From: Martijn de Munnik on
Hi list,

I have a problem with delivering mail to a host and get this error:

host mx2.amsterdam.nl[145.222.14.10] said: 421 enepmx02.amsterdam.nl
Error: timeout exceeded (in reply to end of DATA command)

This error only seems to occur with 'large' mails. Currently I have a mail
of ~600KB and ~8MB stuck in the queue. I don't think this is a postfix
issue on our site but an issue with the mailserver on the other site. What
can cause such issues?

Thanks,
Martijn

--
YoungGuns
Kasteleinenkampweg 7b
5222 AX 's-Hertogenbosch
T. 073 623 56 40
F. 073 623 56 39
www.youngguns.nl
KvK 18076568

From: Martijn de Munnik on
On Wed, 20 Jan 2010 10:56:39 +0100, Martijn de Munnik
<martijn(a)youngguns.nl> wrote:
> Hi list,
>
> I have a problem with delivering mail to a host and get this error:
>
> host mx2.amsterdam.nl[145.222.14.10] said: 421 enepmx02.amsterdam.nl
> Error: timeout exceeded (in reply to end of DATA command)
>
> This error only seems to occur with 'large' mails. Currently I have a
mail
> of ~600KB and ~8MB stuck in the queue. I don't think this is a postfix
> issue on our site but an issue with the mailserver on the other site.
What
> can cause such issues?

I tried the http://ftp.nluug.nl/mail/postfix/faq.html#timeouts Cisco PIX
workaround but that doesn't make any difference? I think the remote site is
running PIX:

Connected to mx2.amsterdam.nl (145.222.14.10).
Escape character is '^]'.
220 **********************************

postconf -n

address_verify_map = btree:${data_directory}/verify
alias_maps = hash:/opt/csw/etc/postfix/maps/aliases
body_checks = regexp:/opt/csw/etc/postfix/maps/body_checks
broken_sasl_auth_clients = yes
command_directory = /opt/csw/sbin
config_directory = /etc/postfix
content_filter = amavisfeed:localhost:10024
daemon_directory = /opt/csw/libexec/postfix
data_directory = /opt/csw/var/lib/postfix
default_database_type = hash
delay_warning_time = 4h
disable_vrfy_command = yes
header_checks = regexp:/opt/csw/etc/postfix/maps/header_checks
home_mailbox = Maildir/
html_directory = /opt/csw/share/doc/postfix/html
inet_interfaces = all
mailbox_command = /opt/csw/bin/procmail-wrapper -o -a $DOMAIN -d $LOGNAME
mailbox_size_limit = 0
mailq_path = /opt/csw/bin/mailq
manpage_directory = /opt/csw/share/man
maximal_backoff_time = 8000s
maximal_queue_lifetime = 7d
message_size_limit = 52428800
mime_header_checks = regexp:/opt/csw/etc/postfix/maps/mime_header_checks
minimal_backoff_time = 1000s
mydestination = $myhostname, localhost.$mydomain
myhostname = stevie.youngguns.nl
mynetworks_style = host
myorigin = $myhostname
newaliases_path = /opt/csw/bin/newaliases
readme_directory = /opt/csw/share/doc/postfix/README_FILES
receive_override_options = no_address_mappings
recipient_delimiter = +
relay_domains = slagenlandwonen.nl, wfcommunicatie.nl, gooischebrink.com,
interjute.nl, melamo.nl, fair-play.nl, loopbaankamer.nl, ospl.nl, ospl.de,
printcontrol.nl, dankers-schilderwerken.nl, promonta.nl,
interim-denbosch.nl, vanherpt.biz, rodersana.nl
relayhost =
sample_directory = /opt/csw/share/doc/postfix/samples
sendmail_path = /opt/csw/sbin/sendmail
smtp_bind_address = 213.207.90.2
smtp_helo_timeout = 60s
smtp_pix_workaround_delay_time = 10s
smtp_send_xforward_command = yes
smtp_skip_quit_response = yes
smtp_tls_loglevel = 1
smtp_tls_security_level = may
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtpd_banner = $myhostname ESMTP
smtpd_client_connection_count_limit = 10
smtpd_data_restrictions = reject_unauth_pipelining
smtpd_delay_reject = yes
smtpd_hard_error_limit = 12
smtpd_helo_required = yes
smtpd_recipient_limit = 100
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated, check_client_access
hash:/opt/csw/etc/postfix/maps/relay_access, reject_non_fqdn_recipient,
reject_non_fqdn_sender, reject_unknown_sender_domain,
reject_unauth_destination, reject_non_fqdn_helo_hostname,
reject_rbl_client virbl.dnsbl.bit.nl, check_policy_service
inet:127.0.0.1:12525, check_sender_mx_access
cidr:/opt/csw/etc/postfix/maps/bogon_networks, check_client_access
cidr:/opt/csw/etc/postfix/maps/drop, check_sender_mx_access
cidr:/opt/csw/etc/postfix/maps/drop, check_sender_ns_access
cidr:/opt/csw/etc/postfix/maps/drop, reject_unverified_recipient,
check_client_access cidr:/opt/csw/etc/postfix/maps/dnswl_header,
check_client_access cidr:/opt/csw/etc/postfix/maps/dnswl_permit,
check_policy_service inet:127.0.0.1:10023
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_local_domain = $myhostname
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_soft_error_limit = 3
smtpd_tls_cert_file = /home/yghosting/ssl/secure-youngguns-nl.pem
smtpd_tls_key_file = /home/yghosting/ssl/secure-youngguns-nl.key
smtpd_tls_loglevel = 1
smtpd_tls_security_level = may
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
soft_bounce = no
strict_rfc821_envelopes = yes
tls_random_source = dev:/dev/urandom
transport_maps = hash:/opt/csw/etc/postfix/maps/transport
unknown_address_reject_code = 550
unknown_hostname_reject_code = 550
unknown_local_recipient_reject_code = 550
unverified_recipient_reject_code = 550
virtual_alias_maps = hash:/opt/csw/etc/postfix/maps/virtual


>
> Thanks,
> Martijn

--
YoungGuns
Kasteleinenkampweg 7b
5222 AX 's-Hertogenbosch
T. 073 623 56 40
F. 073 623 56 39
www.youngguns.nl
KvK 18076568

From: Martijn de Munnik on
On Wed, 20 Jan 2010 11:10:50 +0100, Martijn de Munnik
<martijn(a)youngguns.nl> wrote:
> On Wed, 20 Jan 2010 10:56:39 +0100, Martijn de Munnik
> <martijn(a)youngguns.nl> wrote:
>> Hi list,
>>
>> I have a problem with delivering mail to a host and get this error:
>>
>> host mx2.amsterdam.nl[145.222.14.10] said: 421 enepmx02.amsterdam.nl
>> Error: timeout exceeded (in reply to end of DATA command)

I also found a mail in the queue to mx-cluster1.one.com with exactly the
same problem, this mail is also ~600kb.

>>
>> This error only seems to occur with 'large' mails. Currently I have a
> mail
>> of ~600KB and ~8MB stuck in the queue. I don't think this is a postfix
>> issue on our site but an issue with the mailserver on the other site.
> What
>> can cause such issues?
>
> I tried the http://ftp.nluug.nl/mail/postfix/faq.html#timeouts Cisco PIX
> workaround but that doesn't make any difference? I think the remote site
is
> running PIX:
>
> Connected to mx2.amsterdam.nl (145.222.14.10).
> Escape character is '^]'.
> 220 **********************************
>
> postconf -n
>
> address_verify_map = btree:${data_directory}/verify
> alias_maps = hash:/opt/csw/etc/postfix/maps/aliases
> body_checks = regexp:/opt/csw/etc/postfix/maps/body_checks
> broken_sasl_auth_clients = yes
> command_directory = /opt/csw/sbin
> config_directory = /etc/postfix
> content_filter = amavisfeed:localhost:10024
> daemon_directory = /opt/csw/libexec/postfix
> data_directory = /opt/csw/var/lib/postfix
> default_database_type = hash
> delay_warning_time = 4h
> disable_vrfy_command = yes
> header_checks = regexp:/opt/csw/etc/postfix/maps/header_checks
> home_mailbox = Maildir/
> html_directory = /opt/csw/share/doc/postfix/html
> inet_interfaces = all
> mailbox_command = /opt/csw/bin/procmail-wrapper -o -a $DOMAIN -d
$LOGNAME
> mailbox_size_limit = 0
> mailq_path = /opt/csw/bin/mailq
> manpage_directory = /opt/csw/share/man
> maximal_backoff_time = 8000s
> maximal_queue_lifetime = 7d
> message_size_limit = 52428800
> mime_header_checks = regexp:/opt/csw/etc/postfix/maps/mime_header_checks
> minimal_backoff_time = 1000s
> mydestination = $myhostname, localhost.$mydomain
> myhostname = stevie.youngguns.nl
> mynetworks_style = host
> myorigin = $myhostname
> newaliases_path = /opt/csw/bin/newaliases
> readme_directory = /opt/csw/share/doc/postfix/README_FILES
> receive_override_options = no_address_mappings
> recipient_delimiter = +
> relay_domains = slagenlandwonen.nl, wfcommunicatie.nl,
gooischebrink.com,
> interjute.nl, melamo.nl, fair-play.nl, loopbaankamer.nl, ospl.nl,
ospl.de,
> printcontrol.nl, dankers-schilderwerken.nl, promonta.nl,
> interim-denbosch.nl, vanherpt.biz, rodersana.nl
> relayhost =
> sample_directory = /opt/csw/share/doc/postfix/samples
> sendmail_path = /opt/csw/sbin/sendmail
> smtp_bind_address = 213.207.90.2
> smtp_helo_timeout = 60s
> smtp_pix_workaround_delay_time = 10s
> smtp_send_xforward_command = yes
> smtp_skip_quit_response = yes
> smtp_tls_loglevel = 1
> smtp_tls_security_level = may
> smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
> smtpd_banner = $myhostname ESMTP
> smtpd_client_connection_count_limit = 10
> smtpd_data_restrictions = reject_unauth_pipelining
> smtpd_delay_reject = yes
> smtpd_hard_error_limit = 12
> smtpd_helo_required = yes
> smtpd_recipient_limit = 100
> smtpd_recipient_restrictions = permit_mynetworks,
> permit_sasl_authenticated, check_client_access
> hash:/opt/csw/etc/postfix/maps/relay_access,
reject_non_fqdn_recipient,
> reject_non_fqdn_sender, reject_unknown_sender_domain,
> reject_unauth_destination, reject_non_fqdn_helo_hostname,
> reject_rbl_client virbl.dnsbl.bit.nl, check_policy_service
> inet:127.0.0.1:12525, check_sender_mx_access
> cidr:/opt/csw/etc/postfix/maps/bogon_networks, check_client_access
> cidr:/opt/csw/etc/postfix/maps/drop, check_sender_mx_access
> cidr:/opt/csw/etc/postfix/maps/drop, check_sender_ns_access
> cidr:/opt/csw/etc/postfix/maps/drop, reject_unverified_recipient,
> check_client_access cidr:/opt/csw/etc/postfix/maps/dnswl_header,
> check_client_access cidr:/opt/csw/etc/postfix/maps/dnswl_permit,
> check_policy_service inet:127.0.0.1:10023
> smtpd_sasl_auth_enable = yes
> smtpd_sasl_authenticated_header = yes
> smtpd_sasl_local_domain = $myhostname
> smtpd_sasl_path = private/auth
> smtpd_sasl_security_options = noanonymous
> smtpd_sasl_type = dovecot
> smtpd_soft_error_limit = 3
> smtpd_tls_cert_file = /home/yghosting/ssl/secure-youngguns-nl.pem
> smtpd_tls_key_file = /home/yghosting/ssl/secure-youngguns-nl.key
> smtpd_tls_loglevel = 1
> smtpd_tls_security_level = may
> smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
> soft_bounce = no
> strict_rfc821_envelopes = yes
> tls_random_source = dev:/dev/urandom
> transport_maps = hash:/opt/csw/etc/postfix/maps/transport
> unknown_address_reject_code = 550
> unknown_hostname_reject_code = 550
> unknown_local_recipient_reject_code = 550
> unverified_recipient_reject_code = 550
> virtual_alias_maps = hash:/opt/csw/etc/postfix/maps/virtual
>
>
>>
>> Thanks,
>> Martijn

--
YoungGuns
Kasteleinenkampweg 7b
5222 AX 's-Hertogenbosch
T. 073 623 56 40
F. 073 623 56 39
www.youngguns.nl
KvK 18076568

From: Ansgar Wiechers on
On 2010-01-20 Martijn de Munnik wrote:
> I have a problem with delivering mail to a host and get this error:
>
> host mx2.amsterdam.nl[145.222.14.10] said: 421 enepmx02.amsterdam.nl
> Error: timeout exceeded (in reply to end of DATA command)
>
> This error only seems to occur with 'large' mails. Currently I have a
> mail of ~600KB and ~8MB stuck in the queue. I don't think this is a
> postfix issue on our site but an issue with the mailserver on the
> other site. What can cause such issues?

AFAICS: slow connections, high connection concurrency (leaving little
bandwidth per connection), proxy filter or policy service taking too
long for checking the mail, etc.

However, since the timeout occurs on the remote side, you should contact
the administrator of that server about the issue.

Regards
Ansgar Wiechers
--
"Abstractions save us time working, but they don't save us time learning."
--Joel Spolsky

From: Wietse Venema on
Martijn de Munnik:
> Hi list,
>
> I have a problem with delivering mail to a host and get this error:
>
> host mx2.amsterdam.nl[145.222.14.10] said: 421 enepmx02.amsterdam.nl
> Error: timeout exceeded (in reply to end of DATA command)
>
> This error only seems to occur with 'large' mails. Currently I have a mail
> of ~600KB and ~8MB stuck in the queue. I don't think this is a postfix
> issue on our site but an issue with the mailserver on the other site. What
> can cause such issues?

Record a tcpdump trace. The way the session fails will indicate
the kind of problem (MTU, Window scaling, and so on).

http://www.postfix.org/DEBUG_README.html

Wietse