Re: how are you stopping this? (mailq full of connection refused)

[Noel Jones [Permanent Link]]

At 03:07 PM 8/11/2007, Larry Vaden wrote:
> Aug 11 00:06:45 mx1 postfix/smtpd[9656]: NOQUEUE: reject: RCPT from 
> unknown[218.
> 37.6.153]: 550 5.1.1 <redacted AT texoma DOT net>: Recipient address 
> rejected: User un
> known; from=<redacted AT hotmail DOT com> to=<redacted AT texoma DOT net> 
> proto=SMTP helo=<
> hotmail.com>
>
> (enforced by relay_recipients).
>
> If it is the latter, then our amavisd.conf may be in error;  seemingly
> relevant (and default) portion:
>
> $sa_tag_level_deflt  = 2.0;  # add spam info headers if at, or above 
> that level
> $sa_tag2_level_deflt = 6.2;  # add 'spam detected' headers at that level
> $sa_kill_level_deflt = 6.9;  # triggers spam evasive actions (e.g. 
> blocks mail)
> $sa_dsn_cutoff_level = 10;   # spam level beyond which a DSN is not sent
> # $sa_quarantine_cutoff_level = 25; # spam level beyond which 
> quarantine is off
> $penpals_bonus_score = 8;    # (no effect without a @storage_sql_dsn database)
> $penpals_threshold_high = $sa_kill_level_deflt;  # don't waste time on hi spam
>
> At any rate, a sample of a deferred queue entry is below the sig.
>
> Kind regards/ldv
>
> [root@mx1 defer]# cat ../deferred/F/F350C76C869
> CO           3625             607               1               0
>       3625T1186749398
> 996479Acreate_time=1186749398Arewrite_context=remoteA/envelope_id=AM..20070810T123638Z
>  AT mx1.texoma DOT 
> netSAlog_client_name=mx1.texoma.netAlog_client_address=127.0.0.1A,log_message_origin=mx1.texoma.net[127.0.0.1]Alog_helo_name=localhostAlog_protocol_name=ESMTPAclient_name=mx1.texoma.netA"reverse_client_name=mx1.texoma.netAclient_address=127.0.0.1Ahelo_name=localhostAclient_address_type=2A2dsn_orig_rcpt=rfc822;4inkjets
>  AT polsterfindernet DOT comO4inkjets@polsterfindernet.comR4inkjets AT 
> polsterfindernet DOT comMN5Received:
> from localhost (mx1.texoma.net [127.0.0.1])N6       by mx1.texoma.net
> (Postfix) with ESMTP id F350C76C869NK for
> <4inkjets AT polsterfindernet DOT com>; Fri, 10 Aug 2007 07:36:38 -0500
> (CDT)N<Content-Type: multipart/report; report-type=delivery-status;N*
> boundary="----------=_1186749398-24604-4"NContent-Transfer-Encoding:
> 7bitNMIME-Version: 1.0N?Subject: Considered UNSOLICITED BULK EMAIL,
> apparently from youN:In-Reply-To:
> <jLgIEBmCzIWEnxTzAWRLLA AT polsterfindernet DOT com>N+Message-ID:
> <SS2+W8Ifs78nNF AT mx1.texoma DOT net>NDFrom: "Content-filter at
use "postcat -q F350C76C869" get a text version of the queue file.

This looks like an amavisd-new sender notification.  Check the 
setting of $warnspamsender or lower the $sa_dsn_cutoff_level.
--
Noel Jones