From: jpyrczak@gmail.com on
I have seen something like this in the postings, but nothing seems to
show a resolution to my problem so here it is:

Everything was working ok, until I changed the internal MTA that our
spamfilter machine is relaying to from 10.0.0.2 to 10.0.0.12 and I
changed the "DS" "FallbackMXhost" and "FallbackSmartHost" IP in my
/etc/mail/ sendmail.cf (to the new 10.0.0.12 internal MTA) and changed
my mailertable entry to the firewall that forwards our smtp to the
externally exposed spamfilter machine. Yet it looks like between 5 to
10% of our email is getting the error "sn=5.0.0, stat=Service
unavailable" as shown below.

Apr 2 04:28:02 spamfilter sendmail[20501]: k32ARdoF020223:
to=<user(a)mydomain.com>, delay=00:00:22, xdelay=00:00:00, mailer=relay,
pri=121175, relay=10.0.0.12 [10.0.0.12], dsn=5.0.0, stat=Service
unavailable
Apr 2 04:28:02 spamfilter sendmail[20501]: k32ARdoF020223:
k32AS2rG020501: DSN: Service unavailable
Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501:
to=user(a)mydomain.com, delay=00:00:00, xdelay=00:00:00, mailer=relay,
pri=32554, relay=10.0.0.12 [10.0.0.12], dsn=5.0.0, stat=Service
unavailable
Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501:
k32AS2rH020501: return to sender: Service unavailable
Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rH020501:
to=user(a)mydomain.com, delay=00:00:00, xdelay=00:00:00, mailer=relay,
pri=33578, relay=10.0.0.12 [10.0.0.12], dsn=5.0.0, stat=Service
unavailable
Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501: Losing
../qfk32AS2rG020501: savemail panic
Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501:
SYSERR(root): savemail: cannot save rejected email anywhere

The fire is getting hot as I am on the second week of this and people
(including my boss, Pres., VP, and the CFO) along with paying clients
are getting upset. Please help or advise if you can please.

Joe Pyrczak
System Administrator (and Pariah is I do not get this fixed)

From: Alton Yu on
jpyrczak(a)gmail.com wrote:
> I have seen something like this in the postings, but nothing seems to
> show a resolution to my problem so here it is:
>
> Everything was working ok, until I changed the internal MTA that our
> spamfilter machine is relaying to from 10.0.0.2 to 10.0.0.12 and I
> changed the "DS" "FallbackMXhost" and "FallbackSmartHost" IP in my
> /etc/mail/ sendmail.cf (to the new 10.0.0.12 internal MTA) and changed
> my mailertable entry to the firewall that forwards our smtp to the
> externally exposed spamfilter machine. Yet it looks like between 5 to
> 10% of our email is getting the error "sn=5.0.0, stat=Service
> unavailable" as shown below.

Can you change it back?

> Apr 2 04:28:02 spamfilter sendmail[20501]: k32ARdoF020223:
> to=<user(a)mydomain.com>, delay=00:00:22, xdelay=00:00:00, mailer=relay,
> pri=121175, relay=10.0.0.12 [10.0.0.12], dsn=5.0.0, stat=Service
> unavailable
> Apr 2 04:28:02 spamfilter sendmail[20501]: k32ARdoF020223:
> k32AS2rG020501: DSN: Service unavailable
> Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501:
> to=user(a)mydomain.com, delay=00:00:00, xdelay=00:00:00, mailer=relay,
> pri=32554, relay=10.0.0.12 [10.0.0.12], dsn=5.0.0, stat=Service
> unavailable
> Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501:
> k32AS2rH020501: return to sender: Service unavailable
> Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rH020501:
> to=user(a)mydomain.com, delay=00:00:00, xdelay=00:00:00, mailer=relay,
> pri=33578, relay=10.0.0.12 [10.0.0.12], dsn=5.0.0, stat=Service
> unavailable
> Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501: Losing
> ./qfk32AS2rG020501: savemail panic
> Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501:
> SYSERR(root): savemail: cannot save rejected email anywhere

Do 90-95% of the mails that relay to 10.0.0.12 actually go through?

You probably want more verbose logging than this. You can set LogLevel
to 12 or 15.

> The fire is getting hot as I am on the second week of this and people
> (including my boss, Pres., VP, and the CFO) along with paying clients
> are getting upset. Please help or advise if you can please.
>
> Joe Pyrczak
> System Administrator (and Pariah is I do not get this fixed)

Good luck man!

Alton

From: Per Hedeland on
In article <1144019576.693403.289880(a)v46g2000cwv.googlegroups.com>
"jpyrczak(a)gmail.com" <jpyrczak(a)gmail.com> writes:
>
>Apr 2 04:28:02 spamfilter sendmail[20501]: k32ARdoF020223:
>to=<user(a)mydomain.com>, delay=00:00:22, xdelay=00:00:00, mailer=relay,
>pri=121175, relay=10.0.0.12 [10.0.0.12], dsn=5.0.0, stat=Service
>unavailable

This normally means that 10.0.0.12 rejected the message for some (often
spam-filter-related) reason. The reason will be in the logs of 10.0.0.12
(assuming it is running sendmail), and in the bounce that is generated:

>Apr 2 04:28:02 spamfilter sendmail[20501]: k32ARdoF020223:
>k32AS2rG020501: DSN: Service unavailable
>Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501:
>to=user(a)mydomain.com, delay=00:00:00, xdelay=00:00:00, mailer=relay,
>pri=32554, relay=10.0.0.12 [10.0.0.12], dsn=5.0.0, stat=Service
>unavailable

But sendmail tries to send the bounce to the same host (due to your
SMART_HOST setting), and it is rejected too...

>Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501: Losing
>./qfk32AS2rG020501: savemail panic
>Apr 2 04:28:02 spamfilter sendmail[20501]: k32AS2rG020501:
>SYSERR(root): savemail: cannot save rejected email anywhere

This should result in sendmail leaving the message in the local queue,
with the queue file renamed to Qfk32AS2rG020501 to prevent further
processing (data file is dfk32AS2rG020501 as ususal).

So, check the logs on 10.0.0.12, check those "suspended" files in the
local queue, and if neither of those has any info, try sniffing the
traffic to capture a session.

--Per Hedeland
per(a)hedeland.org
From: jpyrczak@gmail.com on
Thanks for the reply,

I can not change the MTA address to the old one as the version of
GroupWise 7 (on the 10.0.0.12 server) we are running internally is far
newer now. The old version on the original server (10.0.0.2 Groupwise
5.5EP) would mess everyone up and no doubt email would be lost. :( Our
10.0.0.2 server is being used for internal DNS before it checks the
external DNS servers for our provider.

I changed the log level to 15 and and getting lots of activity. Do I
need to worry about "Milter: no active filter" error messages? Don't
those apply only if you are using TLS?

Yes about 90% or more of the email is getting where it needs to go,
hitting our gateway, being scanner and handled over to 10.0.0.12.

I am getting the odd:

Apr 2 09:53:36 spamfilter sendmail[2002]: k32FrZNE002002: Losing
../qfk32FrZNE002002: savemail panic
Apr 2 09:53:36 spamfilter sendmail[2002]: k32FrZNE002002:
SYSERR(root): savemail: cannot save rejected email anywhere

after the "Service unavailable" occasionally and do have full
permissions to the spool directory and plenty of disk space. No disk
errors at all.