[BlueOnyx:04653] Re: Server /etc/mail/* deleted

[enid vx]

Maybe I'm right, maybe not, but this has happened me once with a similar
antispam appliance (Cisco Ironport).
I dont know if you are using barracuda as an appliance.
I remember that configuring the MX records and forwarding the mails to my
mailserver caused a loop, with the similar messages in the logs. The mails
kept redirecting and forwarding between the appliance and the server causing
a loop.
I configured sendmail as smart_host and Ironport to forward mails to the
sendmail server, this caused the loop.


Rgds

Enid



On Sat, May 22, 2010 at 2:13 AM, Gerald Waugh <
gwaugh at frontstreetnetworks.com> wrote:

>
> On Fri, 2010-05-21 at 13:15 -0500, Gerald Waugh wrote:
> > On Fri, 2010-05-21 at 12:32 -0500, Gerald Waugh wrote:
> > > On Fri, 2010-05-21 at 10:35 -0500, Gerald Waugh wrote:
> > > > On Fri, 2010-05-21 at 10:08 -0500, Gerald Waugh wrote:
> > > > > On Fri, 2010-05-21 at 09:41 -0500, Gerald Waugh wrote:
> > > > > > On Fri, 2010-05-21 at 09:17 -0500, Gerald Waugh wrote:
> > > > > > > On Fri, 2010-05-21 at 08:55 -0500, Jeff Folk wrote:
> > > > > > > >
> > > > > > > > On May 21, 2010, at 8:34 AM, Gerald Waugh wrote:
> > > > > > > >
> > > > > > > > > Looks like it wasn't hacked
> > > > > > > > > user inadvertently deleted /etc/mail/*
> > > > > > >
> > > > > > > >
> > > > > > > > NICE! Slap their hand..
> > > > > > > I can't reach that far, or I'd do it ;)
> > > > > > > now he has to pay me to fix it... I guess that's a slap.
> > > > > > >
> > > > > > > I took Michael Arnoff's advice
> > > > > > > tarred up a /etc/mail from another server that had only one
> site and one
> > > > > > > user,
> > > > > > >
> > > > > > > I fixed sendmail.mc to use port 587 (waiting to fix other
> things before
> > > > > > > compile restart
> > > > > > >
> > > > > > > Used a script to recreate virtusertable.
> > > > > > > (http://fsn.raqware.com/CBQ/fix-virtusertable.txt)
> > > > > > > ran makemap hash on virtusertable
> > > > > > >
> > > > > > > did 'ls /home/sites > local-host-names'
> > > > > > >
> > > > > > this server has Solarspeed Av-SPAM 5.1.1
> > > > > > I guess remove from the GUI, then reinstall ?
> > > > > >
> > > > > Now getting this error
> > > > >  SMTP server rodzoo.com does not support requested authentication
> type
> > > > > PLAIN.
> > > > >
> > > > > receiving email works
> > > > >
> > > > Also see in the maillog when sending email
> > > >   dsn=4.0.0, stat=Deferred: 421 too many connections
> > >
> > > Everything is working, except the server has a few domains
> > > with the email going through a barracuda box, and those domains don't
> > > seem to be receiving email, log says
> > >
> > > May 21 12:29:13 ns1 sendmail[30763]: o4LHTCER030760: to=<user at zoo.com
> >,
> > > delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=123220,
> > > relay=barracuda.zoo.com. [70.246.22.10], dsn=4.0.0, stat=Deferred: 421
> > > too many connections
> > >
> > > Is this the barracuda causing this error?
> > >
> >
> > OK, got this fixed.
> > added server IP range to NOT be rate controlled
> >
> > All Working
> >
> Oops.
>
> I may need a little help here.
> As I said most email goes through barracuda
> and all that email gets an error "Too many hops"
> I am at a loss as everything else looks and works normal
> MX records are OK etc.
>
>
> _______________________________________________
> Blueonyx mailing list
> Blueonyx at blueonyx.it
> http://www.blueonyx.it/mailman/listinfo/blueonyx
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20100525/2faae910/attachment.html>