Postfix stopping

Virtualmin
1

Hi all,

For some reason my postfix keeps stopping. I’ve never had issues with postfix shutting down and I’m not even sure how to start diagnosing the issue.

I can restart it, but it only stays up for a few seconds at most and then shuts back down.

I have 100 lines of the mail log here:

Suggestions would be appreciated :slight_smile:

Thanks,

Chris

SYSTEM INFORMATION
OS type and version Ubuntu Linux 22.04.4
Webmin version 2.111
Virtualmin version 7.10.0
Related packages Postfix 3.6.4
2

Nothing of real help for me, only thing I see is alot of connection at around the same time causing a postfix running out of memory. Is you memory monitor going high?

What the Mail Queue looking like?

3

Yep, you’re right, cpu over 100%, real memory almost 100% within seconds of turning it on, then is crashes and we go back to normal cpu and mem.

So it’s spam again. I used to have issues with the whole server crashing due to spam. That’s why I now have separate mail and web servers. Haven’t had this issue in a long time though.

I have a common name domain name, so sometimes it just gets ton of spam to non-existing users.

I’ll try turning on greylisting and see if that helps. Any other ideas that might help deal with this?

Thanks,

Chris

4

Greylisting didn’t help, hmmm…

5

who is autumn andrews

Aborted login by logging out (auth failed, 2 attempts in 27 secs): user=, method=PLAIN, rip=172.59.32.215, lip=31.220.100.231, session=

but thats dovecot.

I suspect a internal script. You seem to have wordpress, have you install wordfence?

6

There is no one on the server with that name.

When you asked for the queue, do you mean this? postqueue -p?

I think the server you are looking at is the web server with WP, and I do use WF, but would that affect mail?

Thanks for taking a look at this,

Chris

7

It can if someone uploaded a script via wordpress.Is your mail queue empty?
It looks clean, in wordfence in scan is it all green ticks?

image
image1184×374 17.5 KB

mail queue

image
image1434×680 88.1 KB

In fail2ban, is that working

image
image1431×694 42.4 KB

8

Have you created any mailing list? I see alot of bounce back to chris.andrews@jemma.andrews.com I think.

10

I am not an expert, but if you are getting bounces they are probably failed emails.

  • Do you have any accounts that have larger than normal bandwidth usage?
  • Any that are over disk quota? can indicate foreign files or large log files.
  • Are any of the users (virtual server owners) on your server using excessive resources
  • Do you have restrictions on the number of emails a user can send?

On the pro, there are some resource restrictions that might be of use, I have not used them yet to give you more of an idea.

11

no point in necroposting the last real input to this thread was over a month ago …

12

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.