Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

as of now I have stopped the zentyal mail service

I only have one user setup

as soon as I start it the service backup and run mailq from any system user it is full and keeps trying to send emails as reply's to all my emails that I have retrieved from my gmail accounts. All of which are errors because its trying to send from my local network and 127.0.0.1 address.

I have changed my gmail password so nothing gets sent

here is a sample of my mail.log that is repeated:

May 14 21:30:49 LAMP1 postfix/lmtp[9215]: D27BA1AA31F: to=<BLANKFORSECURITY@nexwrx.local>, relay=127.0.0.1[127.0.0.1]:2003, delay=119897, delays=119896/0.06/0.52/0.04, dsn=5.1.1, status=bounced (host 127.0.0.1[127.0.0.1] said: 503 5.1.1 User does not exist (in reply to RCPT TO command))
May 14 21:30:49 LAMP1 postfix/lmtp[8672]: DFD2E15D99D: to=<BLANKFORSECURITY@nexwrx.local>, relay=127.0.0.1[127.0.0.1]:2003, conn_use=13, delay=203293, delays=203292/0.12/0.01/0.04, dsn=5.1.1, status=bounced (host 127.0.0.1[127.0.0.1] said: 503 5.1.1 User does not exist (in reply to RCPT TO command))
May 14 21:30:49 LAMP1 postfix/error[9082]: 1A0A215880A: to=<email_feedback_handler@mta-inbound.cluster3.convio.net>, relay=none, delay=0.32, delays=0.3/0.01/0/0.01, dsn=4.7.8, status=deferred (delivery temporarily suspended: SASL authentication failed; server smtp.gmail.com[173.194.74.109] said: 535-5.7.8 Username and Password not accepted. Learn more at?535-5.7.8 http://support.google.com/mail/bin/answer.py?answer=14257?535 5.7.8 {BADCREDENTIALS} c7sm900994qel.2 - gsmtp)
May 14 21:30:49 LAMP1 postfix/lmtp[8956]: DAC4E15629D: to=<BLANKFORSECURITY@nexwrx.local>, relay=127.0.0.1[127.0.0.1]:2003, conn_use=13, delay=367368, delays=367367/0.13/0/0.01, dsn=5.1.1, status=bounced (host 127.0.0.1[127.0.0.1] said: 503 5.1.1 User does not exist (in reply to RCPT TO command))
May 14 21:30:49 LAMP1 postfix/master[5706]: terminating on signal 15

here's a sample of my mailq

511461A9012    39809 Tue May 14 21:26:55  MAILER-DAEMON
(delivery temporarily suspended: SASL authentication failed; server                   smtp.gmail.com[173.194.74.109] said: 535-5.7.8 Username and Password not accepted. Learn    more at?535-5.7.8 http://support.google.com/mail/bin/answer.py?answer=14257?535 5.7.8    {BADCREDENTIALS} i5sm1629618qaf.0 - gsmtp)
                                      m-9ls7bSrml3mzzA-r    xgzFxPOTsPvUk7KdRu4ZBTRylPsAvWHObgIK9y5h@bounce.linkedin.com

51B7D151B20    43361 Tue May 14 13:12:19  MAILER-DAEMON
(delivery temporarily suspended: SASL authentication failed; server   smtp.gmail.com[173.194.74.109] said: 535-5.7.8 Username and Password not accepted. Learn   more at?535-5.7.8 http://support.google.com/mail/bin/answer.py?answer=14257?535 5.7.8   {BADCREDENTIALS} i5sm1629618qaf.0 - gsmtp)
                                     bounced@godaddy.com

5DBE71555D3    18431 Tue May 14 21:23:59  MAILER-DAEMON
(delivery temporarily suspended: SASL authentication failed; server smtp.gmail.com[173.194.74.109] said: 535-5.7.8 Username and Password not accepted. Learn more at?535-5.7.8 http://support.google.com/mail/bin/answer.py?answer=14257?535 5.7.8 {BADCREDENTIALS} i5sm1629618qaf.0 - gsmtp)
                                     bounces+54603-  85a7BLANKFORSECURITY=nexwrx.com@email.pd25.com

52D3B15EB88    11111 Tue May 14 20:44:02  MAILER-DAEMON
(delivery temporarily suspended: SASL authentication failed; server smtp.gmail.com[173.194.74.109] said: 535-5.7.8 Username and Password not accepted. Learn more at?535-5.7.8 http://support.google.com/mail/bin/answer.py?answer=14257?535 5.7.8 {BADCREDENTIALS} j3sm1540849qav.1 - gsmtp)
                                     BLANKFORSECURITY@gmail.com

593831C2B89     5903 Tue May 14 09:16:31  MAILER-DAEMON
(delivery temporarily suspended: SASL authentication failed; server smtp.gmail.com[173.194.74.109] said: 535-5.7.8 Username and Password not accepted. Learn more at?535-5.7.8 http://support.google.com/mail/bin/answer.py?answer=14257?535 5.7.8 {BADCREDENTIALS} j3sm1540849qav.1 - gsmtp)
                                     BLANKFORSECURITY@me.com

5616015AB4E    27359 Tue May 14 10:13:12  MAILER-DAEMON
(delivery temporarily suspended: SASL authentication failed; server smtp.gmail.com[173.194.74.109] said: 535-5.7.8 Username and Password not accepted. Learn more at?535-5.7.8 http://support.google.com/mail/bin/answer.py?answer=14257?535 5.7.8 {BADCREDENTIALS} j3sm1540849qav.1 - gsmtp)
                                     BLANKFORSECURITY@temple.edu

here's an email one of my coworkers sent forwarded back to me (also my gmail/sent directory shows hundreds of these errors emails being sent per hr.)

from:    Mail Delivery System <info@nexwrx.com>
to:  email_feedback_handler@mta-inbound.cluster3.convio.net
date:    Tue, May 14, 2013 at 8:36 AM
subject:     Undelivered Mail Returned to Sender

This is the mail system at host LAMP1.NEXWRX.LOCAL.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

                   The mail system

<jmituzas@nexwrx.local>: delivery temporarily suspended: lost connection with
    127.0.0.1[127.0.0.1] while receiving the initial server greeting

Final-Recipient: rfc822; jmituzas@nexwrx.local
Original-Recipient: rfc822;jmituzas@nexwrx.local
Action: failed
Status: 4.4.2
Diagnostic-Code: X-Postfix; delivery temporarily suspended: lost connection
    with 127.0.0.1[127.0.0.1] while receiving the initial server greeting

also came with attachment:

Return-Path: <email_feedback_handler@mta-inbound.cluster3.convio.net>
Received: from localhost (localhost.localdomain [127.0.0.1])
    by LAMP1.NEXWRX.LOCAL (Postfix) with ESMTP id 8A9971505AC
    for <jmituzas@nexwrx.local>; Thu,  9 May 2013 08:18:10 -0400 (EDT)
X-Virus-Scanned: by amavisd-new-2.6.5 (20110407) (Debian) at NEXWRX.LOCAL
X-Spam-Flag: NO
X-Spam-Score: 0.973
X-Spam-Level: 
X-Spam-Status: No, score=0.973 required=5 tests=[HTML_MESSAGE=0.001,
    RCVD_IN_DNSWL_NONE=-0.0001, SPF_SOFTFAIL=0.972] autolearn=no
Received: from LAMP1.NEXWRX.LOCAL ([127.0.0.1])
    by localhost (LAMP1.NEXWRX.LOCAL [127.0.0.1]) (amavisd-new, port 10024)
    with ESMTP id aeRgpvnX5Fkp for <jmituzas@nexwrx.local>;
    Thu,  9 May 2013 08:18:06 -0400 (EDT)
Received: from LAMP1.NEXWRX.LOCAL (localhost.localdomain [127.0.0.1])
    by LAMP1.NEXWRX.LOCAL (Postfix) with ESMTP id 2C83D15037F
    for <jmituzas@nexwrx.local>; Thu,  9 May 2013 08:01:54 -0400 (EDT)
Delivered-To: m.nexwrx@gmail.com
Received: from qc-in-f108.1e100.net [173.194.76.108]
    by LAMP1.NEXWRX.LOCAL with IMAP (fetchmail-6.3.21)
    for <jmituzas@nexwrx.local> (single-drop); Thu, 09 May 2013 08:01:54 -0400 (EDT)
Received: by 10.58.171.41 with SMTP id ar9csp80852vec; Tue, 19 Mar 2013
 14:09:04 -0700 (PDT)
X-Received: by 10.220.103.7 with SMTP id i7mr4736413vco.7.1363727343974; Tue,
 19 Mar 2013 14:09:03 -0700 (PDT)
Received: from mail-24-ewr.dyndns.com (mxout-032-ewr.mailhop.org.
 [216.146.33.32]) by mx.google.com with ESMTP id
 e9si18182922vcp.11.2013.03.19.14.09.03; Tue, 19 Mar 2013 14:09:03 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning
 email_feedback_handler@mta-inbound.cluster3.convio.net does not designate
 216.146.33.32 as permitted sender) client-ip=216.146.33.32;
Authentication-Results: mx.google.com; spf=softfail (google.com: domain of
 transitioning email_feedback_handler@mta-inbound.cluster3.convio.net does not
 designate 216.146.33.32 as permitted sender)
 smtp.mail=email_feedback_handler@mta-inbound.cluster3.convio.net
Received: from scan-21-ewr.mailhop.org (scan-21-ewr.local [10.0.141.243]) by
 mail-24-ewr.dyndns.com (Postfix) with ESMTP id B01515CBFA4 for
 <BLANKFORSECURITY@nexwrx.com>; Tue, 19 Mar 2013 21:09:03 +0000 (UTC)
X-Mail-Handler: MailHop by DynDNS
X-Originating-IP: 69.48.252.163
Received: from mta-c3poola1.cluster3.convio.net
 (mta-c3poola1.cluster3.convio.net [69.48.252.163]) by mail-24-ewr.dyndns.com
 (Postfix) with ESMTP id 6407E5CED2D for <BLANKFORSECURITY@nexwrx.com>; Tue, 19 Mar
 2013 21:08:59 +0000 (UTC)
Received: from 10.0.31.217 (10.0.31.59) by mta-c3poola1.cluster3.convio.net id
 h939um1argke for <kmituzas@nexwrx.com>; Tue, 19 Mar 2013 16:08:56 -0500
 (envelope-from <email_feedback_handler@mta-inbound.cluster3.convio.net>)
Message-ID: <13499914.1363727336316.JavaMail.www@app339>
Date: Tue, 19 Mar 2013 15:59:24 -0500 (CDT)
From: TechSoup By the Cup <btc@e.techsoup.org>
Reply-To: TechSoup By the Cup <btc@e.techsoup.org>
To: BLANKFORSECURITY@nexwrx.com
Subject: Windows MultiPoint Server; Libraries on the Edge; Reach for the Cloud
Mime-Version: 1.0
Content-Type: multipart/alternative;
 boundary="----=_Part_9884711_7948315.1363727336315"
Organization: TechSoup Global
X-campaignid: Convio-poola-tsg-17041
X-Gateway: c3poola1
XData: 1010,4Myn4eQ@4KKQ4@Kyt4@i-Wwjq-e
X-ConvioDeliveryGroup: poola

as you can see I am also using the dyndns.org mailhop to forward emails to my gmail account from my domain. one thing I keep seeing is mta-c3poola1.cluster3.convio.net which is not within my doamin.

any help is greatly appreciated!!
Thanks soooo much in advance, jmituzas

Edit:

Looks like a fresh install tonight since I can't figure out how to start postfix without it sending replies to every email that was retrieved!?

Any ideas on how I can prevent something like this from happening again would be greatly "ungodly" appreciated!

Thanks in advance

share|improve this question
add comment

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.