 10 (ep04-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=bounced.*Protocol error' /var/log/maillog.0.bz2 | wc -l 45
Von insgesamt:
(ep01-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog | wc -l 140 (ep01-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog.0.bz2 | wc -l 602 (ep02-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog | wc -l 149 (ep02-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog.0.bz2 | wc -l 582 (ep03-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog | wc -l 122 (ep03-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog.0.bz2 | wc -l 625 (ep04-zcs-prod <log>) 0 # egrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog | wc -l 138 (ep04-zcs-prod <log>) 0 # bzegrep 'relay=mxbw.lb.bluewin.ch.*status=sent' /var/log/maillog.0.bz2 | wc -l 584
Wir nutzen:
(ep01-zcs-prod <log>) 0 # pkg info | grep postfix postfix-2.11.3_3,1 Secure alternative to widely-used Sendmail
Grüsse Alexander
swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
We were able to identify and reliably reproduce the problem in out testing environment, it is related to the TLS-Offloading which interferes with the traffic in some cases and brakes the communication with sending RSET commands and not handling the responses correctly.
Thanks to all who contacted me directly and provided their logs and inputs, it was most helpful.
As a workaround we disabled StartTLS inbound again and are working on a fix so we can re-enable it as soon as possible.
Regards Marcel
-
Benoit Panizzon -
Daniel Kamm -
Marcel.Gschwandl＠swisscom.com -
Skwar Alexander