Hi all,
I have my server up and running for a while now, but there is one user who seems to have random prolems with sending email. When i look in the mail log it seems like there is something fishy going on with her mail, but i dont really know where to start. This is the log, filtered for the users ip:
Sep 26 10:33:24 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 10:33:24 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 10:33:24 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 10:33:25 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 10:33:25 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 10:52:52 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 10:52:52 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 10:52:52 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 10:52:53 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 10:52:56 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 11:02:44 stonefreevps postfix/smtpd[25163]: connect from unknown[145.89.65.96]
Sep 26 11:07:44 stonefreevps postfix/smtpd[25460]: connect from unknown[145.89.65.96]
Sep 26 11:07:44 stonefreevps postfix/smtpd[25163]: timeout after CONNECT from unknown[145.89.65.96]
Sep 26 11:07:44 stonefreevps postfix/smtpd[25163]: disconnect from unknown[145.89.65.96]
Sep 26 11:07:44 stonefreevps postfix/smtpd[25460]: NOQUEUE: reject: RCPT from unknown[145.89.65.96]: 554 5.7.1 <prins@voedingleeft.nl>: Relay access denied; from=<info@lohermsen.nl> to=<prins@voedingleeft.nl> proto=ESMTP helo=<[145.89.65.96]>
Sep 26 11:07:44 stonefreevps postfix/smtpd[25460]: disconnect from unknown[145.89.65.96]
Sep 26 11:12:44 stonefreevps postfix/anvil[25165]: statistics: max connection rate 1/60s for (smtp:145.89.65.96) at Sep 26 11:02:44
Sep 26 11:12:44 stonefreevps postfix/anvil[25165]: statistics: max connection count 1 for (smtp:145.89.65.96) at Sep 26 11:02:44
Sep 26 11:18:17 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 11:18:17 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 11:18:17 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 11:18:18 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 11:18:18 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 11:25:31 stonefreevps postfix/smtpd[26482]: connect from unknown[145.89.65.96]
Sep 26 11:30:31 stonefreevps postfix/smtpd[26960]: connect from unknown[145.89.65.96]
Sep 26 11:30:31 stonefreevps postfix/smtpd[26482]: timeout after CONNECT from unknown[145.89.65.96]
Sep 26 11:30:31 stonefreevps postfix/smtpd[26482]: disconnect from unknown[145.89.65.96]
Sep 26 11:30:31 stonefreevps postfix/smtpd[26960]: NOQUEUE: reject: RCPT from unknown[145.89.65.96]: 554 5.7.1 <hennekes@senseaware.nl>: Relay access denied; from=<info@lohermsen.nl> to=<hennekes@senseaware.nl> proto=ESMTP helo=<[145.89.65.96]>
Sep 26 11:30:31 stonefreevps postfix/smtpd[26960]: disconnect from unknown[145.89.65.96]
Sep 26 11:41:12 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 11:41:12 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 11:41:12 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 11:41:12 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 11:41:12 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 12:03:54 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 12:03:54 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 12:03:54 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 12:03:55 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Sep 26 12:03:55 stonefreevps dovecot: imap-login: Login: user=<info@lohermsen.nl>, method=PLAIN, rip=145.89.65.96, lip=37.34.59.218
Any ideas whats not working properly here?
cheers
Guido
Howdy,
Well, that shows a lot of IMAP connections... and while it's a little unusual how frequent they are, that's just accessing email already on the server. Their client may be a little, well, email happy :-)
So I wouldn't consider that part a problem necessarily.
However, I do see two errors there when sending email... both are "Relay access denied".
That most commonly occurs when a user attempts to send an email to a user on another server, and their mail client isn't configured to authenticate for outgoing messages.
Many clients don't attempt to do that by default... it's an option that may just need to be enabled.
So the key is to find the Outgoing SMTP section of the email client settings, and enable authentication when sending an email.
-Eric