0

I have several domains on my VPS server, and postfix relaying the email to the appropriate gmail accounts via a virtual users table. This week I performed a sudo apt-get upgrade, this may be unrelated.

As of 2am on July 8th I'm seeing a lot of the following lines in my mail.log:

conversation with gmail-smtp-in.l.google.com[209.85.143.27] timed out while receiving the initial server greeting
conversation with alt1.gmail-smtp-in.l.google.com[74.125.79.27] timed out while receiving the initial server greeting
conversation with alt2.gmail-smtp-in.l.google.com[74.125.53.27] timed out while receiving the initial server greeting

Some message have got through though:

to=<[email protected]>, orig_to=<[email protected]>, relay=alt3.gmail-smtp-in.l.google.com[74.125.45.27]:25, delay=1130, delays=0.22/0/1128/1.8, dsn=2.0.0, status=sent (250 2.0.0 OK 1310095301 x67si39929948yhm.8)

I've seen this issue reported a lot around the internet but with no real solutions. I checked my postfix config but can't see that anything has changed.

postconf -n

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
append_dot_mydomain = no
biff = no
broken_sasl_auth_clients = yes
config_directory = /etc/postfix
inet_interfaces = all
inet_protocols = all
mailbox_size_limit = 0
mydestination = $myhostname, localhost, localhost.localdomain
myhostname = domainx.com
mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 109.123.86.72/32
myorigin = /etc/mailname
readme_directory = no
recipient_delimiter = +
relayhost = 
smtp_tls_note_starttls_offer = yes
smtp_tls_security_level = may
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtpd_banner = $myhostname ESMTP $mail_name (Linux)
smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = 
smtpd_sasl_path = private/auth-client
smtpd_sasl_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_tls_CAfile = /etc/ssl/certs/dovecot.pem
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /etc/ssl/certs/server.crt
smtpd_tls_key_file = /etc/ssl/private/server.key
smtpd_tls_loglevel = 1
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom
virtual_alias_domains = domain.com, domain.co.uk, domainb.co.uk, domain.net
virtual_alias_maps = hash:/etc/postfix/valiases

I've tried flushing my mail queues (deleting all deferred mail) and restarting the server. I guess I'm running Linux and not Windows so this didn't help :)

I can post more configs if needed. Any ideas?

2 Answers 2

2

It says that the error is a timeout, not a rejection. You have a networking problem not a mail problem. Try connecting with nc or telnet to see how long it takes. Use mtr to see what your packet loss is.

1
  • I used telnet from my VPS, and telnet from my local machine. My VPS wasn't receiving from gmail only sending. My local machine had no issue. I raised a ticket with my hosting company and they said they are having issues with mail delivery so false alarm. Thanks for the help!
    – Greg K
    Jul 9, 2011 at 18:10
1

The fact that some emails are passing through successfully is a strong indication that the issue may be at the remote end - gmail in this case. You might also see if there are any particular trends that can be identified - possibly gmail servers that are constantly working.

Further validation to isolate any chance of an actual network related issue may be to possibly perform a traceroute to one of the non-working servers and then ping the second to last hop. If the network is working correctly, then continuous pings (assuming that the particular host is not dropping ICMP -ping) should be successful without errors.

2
  • Awarded to bahamat but +1 Thanks
    – Greg K
    Jul 9, 2011 at 18:11
  • Not a problem...
    – user48838
    Jul 9, 2011 at 18:49

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .