Cannot receive emails - very strange problem

Hi there, I have been getting support on IRC but the folks there weren’t able to help me out, so I thought I’d post here to see if you guys can help me. Because I don’t fully understand the problem, only the symptoms, I will post the various log files here:

The Bounce email when sending from my gmail account to the account in question:

Delivered-To: s0l1dsnak3123@gmail.com
Received: by 10.216.8.143 with SMTP id 15cs298070wer;
Sat, 1 Aug 2009 17:01:59 -0700 (PDT)
Received: by 10.150.185.13 with SMTP id i13mr7562783ybf.117.1249171318702;
Sat, 01 Aug 2009 17:01:58 -0700 (PDT)
Return-Path: <>
Received: from syntaxmonster.net (mail.syntaxmonster.net [174.143.209.220])
by mx.google.com with ESMTP id 25si9147884gxk.23.2009.08.01.17.01.57;
Sat, 01 Aug 2009 17:01:58 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of syntaxmonster.net designates 174.143.209.220 as permitted sender) client-ip=174.143.209.220;
Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of syntaxmonster.net designates 174.143.209.220 as permitted sender) smtp.mail=
Received: by syntaxmonster.net (Postfix)
id C9F30F0155; Sun, 2 Aug 2009 00:01:57 +0000 (UTC)
Date: Sun, 2 Aug 2009 00:01:57 +0000 (UTC)
From: MAILER-DAEMON@syntaxmonster.net (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: s0l1dsnak3123@googlemail.com
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary=“80B3FF0151.1249171317/syntaxmonster.net”
Message-Id: 20090802000157.C9F30F0155@syntaxmonster.net

This is a MIME-encapsulated message.

–80B3FF0151.1249171317/syntaxmonster.net
Content-Description: Notification
Content-Type: text/plain; charset=us-ascii

This is the mail system at host syntaxmonster.net.

I’m sorry to have to inform you that your message could not
be delivered to one or more recipients. It’s attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

               The mail system

john.syntaxmo@syntaxmonster.net (expanded from john@syntaxmonster.net):
User unknown in virtual alias table

–80B3FF0151.1249171317/syntaxmonster.net
Content-Description: Delivery report
Content-Type: message/delivery-status

Reporting-MTA: dns; syntaxmonster.net
X-Postfix-Queue-ID: 80B3FF0151
X-Postfix-Sender: rfc822; s0l1dsnak3123@googlemail.com
Arrival-Date: Sun, 2 Aug 2009 00:01:57 +0000 (UTC)

Final-Recipient: rfc822; john.syntaxmo@syntaxmonster.net
Original-Recipient: rfc822;john@syntaxmonster.net
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; User unknown in virtual alias table

–80B3FF0151.1249171317/syntaxmonster.net
Content-Description: Undelivered Message
Content-Type: message/rfc822

Received: from mail-ew0-f227.google.com (mail-ew0-f227.google.com [209.85.219.227])
by syntaxmonster.net (Postfix) with ESMTP id 80B3FF0151
for john@syntaxmonster.net; Sun, 2 Aug 2009 00:01:57 +0000 (UTC)
Received: by ewy27 with SMTP id 27so57847ewy.40
for john@syntaxmonster.net; Sat, 01 Aug 2009 17:01:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=googlemail.com; s=gamma;
h=domainkey-signature:mime-version:received:in-reply-to:references
:date:message-id:subject:from:to:content-type;
bh=18KX+mFfl+AVw4cV/qilwmqps4cMmXrQ3+zOCn7LA7Q=;
b=dmapW2/2AOYoC67mFHpvO94zUGMorVSy9YGRkEFN/h1UhvCBO1rDEIBWF9ZsfVCJqo
VLMSCTW/4Kpt18xllBlRxjnw2GbryrBFMmD8TrE93m3dMd5QIVASeIGHwpOKwtV/cIhF
N62x3AUUGJcaB2vI5WKKjsJ7up3ckyCumyoac=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=googlemail.com; s=gamma;
h=mime-version:in-reply-to:references:date:message-id:subject:from:to
:content-type;
b=UZNz9RkzkHqD3uXAGnojwNr8wQxsaQYvbnxq+bO7Ox9Nj7E86b/mtuk+GyatRP2NYV
at4iXG1F2ldYQtPZRjhfhGQT4tLcoLxcM3T5poeShQ34Qb+vrj+0sV5FDj/kKzD28AyS
0A7rZlYzzbEwMRkl7reDmFx/AAG73OK5oJG3I=
MIME-Version: 1.0
Received: by 10.216.91.15 with SMTP id g15mr828411wef.24.1249171315422; Sat,
01 Aug 2009 17:01:55 -0700 (PDT)
In-Reply-To: 1249171259.32010@syntaxmonster.net
References: 1249171259.32010@syntaxmonster.net
Date: Sun, 2 Aug 2009 01:01:55 +0100
Message-ID: 2536c9d0908011701q39daf0aek27e2e01fcf37ecfe@mail.gmail.com
Subject: Re: Test
From: s0l1dsnak3123 s0l1dsnak3123@googlemail.com
To: John Hamelink john@syntaxmonster.net
Content-Type: multipart/alternative; boundary=0016e6d566ad84f4cd04701d5c08

–0016e6d566ad84f4cd04701d5c08
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Test.

2009/8/2 John Hamelink john@syntaxmonster.net

lalalalala


http://www.syntaxmonster.net
For all your web design needs.

–0016e6d566ad84f4cd04701d5c08
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Test.

<div class=3D"gmail_quote">2009/8/2 John Hamelink <span dir=3D=
“ltr”><<a href=3D"mailto:john@syntaxmonster.net">john@syntaxmonster.net<=
/a>>
<blockquote class=3D"gmail_quote" style=3D"border-left: 1=
px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"=

lalalalala




--
http://www.syntaxmonster.net
For all your web desi= gn needs.

–0016e6d566ad84f4cd04701d5c08–

–80B3FF0151.1249171317/syntaxmonster.net–

Administration username:
syntaxmo

/var/log/mail.log:
Aug 2 14:00:53 syntaxmonster dovecot: imap-login: Login: user=, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured
Aug 2 14:00:53 syntaxmonster dovecot: imap-login: Login: user=, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured
Aug 2 14:00:53 syntaxmonster dovecot: imap-login: Login: user=, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured
Aug 2 14:00:53 syntaxmonster dovecot: IMAP(syntaxmo): Connection closed
Aug 2 14:00:53 syntaxmonster dovecot: IMAP(syntaxmo): Connection closed
Aug 2 14:00:53 syntaxmonster dovecot: IMAP(syntaxmo): Connection closed
Aug 2 14:01:16 syntaxmonster postfix/smtpd[20267]: disconnect from mail-ew0-f227.google.com[209.85.219.227]

Domain Mapping Lookup Tables:
hash:/etc/postfix/virtual

ls -ltr /var/mail
total 0
-rw------- 1 root mail 0 2009-07-27 20:01 root
-rw-rw---- 1 john mail 0 2009-07-27 20:24 john
-rw-rw---- 1 jobs.syntaxmo mail 0 2009-07-27 20:24 jobs.syntaxmo
-rw-rw---- 1 dave.syntaxmo mail 0 2009-07-27 20:31 dave.syntaxmo
-rw-rw---- 1 john.syntaxmo mail 0 2009-07-27 20:31 john.syntaxmo

ls -ld /var/mail
drwxrwsr-x 2 root mail 4096 2009-07-27 20:31 /var/mail

Apparently, the mail is accepted, then bounced back. Re-Check Config passes test, too :S

I don’t understand the majority of what I just posted, I just posted up all the things that the IRC guys asked for, in an attempt at filling you in on the details.

Thanks in advance for your help,
John.

Hi John,

That sort of thing can happen if there’s a hostname mismatch between what the system says, what /etc/hosts says, and what mydestination in /etc/postfix/main.cf says.

What’s the output of these commands:

  1. hostname

  2. cat /etc/hosts

  3. grep mydestination /etc/postfix/main.cf

Thanks,

-Eric

are the other mail users receiving mail?

did you try to remove john.syntaxmo from the virtual table? then: # postmap /etc/postfix/virtual

Hello!

Noob speaking! Having an issue with receiving mail - can send ok All accounts.
Running Postfix on a brand new server with Virtualmin (thus the post here ;-))
From above post:

What’s the output of these commands:

hostname: srv.phpmydev.com

cat /etc/hosts

[root@srv postfix]# cat /etc/hosts

127.0.0.1 localhost.localdomain localhost

204.62.14.138 srv.phpmydev.com srv

grep mydestination /etc/postfix/main.cf

[root@srv postfix]# grep mydestination /etc/postfix/main.cf

I assume everything after a hash mark is a comment so that is omitted here
mydestination = $myhostname, localhost.$mydomain, $mydomain

Thank you for any help!

Same here.

I think that there is need of a good tutorial on this subject that will be in more detail.

Howdy,

What happens when someone tries to send you an email – do you get any errors of some kind?

You may want to take a look in your mail logs – either /var/log/maillog or /var/log/mail.log, to see if any errors are showing up in there during the delivery.

-Eric

Thanks for your reply Eric

Here is a part of my maillog

Nov 1 09:55:49 srv postfix/qmgr[23587]: 1C4DEC2178: to=, orig_to=, relay=none, delay=52889, delays=52858/31/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to com.com[216.239.113.101]: Connection timed out) Nov 1 09:55:49 srv postfix/qmgr[23587]: 88AECC226C: to=, orig_to=, relay=none, delay=6285, delays=6253/31/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to com.com[216.239.113.101]: Connection timed out) Nov 1 09:55:49 srv postfix/qmgr[23587]: B7169C20D8: to=, orig_to=, relay=none, delay=65854, delays=65823/31/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to com.com[216.239.113.101]: Connection timed out) Nov 1 09:55:49 srv postfix/qmgr[23587]: E7BA2C215C: to=, orig_to=, relay=none, delay=55440, delays=55409/31/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to com.com[216.239.113.101]: Connection timed out) Nov 1 09:55:49 srv postfix/qmgr[23587]: BE09FC20CA: to=, orig_to=, relay=none, delay=66175, delays=66144/31/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to com.com[216.239.113.101]: Connection timed out) Nov 1 09:55:49 srv postfix/qmgr[23587]: B6AA2C20E9: to=, orig_to=, relay=none, delay=64108, delays=64077/31/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to com.com[216.239.113.101]: Connection timed out) Nov 1 09:55:49 srv postfix/qmgr[23587]: 5002AC220D: to=, orig_to=, relay=none, delay=12197, delays=12166/31/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to com.com[216.239.113.101]: Connection timed out) Nov 1 09:55:49 srv postfix/qmgr[23587]: 63C97C2183: to=, orig_to=, relay=none, delay=52065, delays=52034/31/0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to com.com[216.239.113.101]: Connection timed out) Nov 1 09:55:54 srv dovecot: imap-login: Login: user=, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Nov 1 09:55:54 srv dovecot: IMAP(rwhitney.phpmydev): Disconnected: Logged out Nov 1 09:56:17 srv postfix/smtp[14888]: connect to google.com[72.14.204.103]: Connection timed out (port 25) Nov 1 09:56:18 srv postfix/smtp[14889]: connect to google.com[72.14.204.103]: Connection timed out (port 25) Nov 1 09:56:47 srv postfix/smtp[14888]: connect to google.com[72.14.204.104]: Connection timed out (port 25) Nov 1 09:56:48 srv postfix/smtp[14889]: connect to google.com[72.14.204.105]: Connection timed out (port 25)

[Bounce message]
Google tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 550 550 5.1.1 rwhitney@phpmydev.com: Recipient address rejected: User unknown in local recipient table (state 14).

Well, I see some timeout errors there – could anything be blocking port 25? For example, some ISP’s block port 25.

-Eric

I think the mail is making it to the box - just not being delivered to the respective mailboxes

Thanks

~]# nmap -sT -O localhost

25/tcp open smtp

Yeah, that shows that port 25 on your own server is up and listening… but can you verify that you’re able to see port 25 on other servers?

Also, can you verify that if you go into System Settings -> Re-Check Config, that it doesn’t detect any problems?

-Eric

Just ran re-check config with no errors at all!
This is really puzzling.
Thank you for your help Eric!

From aboutmyip.com
SMTP (TCP/25): 220 phpmydev.com ESMTP Postfix

Well, I was concerned about the “Connection timed out” errors in your Postfix config… that suggests there’s a problem with outgoing email.

However, as I test that same thing here – I’m not able to connect to that IP address either.

So, let’s ignore that error for just a moment…

What output do you get when running this command:

postconf -n

Hi Eric,
I have since reprovisioned the server with Interworx and my mail problems do not persist at this time, so this thread can be closed. Thank you for your responses anyway.
Richard