vicioussn
Newbie | Редактировать | Профиль | Сообщение | Цитировать | Сообщить модератору Здравствуйте! Прошу помощи по следующему вопросу. Периодически пропадают письма ... как бы это сказать ... в самом почтовом сервере. Причем как при отправке через SMTP OUT, так и при приеме через SMTP IN. Указанные логи будут только о SMTP OUT, т.к. вот инцидент произошел, и не нужно ничего искать. О сервере: установлен только MDaemon, модуля антивирусного нет, контент-фильтр выключен. Установлен Касперский для файл-серверов. Привожу лог по пропавшему письму (а ниже - будет лог по нормально отправленному письму): Tue 2010-10-05 22:07:34: ---------- Tue 2010-10-05 22:07:33: [4576:1] Session 4576; child 1; thread 0 Tue 2010-10-05 22:07:33: [4576:1] Accepting SMTP connection from [xxx.xxx.xxx.xxx:1897] to [xxx.xxx.xxx.xxx:25] Tue 2010-10-05 22:07:34: [4576:1] --> 220 <domain_name> ESMTP MDaemon 11.0.1; Tue, 05 Oct 2010 22:07:34 +0300 Tue 2010-10-05 22:07:34: [4576:1] <-- EHLO <client_name> Tue 2010-10-05 22:07:34: [4576:1] --> 250-<domain_name> Hello <client_name>, pleased to meet you Tue 2010-10-05 22:07:34: [4576:1] --> 250-VRFY Tue 2010-10-05 22:07:34: [4576:1] --> 250-EXPN Tue 2010-10-05 22:07:34: [4576:1] --> 250-ETRN Tue 2010-10-05 22:07:34: [4576:1] --> 250-AUTH=LOGIN Tue 2010-10-05 22:07:34: [4576:1] --> 250-AUTH LOGIN CRAM-MD5 Tue 2010-10-05 22:07:34: [4576:1] --> 250-8BITMIME Tue 2010-10-05 22:07:34: [4576:1] --> 250-STARTTLS Tue 2010-10-05 22:07:34: [4576:1] --> 250 SIZE 40000000 Tue 2010-10-05 22:07:34: [4576:1] <-- AUTH LOGIN Tue 2010-10-05 22:07:34: [4576:1] --> 334 VXNlcm5hbWU6 Tue 2010-10-05 22:07:34: [4576:1] <-- bWFpbGFkbWluMWNfMTA= Tue 2010-10-05 22:07:34: [4576:1] --> 334 UGFzc3dvcmQ6 Tue 2010-10-05 22:07:34: [4576:1] <-- ****** Tue 2010-10-05 22:07:34: [4576:1] --> 235 Authentication successful Tue 2010-10-05 22:07:34: [4576:1] Authenticated as <sender_address> Tue 2010-10-05 22:07:34: [4576:1] <-- RSET Tue 2010-10-05 22:07:34: [4576:1] --> 250 RSET? Well, ok. Tue 2010-10-05 22:07:34: [4576:1] <-- MAIL FROM:<sender_address> Tue 2010-10-05 22:07:34: [4576:1] --> 250 <sender_address>, Sender ok Tue 2010-10-05 22:07:34: [4576:1] <-- RCPT TO:<recipient_address> Tue 2010-10-05 22:07:34: [4576:1] --> 250 <recipient_address>, Recipient ok Tue 2010-10-05 22:07:34: [4576:1] <-- DATA Tue 2010-10-05 22:07:34: [4576:1] Creating temp file (SMTP): c:\mdaemon\queues\temp\md50001081848.tmp Tue 2010-10-05 22:07:34: [4576:1] --> 354 Enter mail, end with <CRLF>.<CRLF> Tue 2010-10-05 22:07:34: [4576:1] Message size: 2181 bytes Tue 2010-10-05 22:07:34: [4576:1] Создание сообщения successful: c:\mdaemon\queues\inbound\md50002073458.msg Tue 2010-10-05 22:07:34: [4576:1] --> 250 Ok, message saved <Message-ID: > Tue 2010-10-05 22:07:34: [4576:1] <-- QUIT Tue 2010-10-05 22:07:34: [4576:1] --> 221 See ya in cyberspace Tue 2010-10-05 22:07:34: [4576:1] SMTP session successful (Bytes in/out: 2346/540) Tue 2010-10-05 22:07:34: ---------- Tue 2010-10-05 22:07:38: ---------- Tue 2010-10-05 22:07:39: Routing message (inbound queue): c:\mdaemon\queues\inbound\md50002073458.msg Tue 2010-10-05 22:07:39: * From: <sender_address>; Recipient: <recipient_address>; Size: 2758; Message: c:\mdaemon\queues\remote\md35000781337.msg Tue 2010-10-05 22:07:39: * From: <sender_address>; Recipient: <recipient_address>; Size: 3010; Message: c:\mdaemon\queues\local\md50003534103.msg (тут копия письма дублируется в ящик для безопасников - вот им эта копия доставляется) Tue 2010-10-05 22:07:39: * Subject: [H10][00458][1][1\1][05.10.10 - 22:07:34] Tue 2010-10-05 22:07:39: * Message-ID: Tue 2010-10-05 22:07:39: ---------- Вот и все. На этом путь сообщения заканчивается. А вот лог по письму, которое нормально отправляется: Tue 2010-10-05 22:06:56: ---------- Tue 2010-10-05 22:07:31: [4570:1] Session 4570; child 1; thread 0 Tue 2010-10-05 22:07:31: [4570:1] Accepting SMTP connection from [xxx.xxx.xxx.xxx:1891] to [xxx.xxx.xxx.xxx:25] Tue 2010-10-05 22:07:31: [4570:1] --> 220 <domain_name> ESMTP MDaemon 11.0.1; Tue, 05 Oct 2010 22:07:31 +0300 Tue 2010-10-05 22:07:31: [4570:1] <-- EHLO <client_name> Tue 2010-10-05 22:07:31: [4570:1] --> 250-<domain_name> Hello <client_name>, pleased to meet you Tue 2010-10-05 22:07:31: [4570:1] --> 250-VRFY Tue 2010-10-05 22:07:31: [4570:1] --> 250-EXPN Tue 2010-10-05 22:07:31: [4570:1] --> 250-ETRN Tue 2010-10-05 22:07:31: [4570:1] --> 250-AUTH=LOGIN Tue 2010-10-05 22:07:31: [4570:1] --> 250-AUTH LOGIN CRAM-MD5 Tue 2010-10-05 22:07:31: [4570:1] --> 250-8BITMIME Tue 2010-10-05 22:07:31: [4570:1] --> 250-STARTTLS Tue 2010-10-05 22:07:31: [4570:1] --> 250 SIZE 40000000 Tue 2010-10-05 22:07:31: [4570:1] <-- AUTH LOGIN Tue 2010-10-05 22:07:31: [4570:1] --> 334 VXNlcm5hbWU6 Tue 2010-10-05 22:07:31: [4570:1] <-- bWFpbGFkbWluMWNfMTA= Tue 2010-10-05 22:07:31: [4570:1] --> 334 UGFzc3dvcmQ6 Tue 2010-10-05 22:07:31: [4570:1] <-- ****** Tue 2010-10-05 22:07:31: [4570:1] --> 235 Authentication successful Tue 2010-10-05 22:07:31: [4570:1] Authenticated as <sender_address> Tue 2010-10-05 22:07:31: [4570:1] <-- RSET Tue 2010-10-05 22:07:31: [4570:1] --> 250 RSET? Well, ok. Tue 2010-10-05 22:07:31: [4570:1] <-- MAIL FROM:<sender_address> Tue 2010-10-05 22:07:31: [4570:1] --> 250 <sender_address>, Sender ok Tue 2010-10-05 22:07:31: [4570:1] <-- RCPT TO:<recipient_address> Tue 2010-10-05 22:07:31: [4570:1] --> 250 <recipient_address>, Recipient ok Tue 2010-10-05 22:07:31: [4570:1] <-- DATA Tue 2010-10-05 22:07:31: [4570:1] Creating temp file (SMTP): c:\mdaemon\queues\temp\md50001081844.tmp Tue 2010-10-05 22:07:31: [4570:1] --> 354 Enter mail, end with <CRLF>.<CRLF> Tue 2010-10-05 22:07:31: [4570:1] Message size: 2183 bytes Tue 2010-10-05 22:07:31: [4570:1] Создание сообщения successful: c:\mdaemon\queues\inbound\md50002073455.msg Tue 2010-10-05 22:07:31: [4570:1] --> 250 Ok, message saved <Message-ID: > Tue 2010-10-05 22:07:31: [4570:1] <-- QUIT Tue 2010-10-05 22:07:31: [4570:1] --> 221 See ya in cyberspace Tue 2010-10-05 22:07:31: [4570:1] SMTP session successful (Bytes in/out: 2348/540) Tue 2010-10-05 22:07:31: ---------- Tue 2010-10-05 22:07:33: ---------- Tue 2010-10-05 22:07:33: Routing message (inbound queue): c:\mdaemon\queues\inbound\md50002073455.msg Tue 2010-10-05 22:07:33: * From: <sender_address>; Recipient: <recipient_address>; Size: 2761; Message: c:\mdaemon\queues\remote\md35000781334.msg Tue 2010-10-05 22:07:34: * From: <sender_address>; Recipient: <recipient_address>; Size: 3013; Message: c:\mdaemon\queues\local\md50003534100.msg Tue 2010-10-05 22:07:34: * Subject: [G10][02152][1][1\1][05.10.10 - 22:07:31] Tue 2010-10-05 22:07:34: * Message-ID: Tue 2010-10-05 22:07:34: ---------- Tue 2010-10-05 22:07:35: ---------- Tue 2010-10-05 22:07:34: [4580:3] Parsing message <c:\mdaemon\queues\remote\pd35000781334.msg> Tue 2010-10-05 22:07:34: [4580:3] * From: <sender_address> Tue 2010-10-05 22:07:34: [4580:3] * To: <recipient_address> Tue 2010-10-05 22:07:34: [4580:3] * Subject: [G10][02152][1][1\1][05.10.10 - 22:07:31] Tue 2010-10-05 22:07:34: [4580:3] * Size (bytes): 2761 Tue 2010-10-05 22:07:34: [4580:3] * Message-ID: <MDAEMON-F201010052207.AA0731428md50001081844@<domain_name>> Tue 2010-10-05 22:07:34: [4580:3] Attempting SMTP connection to [<domain_name>] Tue 2010-10-05 22:07:34: [4580:3] Resolving MX records for [<domain_name>] (DNS Server: xxx.xxx.xxx.xxx)... Tue 2010-10-05 22:07:34: [4580:3] * P=005 S=001 D=<domain_name> TTL=(60) MX=[mail.<domain_name>] {xxx.xxx.xxx.xxx} Tue 2010-10-05 22:07:34: [4580:3] * P=010 S=002 D=<domain_name> TTL=(60) MX=[mail2.<domain_name>] {xxx.xxx.xxx.xxx} Tue 2010-10-05 22:07:34: [4580:3] * P=015 S=000 D=<domain_name> TTL=(60) MX=[mail3.<domain_name>] {xxx.xxx.xxx.xxx} Tue 2010-10-05 22:07:34: [4580:3] * P=020 S=003 D=<domain_name> TTL=(60) MX=[mail1.<domain_name>] {xxx.xxx.xxx.xxx} Tue 2010-10-05 22:07:34: [4580:3] Attempting SMTP connection to [xxx.xxx.xxx.xxx:25] Tue 2010-10-05 22:07:34: [4580:3] Waiting for socket connection... Tue 2010-10-05 22:07:34: [4580:3] * Connection established (xxx.xxx.xxx.xxx:1428 -> xxx.xxx.xxx.xxx:25) Tue 2010-10-05 22:07:34: [4580:3] Waiting for protocol to start... Tue 2010-10-05 22:07:34: [4580:3] <-- 220 <domain_name> ESMTP MDaemon 10.1.0; Tue, 05 Oct 2010 23:10:30 +0400 Tue 2010-10-05 22:07:34: [4580:3] --> EHLO <domain_name> Tue 2010-10-05 22:07:34: [4580:3] <-- 250-<domain_name> Hello <domain_name>, pleased to meet you Tue 2010-10-05 22:07:34: [4580:3] <-- 250-VRFY Tue 2010-10-05 22:07:34: [4580:3] <-- 250-EXPN Tue 2010-10-05 22:07:34: [4580:3] <-- 250-ETRN Tue 2010-10-05 22:07:34: [4580:3] <-- 250-AUTH=LOGIN Tue 2010-10-05 22:07:34: [4580:3] <-- 250-AUTH LOGIN CRAM-MD5 Tue 2010-10-05 22:07:34: [4580:3] <-- 250-8BITMIME Tue 2010-10-05 22:07:34: [4580:3] <-- 250-STARTTLS Tue 2010-10-05 22:07:34: [4580:3] <-- 250 SIZE Tue 2010-10-05 22:07:34: [4580:3] --> STARTTLS Tue 2010-10-05 22:07:34: [4580:3] <-- 220 Begin TLS negotiation Tue 2010-10-05 22:07:34: [4580:3] SSL negotiation successful (TLS 1.0, 1024 bit key exchange, 128 bit RC4 encryption) Tue 2010-10-05 22:07:34: [4580:3] --> EHLO <domain_name> Tue 2010-10-05 22:07:35: [4580:3] <-- 250-<domain_name> Hello <domain_name>, pleased to meet you Tue 2010-10-05 22:07:35: [4580:3] <-- 250-VRFY Tue 2010-10-05 22:07:35: [4580:3] <-- 250-EXPN Tue 2010-10-05 22:07:35: [4580:3] <-- 250-ETRN Tue 2010-10-05 22:07:35: [4580:3] <-- 250-AUTH=LOGIN Tue 2010-10-05 22:07:35: [4580:3] <-- 250-AUTH LOGIN CRAM-MD5 Tue 2010-10-05 22:07:35: [4580:3] <-- 250-8BITMIME Tue 2010-10-05 22:07:35: [4580:3] <-- 250 SIZE Tue 2010-10-05 22:07:35: [4580:3] --> MAIL From:<sender_address> SIZE=2761 Tue 2010-10-05 22:07:35: [4580:3] <-- 250 <sender_address>, Sender ok Tue 2010-10-05 22:07:35: [4580:3] --> RCPT To:<recipient_address> Tue 2010-10-05 22:07:35: [4580:3] <-- 250 <recipient_address>, Recipient ok Tue 2010-10-05 22:07:35: [4580:3] --> DATA Tue 2010-10-05 22:07:35: [4580:3] <-- 354 Enter mail, end with <CRLF>.<CRLF> Tue 2010-10-05 22:07:35: [4580:3] Sending <c:\mdaemon\queues\remote\pd35000781334.msg> to [xxx.xxx.xxx.xxx] Tue 2010-10-05 22:07:35: [4580:3] Transfer Complete Tue 2010-10-05 22:07:35: [4580:3] <-- 250 Ok, message saved <Message-ID: MDAEMON-F201010052207.AA0731428md50001081844@<domain_name>> Tue 2010-10-05 22:07:35: [4580:3] --> QUIT Tue 2010-10-05 22:07:35: [4580:3] <-- 221 See ya in cyberspace Tue 2010-10-05 22:07:35: [4580:3] SMTP session successful (Bytes in/out: 687/3049) Tue 2010-10-05 22:07:35: ---------- Очень прошу помочь ... Спасибо! |