Verzögerung bei Mailzustellung extern

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
11 messages Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Verzögerung bei Mailzustellung extern

Andreas Wass - Glas Gasperlmair
Hallo!

Im maillog sieht man sehr deutlich, dass die Zustellung an alle 3 lokalen Empfänger sehr schnell geht (max. delay=0.81, delays=0.02/0/0/0.78)

Warum wartet postfix danach 5 Minuten, bis überhaupt mal ein Verbindungsversuch zum externen Mailserver aufgebaut wird?
Die temp. Abweisung danach ist vermutl. Greylisting (aber um diese Verzögerung geht es nicht)

grep 1B19F341C1DE8F /var/log/maillog

Dec  9 11:35:26 mail postfix/submission/smtpd[12702]: 1B19F341C1DE8F: client=unknown[192.168.105.72], sasl_method=PLAIN, [hidden email]
Dec  9 11:35:26 mail postfix/cleanup[11619]: 1B19F341C1DE8F: message-id=[hidden email]
Dec  9 11:35:26 mail postfix/qmgr[7547]: 1B19F341C1DE8F: from=[hidden email], size=23375, nrcpt=4 (queue active)
Dec  9 11:35:26 mail postfix/lmtp[11798]: 1B19F341C1DE8F: to=[hidden email], relay=127.0.0.1[127.0.0.1]:24, delay=0.08, delays=0.02/0/0/0.06, dsn=2.0.0, status=sent (250 2.0.0 [hidden email] JaaYAO6ISliJMQAA9a9gbQ Saved)
Dec  9 11:35:26 mail postfix/lmtp[11798]: 1B19F341C1DE8F: to=[hidden email], relay=127.0.0.1[127.0.0.1]:24, delay=0.81, delays=0.02/0/0/0.78, dsn=2.0.0, status=sent (250 2.0.0 [hidden email] JaaYAO6ISliJMQAA9a9gbQ:2 Saved)
Dec  9 11:35:26 mail postfix/lmtp[11798]: 1B19F341C1DE8F: to=[hidden email], relay=127.0.0.1[127.0.0.1]:24, delay=0.81, delays=0.02/0/0/0.78, dsn=2.0.0, status=sent (250 2.0.0 [hidden email] JaaYAO6ISliJMQAA9a9gbQ:3 Saved)
Dec  9 11:40:30 mail postfix/smtp[12704]: 1B19F341C1DE8F: Cannot start TLS: handshake failure
Dec  9 11:40:35 mail postfix/smtp[12704]: 1B19F341C1DE8F: host ae30.at.pri-mx.eu0109.smtproutes.com[94.186.192.101] said: 451 4.3.0 Message temporarily deferred. Please try again later. (in reply to RCPT TO command)
Dec  9 11:45:39 mail postfix/smtp[12704]: 1B19F341C1DE8F: Cannot start TLS: handshake failure
Dec  9 11:45:45 mail postfix/smtp[12704]: 1B19F341C1DE8F: to=[hidden email], relay=ae30.at.bak-mx.eu0109.smtpbak.com[208.70.88.50]:25, delay=619, delays=0.02/0.02/617/2.5, dsn=4.3.0, status=deferred (host ae30.at.bak-mx.eu0109.smtpbak.com[208.70.88.50] said: 451 4.3.0 Message temporarily deferred. Please try again later. (in reply to RCPT TO command))

Vielen Dank für eure Bemühungen
vg, Andi
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Verzögerung bei Mailzustellung extern

Andreas Wass - Glas Gasperlmair
Kann mir denn keiner helfen?
Warum kontaktiert mein postfix den externen Server erst so spät?
Intern wird sofort zugestellt und der Server der externen Empfänger wird erst 38 Minuten später das erste Mal kontaktiert

Dec 12 07:52:42 mail postfix/smtpd[25295]: A7D6E300A95AAC: client=unknown[192.168.105.82]
Dec 12 07:52:42 mail postfix/cleanup[25472]: A7D6E300A95AAC: message-id=[hidden email]
Dec 12 07:52:44 mail amavis[25717]: (25717-04) Passed CLEAN {AcceptedInternal}, AM.PDP-SOCK/MYNETS LOCAL [192.168.105.82] [hidden email] -> [hidden email], Queue-ID: A7D6E300A95AAC, Message-ID: [hidden email], mail_id: 23UJsobegQpY, Hits: -0.999, size: 861963, 711 ms
Dec 12 07:52:44 mail postfix/qmgr[2548]: A7D6E300A95AAC: from=[hidden email], size=862116, nrcpt=10 (queue active)
Dec 12 07:52:44 mail postfix/lmtp[24346]: A7D6E300A95AAC: to=[hidden email], relay=127.0.0.1[127.0.0.1]:24, delay=1.6, delays=1.5/0.01/0/0.15, dsn=2.0.0, status=sent (250 2.0.0 [hidden email] wVxcCTxJTlgPaAAA9a9gbQ Saved)
Dec 12 07:52:45 mail postfix/lmtp[24346]: A7D6E300A95AAC: to=[hidden email], relay=127.0.0.1[127.0.0.1]:24, delay=2.4, delays=1.5/0.01/0/0.97, dsn=2.0.0, status=sent (250 2.0.0 [hidden email] wVxcCTxJTlgPaAAA9a9gbQ:2 Saved)
Dec 12 08:30:15 mail postfix/smtp[30053]: A7D6E300A95AAC: to=[hidden email], orig_to=[hidden email], relay=cust3862-1.in.mailcontrol.com[85.115.60.190]:25, delay=2252, delays=1.5/2246/1.8/3, dsn=2.0.0, status=sent (250 2.0.0 uBC7UAE2111090 Message accepted for delivery)
Dec 12 08:30:15 mail postfix/smtp[30053]: A7D6E300A95AAC: to=[hidden email], orig_to=[hidden email], relay=cust3862-1.in.mailcontrol.com[85.115.60.190]:25, delay=2252, delays=1.5/2246/1.8/3, dsn=2.0.0, status=sent (250 2.0.0 uBC7UAE2111090 Message accepted for delivery)
Dec 12 08:30:15 mail postfix/qmgr[2548]: A7D6E300A95AAC: removed

Anbei noch meine Konfiguration und master.cf

postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
amavisd_milter = inet:127.0.0.1:8899
body_checks = pcre:/etc/postfix/body_checks_map
bounce_queue_lifetime = 3d
bounce_template_file = /etc/postfix/bounce.de-DE.cf
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
debugger_command = PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 >$config_directory/$process_name.$process_id.log & sleep 5
default_database_type = btree
default_privs = nobody
disable_vrfy_command = yes
header_checks = pcre:/etc/postfix/header_checks_map
html_directory = no
lmtp_generic_maps = btree:/etc/postfix/lmtp_generic_maps
lmtp_tls_protocols = $smtp_tls_protocols
mail_owner = postfix
mailbox_size_limit = 52428800
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
maximal_queue_lifetime = 3d
message_size_limit = 52428800
mydestination = $myhostname localhost.$mydomain localhost
myhostname = mail1.glasgasperlmair.at
mynetworks = 127.0.0.0/8 [::1]/128 192.168.104.0/23 192.168.103.0/24
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
postscreen_access_list = permit_mynetworks cidr:/etc/postfix/postscreen_whitelist
postscreen_bare_newline_action = ignore
postscreen_bare_newline_enable = no
postscreen_blacklist_action = drop
postscreen_dnsbl_action = enforce
postscreen_dnsbl_sites = zen.spamhaus.org*2 bl.spamcop.net*1 b.barracudacentral.org*1
postscreen_dnsbl_threshold = 2
postscreen_dnsbl_whitelist_threshold = 0
postscreen_greet_action = enforce
postscreen_non_smtp_command_enable = no
postscreen_pipelining_enable = no
postscreen_whitelist_interfaces = static:all
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.11.3/README_FILES
recipient_bcc_maps = btree:/etc/postfix/recipient_bcc_maps
recipient_canonical_classes = envelope_recipient
recipient_canonical_maps = btree:/etc/postfix/recipient_canonical_maps
recipient_delimiter = +
relay_domains = btree:/etc/postfix/relay_domains
relay_recipient_maps =
relocated_maps = btree:/etc/postfix/relocated_maps
sample_directory = /usr/share/doc/postfix-2.11.3/samples
sender_bcc_maps = btree:/etc/postfix/sender_bcc_maps
sender_canonical_classes = envelope_sender
sender_canonical_maps = btree:/etc/postfix/sender_canonical_maps
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
show_user_unknown_table_name = no
smtp_destination_rate_delay = 150s
smtp_generic_maps = btree:/etc/postfix/smtp_generic_maps
smtp_tls_cert_file = $smtpd_tls_cert_file
smtp_tls_exclude_ciphers = aNULL eNULL EXPORT DES 3DES RC4 MD5 PSK aECDH EDH-DSS-DES-CBC3-SHA EDH-RSA-DES-CDC3-SHA KRB5-DE5 CBC3-SHA AES128-SHA DHE-RSA-AES128-SHA AES256-SHA DHE-RSA-AES256-SHA CAMELLIA128-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA
smtp_tls_key_file = $smtpd_tls_key_file
smtp_tls_loglevel = 0
smtp_tls_protocols = !SSLv2 !SSLv3
smtp_tls_security_level = may
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_client_connection_count_limit = 20
smtpd_client_connection_rate_limit = 20
smtpd_client_message_rate_limit = 50
smtpd_client_recipient_rate_limit = 50
smtpd_discard_ehlo_keyword_address_maps = cidr:/etc/postfix/esmtp_access
smtpd_recipient_restrictions = check_recipient_access btree:/etc/postfix/access_recipient-rfc check_client_access cidr:/etc/postfix/access_client check_helo_access btree:/etc/postfix/access_helo check_recipient_access btree:/etc/postfix/access_recipient permit_sasl_authenticated permit_mynetworks check_sender_access btree:/etc/postfix/access_sender reject_rbl_client zen.spamhaus.org reject_rbl_client ix.dnsbl.manitu.net reject_rbl_client bl.spamcop.net reject_unverified_recipient reject_unauth_destination permit
smtpd_relay_restrictions = permit_sasl_authenticated permit_mynetworks reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_tls_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_tls_ask_ccert = yes
smtpd_tls_cert_file = /etc/pki/postfix/certs/mail1.glasgasperlmair.at.crt
smtpd_tls_dh1024_param_file = /etc/pki/postfix/private/dh_2048.pem
smtpd_tls_dh512_param_file = /etc/pki/postfix/private/dh_512.pem
smtpd_tls_eecdh_grade = strong
smtpd_tls_exclude_ciphers = aNULL eNULL EXPORT DES 3DES RC4 MD5 PSK aECDH EDH-DSS-DES-CBC3-SHA EDH-RSA-DES-CDC3-SHA KRB5-DE5 CBC3-SHA
smtpd_tls_key_file = /etc/pki/postfix/private/mail1.glasgasperlmair.at.key
smtpd_tls_loglevel = 0
smtpd_tls_protocols = !SSLv2 !SSLv3
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
tls_preempt_cipherlist = yes
transport_maps = btree:/etc/postfix/transport_maps, $relay_domains
unverified_recipient_reject_reason = Recipient address lookup failed
unverified_sender_reject_reason = Sender address lookup failed
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual-alias-maps.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf
virtual_transport = lmtp:[127.0.0.1]:24

meine master.cf
#smtp      inet  n      -       n       -       -       smtpd
smtp      inet  n       -       n       -       1       postscreen
smtpd     pass  -       -       n       -       -       smtpd
#  -o smtpd_sasl_auth_enable=yes
  -o smtpd_sasl_auth_enable=no
  -o smtpd_milters=${amavisd_milter}
#  -o receive_override_options=no_address_mappings
dnsblog   unix  -       -       n       -       0       dnsblog
tlsproxy  unix  -       -       n       -       0       tlsproxy
submission inet n       -       n       -       -       smtpd
  -o syslog_name=postfix/submission
  -o smtpd_tls_security_level=encrypt
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_etrn_restrictions=reject
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
  -o smtpd_recipient_restrictions=
  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
#  -o milter_macro_daemon_name=MYSUBMITTERS
#  -o smtpd_milters=${amavisd_milter}
#  -o content_filter=smtp:[127.0.0.1]:10024
#  -o receive_override_options=no_address_mappings
#  -o smtpd_milters=${amavisd_milter}
#smtps     inet  n       -       n       -       -       smtpd
#  -o syslog_name=postfix/smtps
#  -o smtpd_tls_wrappermode=yes
#  -o smtpd_sasl_auth_enable=yes
#  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
#628       inet  n       -       n       -       -       qmqpd
pickup    unix  n       -       n       60      1       pickup
cleanup   unix  n       -       n       -       0       cleanup
qmgr      unix  n       -       n       300     1       qmgr
#qmgr     unix  n       -       n       300     1       oqmgr
tlsmgr    unix  -       -       n       1000?   1       tlsmgr
rewrite   unix  -       -       n       -       -       trivial-rewrite
bounce    unix  -       -       n       -       0       bounce
defer     unix  -       -       n       -       0       bounce
trace     unix  -       -       n       -       0       bounce
verify    unix  -       -       n       -       1       verify
flush     unix  n       -       n       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
proxywrite unix -       -       n       -       1       proxymap
smtp      unix  -       -       n       -       -       smtp
relay     unix  -       -       n       -       -       smtp
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq     unix  n       -       n       -       -       showq
error     unix  -       -       n       -       -       error
retry     unix  -       -       n       -       -       error
discard   unix  -       -       n       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       n       -       -       lmtp
anvil     unix  -       -       n       -       1       anvil
scache    unix  -       -       n       -       1       scache
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent.  See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
#maildrop  unix  -       n       n       -       -       pipe
#  flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
#
# ====================================================================
#
# Recent Cyrus versions can use the existing "lmtp" master.cf entry.
#
# Specify in cyrus.conf:
#   lmtp    cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4
#
# Specify in main.cf one or more of the following:
#  mailbox_transport = lmtp:inet:localhost
#  virtual_transport = lmtp:inet:localhost
#
# ====================================================================
#
# Cyrus 2.1.5 (Amos Gouaux)
# Also specify in main.cf: cyrus_destination_recipient_limit=1
#
#cyrus     unix  -       n       n       -       -       pipe
#  user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user}
#
# ====================================================================
#
# Old example of delivery via Cyrus.
#
#old-cyrus unix  -       n       n       -       -       pipe
#  flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user}
#
# ====================================================================
#
# See the Postfix UUCP_README file for configuration details.
#
#uucp      unix  -       n       n       -       -       pipe
#  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
#
# ====================================================================
#
# Other external delivery methods.
#
#ifmail    unix  -       n       n       -       -       pipe
#  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
#
#bsmtp     unix  -       n       n       -       -       pipe
#  flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient
#
#scalemail-backend unix -       n       n       -       2       pipe
#  flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store
#  ${nexthop} ${user} ${extension}
#
#mailman   unix  -       n       n       -       -       pipe
#  flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
#  ${nexthop} ${user}
#amavisd reinject
#amavisd   unix  -       n       n       -       -       pipe
127.0.0.1:10025 inet n    -       n       -       -     smtpd
  -o content_filter=
  -o smtpd_delay_reject=no
  -o smtpd_client_restrictions=permit_mynetworks,reject
  -o smtpd_helo_restrictions=
  -o smtpd_sender_restrictions=
  -o smtpd_recipient_restrictions=permit_mynetworks,reject
  -o smtpd_data_restrictions=reject_unauth_pipelining
  -o smtpd_end_of_data_restrictions=
  -o smtpd_restriction_classes=
  -o mynetworks=127.0.0.0/8
  -o smtpd_error_sleep_time=0
  -o smtpd_soft_error_limit=1001
  -o smtpd_hard_error_limit=1000
  -o smtpd_client_connection_count_limit=0
  -o smtpd_client_connection_rate_limit=0
  -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_milters
  -o local_header_rewrite_clients=
#  -o smtpd_milters=
#  -o local_recipient_maps=
#  -o relay_recipient_maps=

Am 09.12.2016 um 11:59 schrieb Andreas Wass - Glas Gasperlmair:
Hallo!

Im maillog sieht man sehr deutlich, dass die Zustellung an alle 3 lokalen Empfänger sehr schnell geht (max. delay=0.81, delays=0.02/0/0/0.78)

Warum wartet postfix danach 5 Minuten, bis überhaupt mal ein Verbindungsversuch zum externen Mailserver aufgebaut wird?
Die temp. Abweisung danach ist vermutl. Greylisting (aber um diese Verzögerung geht es nicht)

grep 1B19F341C1DE8F /var/log/maillog

Dec  9 11:35:26 mail postfix/submission/smtpd[12702]: 1B19F341C1DE8F: client=unknown[192.168.105.72], sasl_method=PLAIN, [hidden email]
Dec  9 11:35:26 mail postfix/cleanup[11619]: 1B19F341C1DE8F: message-id=[hidden email]
Dec  9 11:35:26 mail postfix/qmgr[7547]: 1B19F341C1DE8F: from=[hidden email], size=23375, nrcpt=4 (queue active)
Dec  9 11:35:26 mail postfix/lmtp[11798]: 1B19F341C1DE8F: to=[hidden email], relay=127.0.0.1[127.0.0.1]:24, delay=0.08, delays=0.02/0/0/0.06, dsn=2.0.0, status=sent (250 2.0.0 [hidden email] JaaYAO6ISliJMQAA9a9gbQ Saved)
Dec  9 11:35:26 mail postfix/lmtp[11798]: 1B19F341C1DE8F: to=[hidden email], relay=127.0.0.1[127.0.0.1]:24, delay=0.81, delays=0.02/0/0/0.78, dsn=2.0.0, status=sent (250 2.0.0 [hidden email] JaaYAO6ISliJMQAA9a9gbQ:2 Saved)
Dec  9 11:35:26 mail postfix/lmtp[11798]: 1B19F341C1DE8F: to=[hidden email], relay=127.0.0.1[127.0.0.1]:24, delay=0.81, delays=0.02/0/0/0.78, dsn=2.0.0, status=sent (250 2.0.0 [hidden email] JaaYAO6ISliJMQAA9a9gbQ:3 Saved)
Dec  9 11:40:30 mail postfix/smtp[12704]: 1B19F341C1DE8F: Cannot start TLS: handshake failure
Dec  9 11:40:35 mail postfix/smtp[12704]: 1B19F341C1DE8F: host ae30.at.pri-mx.eu0109.smtproutes.com[94.186.192.101] said: 451 4.3.0 Message temporarily deferred. Please try again later. (in reply to RCPT TO command)
Dec  9 11:45:39 mail postfix/smtp[12704]: 1B19F341C1DE8F: Cannot start TLS: handshake failure
Dec  9 11:45:45 mail postfix/smtp[12704]: 1B19F341C1DE8F: to=[hidden email], relay=ae30.at.bak-mx.eu0109.smtpbak.com[208.70.88.50]:25, delay=619, delays=0.02/0.02/617/2.5, dsn=4.3.0, status=deferred (host ae30.at.bak-mx.eu0109.smtpbak.com[208.70.88.50] said: 451 4.3.0 Message temporarily deferred. Please try again later. (in reply to RCPT TO command))

Vielen Dank für eure Bemühungen
vg, Andi

Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Verzögerung bei Mailzustellung extern

Andreas Wass - Glas Gasperlmair
Für diese Verzögerungen es gibt auch keinerlei Warnungen im maillog, dass irgend ein Limit überschritten würde.
Beim Server handelt es sich um einen Lenovo RD 650 mit 65GB RAM und Raid6 mit SSD's
Es müssen auch nur ca. 150 Clients bedient werden
Posteingang ca. 2500 Mails pro Tag
Postausgang ca. 1700 Mails pro Tag

Problem tritt meist bei der Domain josko.at auf, wenn schon ca. 20 Mails in der active queue sind, welche durch unser ERB-System eingeliefert wurden und auch an diese Domain versendet werden sollte.

Vielleicht hat ja doch jemand Zeit für mein Problem.
vg, Andi

Am 12.12.2016 um 08:57 schrieb Andreas Wass - Glas Gasperlmair:
Kann mir denn keiner helfen?
Warum kontaktiert mein postfix den externen Server erst so spät?
Intern wird sofort zugestellt und der Server der externen Empfänger wird erst 38 Minuten später das erste Mal kontaktiert

Dec 12 07:52:42 mail postfix/smtpd[25295]: A7D6E300A95AAC: client=unknown[192.168.105.82]
Dec 12 07:52:42 mail postfix/cleanup[25472]: A7D6E300A95AAC: message-id=[hidden email]
Dec 12 07:52:44 mail amavis[25717]: (25717-04) Passed CLEAN {AcceptedInternal}, AM.PDP-SOCK/MYNETS LOCAL [192.168.105.82] [hidden email] -> [hidden email], Queue-ID: A7D6E300A95AAC, Message-ID: [hidden email], mail_id: 23UJsobegQpY, Hits: -0.999, size: 861963, 711 ms
Dec 12 07:52:44 mail postfix/qmgr[2548]: A7D6E300A95AAC: from=[hidden email], size=862116, nrcpt=10 (queue active)
Dec 12 07:52:44 mail postfix/lmtp[24346]: A7D6E300A95AAC: to=[hidden email], relay=127.0.0.1[127.0.0.1]:24, delay=1.6, delays=1.5/0.01/0/0.15, dsn=2.0.0, status=sent (250 2.0.0 [hidden email] wVxcCTxJTlgPaAAA9a9gbQ Saved)
Dec 12 07:52:45 mail postfix/lmtp[24346]: A7D6E300A95AAC: to=[hidden email], relay=127.0.0.1[127.0.0.1]:24, delay=2.4, delays=1.5/0.01/0/0.97, dsn=2.0.0, status=sent (250 2.0.0 [hidden email] wVxcCTxJTlgPaAAA9a9gbQ:2 Saved)
Dec 12 08:30:15 mail postfix/smtp[30053]: A7D6E300A95AAC: to=[hidden email], orig_to=[hidden email], relay=cust3862-1.in.mailcontrol.com[85.115.60.190]:25, delay=2252, delays=1.5/2246/1.8/3, dsn=2.0.0, status=sent (250 2.0.0 uBC7UAE2111090 Message accepted for delivery)
Dec 12 08:30:15 mail postfix/smtp[30053]: A7D6E300A95AAC: to=[hidden email], orig_to=[hidden email], relay=cust3862-1.in.mailcontrol.com[85.115.60.190]:25, delay=2252, delays=1.5/2246/1.8/3, dsn=2.0.0, status=sent (250 2.0.0 uBC7UAE2111090 Message accepted for delivery)
Dec 12 08:30:15 mail postfix/qmgr[2548]: A7D6E300A95AAC: removed

Anbei noch meine Konfiguration und master.cf

postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
amavisd_milter = inet:127.0.0.1:8899
body_checks = pcre:/etc/postfix/body_checks_map
bounce_queue_lifetime = 3d
bounce_template_file = /etc/postfix/bounce.de-DE.cf
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
debugger_command = PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 >$config_directory/$process_name.$process_id.log & sleep 5
default_database_type = btree
default_privs = nobody
disable_vrfy_command = yes
header_checks = pcre:/etc/postfix/header_checks_map
html_directory = no
lmtp_generic_maps = btree:/etc/postfix/lmtp_generic_maps
lmtp_tls_protocols = $smtp_tls_protocols
mail_owner = postfix
mailbox_size_limit = 52428800
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
maximal_queue_lifetime = 3d
message_size_limit = 52428800
mydestination = $myhostname localhost.$mydomain localhost
myhostname = mail1.glasgasperlmair.at
mynetworks = 127.0.0.0/8 [::1]/128 192.168.104.0/23 192.168.103.0/24
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
postscreen_access_list = permit_mynetworks cidr:/etc/postfix/postscreen_whitelist
postscreen_bare_newline_action = ignore
postscreen_bare_newline_enable = no
postscreen_blacklist_action = drop
postscreen_dnsbl_action = enforce
postscreen_dnsbl_sites = zen.spamhaus.org*2 bl.spamcop.net*1 b.barracudacentral.org*1
postscreen_dnsbl_threshold = 2
postscreen_dnsbl_whitelist_threshold = 0
postscreen_greet_action = enforce
postscreen_non_smtp_command_enable = no
postscreen_pipelining_enable = no
postscreen_whitelist_interfaces = static:all
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.11.3/README_FILES
recipient_bcc_maps = btree:/etc/postfix/recipient_bcc_maps
recipient_canonical_classes = envelope_recipient
recipient_canonical_maps = btree:/etc/postfix/recipient_canonical_maps
recipient_delimiter = +
relay_domains = btree:/etc/postfix/relay_domains
relay_recipient_maps =
relocated_maps = btree:/etc/postfix/relocated_maps
sample_directory = /usr/share/doc/postfix-2.11.3/samples
sender_bcc_maps = btree:/etc/postfix/sender_bcc_maps
sender_canonical_classes = envelope_sender
sender_canonical_maps = btree:/etc/postfix/sender_canonical_maps
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
show_user_unknown_table_name = no
smtp_destination_rate_delay = 150s
smtp_generic_maps = btree:/etc/postfix/smtp_generic_maps
smtp_tls_cert_file = $smtpd_tls_cert_file
smtp_tls_exclude_ciphers = aNULL eNULL EXPORT DES 3DES RC4 MD5 PSK aECDH EDH-DSS-DES-CBC3-SHA EDH-RSA-DES-CDC3-SHA KRB5-DE5 CBC3-SHA AES128-SHA DHE-RSA-AES128-SHA AES256-SHA DHE-RSA-AES256-SHA CAMELLIA128-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA
smtp_tls_key_file = $smtpd_tls_key_file
smtp_tls_loglevel = 0
smtp_tls_protocols = !SSLv2 !SSLv3
smtp_tls_security_level = may
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_client_connection_count_limit = 20
smtpd_client_connection_rate_limit = 20
smtpd_client_message_rate_limit = 50
smtpd_client_recipient_rate_limit = 50
smtpd_discard_ehlo_keyword_address_maps = cidr:/etc/postfix/esmtp_access
smtpd_recipient_restrictions = check_recipient_access btree:/etc/postfix/access_recipient-rfc check_client_access cidr:/etc/postfix/access_client check_helo_access btree:/etc/postfix/access_helo check_recipient_access btree:/etc/postfix/access_recipient permit_sasl_authenticated permit_mynetworks check_sender_access btree:/etc/postfix/access_sender reject_rbl_client zen.spamhaus.org reject_rbl_client ix.dnsbl.manitu.net reject_rbl_client bl.spamcop.net reject_unverified_recipient reject_unauth_destination permit
smtpd_relay_restrictions = permit_sasl_authenticated permit_mynetworks reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_tls_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_tls_ask_ccert = yes
smtpd_tls_cert_file = /etc/pki/postfix/certs/mail1.glasgasperlmair.at.crt
smtpd_tls_dh1024_param_file = /etc/pki/postfix/private/dh_2048.pem
smtpd_tls_dh512_param_file = /etc/pki/postfix/private/dh_512.pem
smtpd_tls_eecdh_grade = strong
smtpd_tls_exclude_ciphers = aNULL eNULL EXPORT DES 3DES RC4 MD5 PSK aECDH EDH-DSS-DES-CBC3-SHA EDH-RSA-DES-CDC3-SHA KRB5-DE5 CBC3-SHA
smtpd_tls_key_file = /etc/pki/postfix/private/mail1.glasgasperlmair.at.key
smtpd_tls_loglevel = 0
smtpd_tls_protocols = !SSLv2 !SSLv3
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
tls_preempt_cipherlist = yes
transport_maps = btree:/etc/postfix/transport_maps, $relay_domains
unverified_recipient_reject_reason = Recipient address lookup failed
unverified_sender_reject_reason = Sender address lookup failed
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual-alias-maps.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf
virtual_transport = lmtp:[127.0.0.1]:24

meine master.cf
#smtp      inet  n      -       n       -       -       smtpd
smtp      inet  n       -       n       -       1       postscreen
smtpd     pass  -       -       n       -       -       smtpd
#  -o smtpd_sasl_auth_enable=yes
  -o smtpd_sasl_auth_enable=no
  -o smtpd_milters=${amavisd_milter}
#  -o receive_override_options=no_address_mappings
dnsblog   unix  -       -       n       -       0       dnsblog
tlsproxy  unix  -       -       n       -       0       tlsproxy
submission inet n       -       n       -       -       smtpd
  -o syslog_name=postfix/submission
  -o smtpd_tls_security_level=encrypt
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_etrn_restrictions=reject
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
  -o smtpd_recipient_restrictions=
  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
#  -o milter_macro_daemon_name=MYSUBMITTERS
#  -o smtpd_milters=${amavisd_milter}
#  -o content_filter=smtp:[127.0.0.1]:10024
#  -o receive_override_options=no_address_mappings
#  -o smtpd_milters=${amavisd_milter}
#smtps     inet  n       -       n       -       -       smtpd
#  -o syslog_name=postfix/smtps
#  -o smtpd_tls_wrappermode=yes
#  -o smtpd_sasl_auth_enable=yes
#  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
#628       inet  n       -       n       -       -       qmqpd
pickup    unix  n       -       n       60      1       pickup
cleanup   unix  n       -       n       -       0       cleanup
qmgr      unix  n       -       n       300     1       qmgr
#qmgr     unix  n       -       n       300     1       oqmgr
tlsmgr    unix  -       -       n       1000?   1       tlsmgr
rewrite   unix  -       -       n       -       -       trivial-rewrite
bounce    unix  -       -       n       -       0       bounce
defer     unix  -       -       n       -       0       bounce
trace     unix  -       -       n       -       0       bounce
verify    unix  -       -       n       -       1       verify
flush     unix  n       -       n       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
proxywrite unix -       -       n       -       1       proxymap
smtp      unix  -       -       n       -       -       smtp
relay     unix  -       -       n       -       -       smtp
#       -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
showq     unix  n       -       n       -       -       showq
error     unix  -       -       n       -       -       error
retry     unix  -       -       n       -       -       error
discard   unix  -       -       n       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       n       -       -       lmtp
anvil     unix  -       -       n       -       1       anvil
scache    unix  -       -       n       -       1       scache
#
# ====================================================================
# Interfaces to non-Postfix software. Be sure to examine the manual
# pages of the non-Postfix software to find out what options it wants.
#
# Many of the following services use the Postfix pipe(8) delivery
# agent.  See the pipe(8) man page for information about ${recipient}
# and other message envelope options.
# ====================================================================
#
# maildrop. See the Postfix MAILDROP_README file for details.
# Also specify in main.cf: maildrop_destination_recipient_limit=1
#
#maildrop  unix  -       n       n       -       -       pipe
#  flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}
#
# ====================================================================
#
# Recent Cyrus versions can use the existing "lmtp" master.cf entry.
#
# Specify in cyrus.conf:
#   lmtp    cmd="lmtpd -a" listen="localhost:lmtp" proto=tcp4
#
# Specify in main.cf one or more of the following:
#  mailbox_transport = lmtp:inet:localhost
#  virtual_transport = lmtp:inet:localhost
#
# ====================================================================
#
# Cyrus 2.1.5 (Amos Gouaux)
# Also specify in main.cf: cyrus_destination_recipient_limit=1
#
#cyrus     unix  -       n       n       -       -       pipe
#  user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -r ${sender} -m ${extension} ${user}
#
# ====================================================================
#
# Old example of delivery via Cyrus.
#
#old-cyrus unix  -       n       n       -       -       pipe
#  flags=R user=cyrus argv=/usr/lib/cyrus-imapd/deliver -e -m ${extension} ${user}
#
# ====================================================================
#
# See the Postfix UUCP_README file for configuration details.
#
#uucp      unix  -       n       n       -       -       pipe
#  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
#
# ====================================================================
#
# Other external delivery methods.
#
#ifmail    unix  -       n       n       -       -       pipe
#  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
#
#bsmtp     unix  -       n       n       -       -       pipe
#  flags=Fq. user=bsmtp argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient
#
#scalemail-backend unix -       n       n       -       2       pipe
#  flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store
#  ${nexthop} ${user} ${extension}
#
#mailman   unix  -       n       n       -       -       pipe
#  flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py
#  ${nexthop} ${user}
#amavisd reinject
#amavisd   unix  -       n       n       -       -       pipe
127.0.0.1:10025 inet n    -       n       -       -     smtpd
  -o content_filter=
  -o smtpd_delay_reject=no
  -o smtpd_client_restrictions=permit_mynetworks,reject
  -o smtpd_helo_restrictions=
  -o smtpd_sender_restrictions=
  -o smtpd_recipient_restrictions=permit_mynetworks,reject
  -o smtpd_data_restrictions=reject_unauth_pipelining
  -o smtpd_end_of_data_restrictions=
  -o smtpd_restriction_classes=
  -o mynetworks=127.0.0.0/8
  -o smtpd_error_sleep_time=0
  -o smtpd_soft_error_limit=1001
  -o smtpd_hard_error_limit=1000
  -o smtpd_client_connection_count_limit=0
  -o smtpd_client_connection_rate_limit=0
  -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks,no_milters
  -o local_header_rewrite_clients=
#  -o smtpd_milters=
#  -o local_recipient_maps=
#  -o relay_recipient_maps=

Am 09.12.2016 um 11:59 schrieb Andreas Wass - Glas Gasperlmair:
Hallo!

Im maillog sieht man sehr deutlich, dass die Zustellung an alle 3 lokalen Empfänger sehr schnell geht (max. delay=0.81, delays=0.02/0/0/0.78)

Warum wartet postfix danach 5 Minuten, bis überhaupt mal ein Verbindungsversuch zum externen Mailserver aufgebaut wird?
Die temp. Abweisung danach ist vermutl. Greylisting (aber um diese Verzögerung geht es nicht)

grep 1B19F341C1DE8F /var/log/maillog

Dec  9 11:35:26 mail postfix/submission/smtpd[12702]: 1B19F341C1DE8F: client=unknown[192.168.105.72], sasl_method=PLAIN, [hidden email]
Dec  9 11:35:26 mail postfix/cleanup[11619]: 1B19F341C1DE8F: message-id=[hidden email]
Dec  9 11:35:26 mail postfix/qmgr[7547]: 1B19F341C1DE8F: from=[hidden email], size=23375, nrcpt=4 (queue active)
Dec  9 11:35:26 mail postfix/lmtp[11798]: 1B19F341C1DE8F: to=[hidden email], relay=127.0.0.1[127.0.0.1]:24, delay=0.08, delays=0.02/0/0/0.06, dsn=2.0.0, status=sent (250 2.0.0 [hidden email] JaaYAO6ISliJMQAA9a9gbQ Saved)
Dec  9 11:35:26 mail postfix/lmtp[11798]: 1B19F341C1DE8F: to=[hidden email], relay=127.0.0.1[127.0.0.1]:24, delay=0.81, delays=0.02/0/0/0.78, dsn=2.0.0, status=sent (250 2.0.0 [hidden email] JaaYAO6ISliJMQAA9a9gbQ:2 Saved)
Dec  9 11:35:26 mail postfix/lmtp[11798]: 1B19F341C1DE8F: to=[hidden email], relay=127.0.0.1[127.0.0.1]:24, delay=0.81, delays=0.02/0/0/0.78, dsn=2.0.0, status=sent (250 2.0.0 [hidden email] JaaYAO6ISliJMQAA9a9gbQ:3 Saved)
Dec  9 11:40:30 mail postfix/smtp[12704]: 1B19F341C1DE8F: Cannot start TLS: handshake failure
Dec  9 11:40:35 mail postfix/smtp[12704]: 1B19F341C1DE8F: host ae30.at.pri-mx.eu0109.smtproutes.com[94.186.192.101] said: 451 4.3.0 Message temporarily deferred. Please try again later. (in reply to RCPT TO command)
Dec  9 11:45:39 mail postfix/smtp[12704]: 1B19F341C1DE8F: Cannot start TLS: handshake failure
Dec  9 11:45:45 mail postfix/smtp[12704]: 1B19F341C1DE8F: to=[hidden email], relay=ae30.at.bak-mx.eu0109.smtpbak.com[208.70.88.50]:25, delay=619, delays=0.02/0.02/617/2.5, dsn=4.3.0, status=deferred (host ae30.at.bak-mx.eu0109.smtpbak.com[208.70.88.50] said: 451 4.3.0 Message temporarily deferred. Please try again later. (in reply to RCPT TO command))

Vielen Dank für eure Bemühungen
vg, Andi


Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Verzögerung bei Mailzustellung extern

Alex JOST
In reply to this post by Andreas Wass - Glas Gasperlmair
Am 12.12.2016 um 08:57 schrieb Andreas Wass - Glas Gasperlmair:
> Kann mir denn keiner helfen?
> Warum kontaktiert mein postfix den externen Server erst so spät?
> Intern wird sofort zugestellt und der Server der externen Empfänger wird
> erst *38 Minuten später* das erste Mal kontaktiert
>
[...]
> *Dec 12 08:30:15* mail postfix/smtp[30053]: A7D6E300A95AAC:
> to=<[hidden email]>,
> orig_to=<[hidden email]>,
> relay=cust3862-1.in.mailcontrol.com[85.115.60.190]:25, delay=2252,
> delays=1.5/2246/1.8/3, dsn=2.0.0, status=sent (250 2.0.0 uBC7UAE2111090
> Message accepted for delivery)

delays=1.5/2246/1.8/3 => Das sind 2246 Sekunden im queue manager. Am
besten mal mit "postqueue -p" nachsehen, welchen Status die Mails so haben.


> smtp_destination_rate_delay = 150s

Das sticht mir mal ins Auge. Wozu hast Du das denn gesetzt?

--
Alex JOST
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Verzögerung bei Mailzustellung extern

lst_hoe02
In reply to this post by Andreas Wass - Glas Gasperlmair
Zitat von Andreas Wass - Glas Gasperlmair <[hidden email]>:

> Kann mir denn keiner helfen?
> Warum kontaktiert mein postfix den externen Server erst so spät?
> Intern wird sofort zugestellt und der Server der externen Empfänger  
> wird erst *38 Minuten später* das erste Mal kontaktiert
>

Hallo,

der zweite Wert bei dem "delays" ist meines Wissens nach die Zeit die  
in der Queue verbracht wird. Ob da Milter und Body-Checks dazu zählen  
kann ich nicht genau sagen, ich gehe aber davon aus, da der erste Wert  
nur den Empfang beinhaltet. Falls der Queue Manager nicht anderweitig  
beschäftigt ist solltest du prüfen was deine header und body checks  
treiben.

Gruß

Andreas



smime.p7s (7K) Download Attachment
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Verzögerung bei Mailzustellung extern

Andreas Wass - Glas Gasperlmair
In reply to this post by Alex JOST
Hallo Alex!

Vielen Dank für deine Antwort

Am 12.12.2016 um 11:22 schrieb Alex JOST:
Am 12.12.2016 um 08:57 schrieb Andreas Wass - Glas Gasperlmair:
Kann mir denn keiner helfen?
Warum kontaktiert mein postfix den externen Server erst so spät?
Intern wird sofort zugestellt und der Server der externen Empfänger wird
erst *38 Minuten später* das erste Mal kontaktiert

[...]
*Dec 12 08:30:15* mail postfix/smtp[30053]: A7D6E300A95AAC:
to=[hidden email],
orig_to=[hidden email],
relay=cust3862-1.in.mailcontrol.com[85.115.60.190]:25, delay=2252,
delays=1.5/2246/1.8/3, dsn=2.0.0, status=sent (250 2.0.0 uBC7UAE2111090
Message accepted for delivery)

delays=1.5/2246/1.8/3 => Das sind 2246 Sekunden im queue manager. Am besten mal mit "postqueue -p" nachsehen, welchen Status die Mails so haben.
postqueue -p sagt das gleiche wie mailq
A7D6E300A95AAC*  862116 Mon Dec 12 07:52:42  [hidden email]
                                         [hidden email]
                                         [hidden email]


smtp_destination_rate_delay = 150s

Das sticht mir mal ins Auge. Wozu hast Du das denn gesetzt?
Die komplette Konfiguration hab ich von https://dokuwiki.nausch.org/doku.php/centos:mail_c7:mta_4
Vielleicht wurde hier der ein oder andere Parameter zu straff gesetzt.
Hab folgende parameter jetzt mal auskommentiert und überlasse sie den defaults von postfix:
#smtpd_client_connection_count_limit = 20
#smtpd_client_connection_rate_limit = 20
#smtpd_client_message_rate_limit = 50
#smtpd_client_recipient_rate_limit = 50
#smtp_destination_rate_delay = 150s (Vielleicht war es wirklich dieser)

Mal sehn ob es hilft

Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Verzögerung bei Mailzustellung extern (gelöst)

Andreas Wass - Glas Gasperlmair
Vielen Dank wieder Mal an Alex Jost !

smtp_destination_rate_delay = 150s

genau der hier war Schuld an der Verzögerung bei vielen gleichzeitigen Emails an die selbe Domain.
Blöd, wenn man alles blind aus irgendeinem Tutorial übernimmt. Testen konnte ich das Verhalten ja nicht, da ich nie auf die Idee gekommen wäre gleichzeitig mal ca 20 Mails an die gleiche Domain zu senden. Oder auf die Idee kurz mal postconf | grep delay einzugeben. Manchmal sehe ich den Wald vor lauter Bäumen nicht.

Postfix schreibt dazu folgendes:
http://www.postfix.org/postconf.5.html
default_destination_rate_delay (default: 0s)

The default amount of delay that is inserted between individual deliveries to the same destination; the resulting behavior depends on the value of the corresponding per-destination recipient limit.

With a corresponding per-destination recipient limit > 1, the rate delay specifies the time between deliveries to the same domain. Different domains are delivered in parallel, subject to the process limits specified in master.cf.

With a corresponding per-destination recipient limit equal to 1, the rate delay specifies the time between deliveries to the same recipient. Different recipients are delivered in parallel, subject to the process limits specified in master.cf.

To enable the delay, specify a non-zero time value (an integral value plus an optional one-letter suffix that specifies the time unit).

Time units: s (seconds), m (minutes), h (hours), d (days), w (weeks). The default time unit is s (seconds).

NOTE: the delay is enforced by the queue manager. The delay timer state does not survive "postfix reload" or "postfix stop".

Use transport_destination_rate_delay to specify a transport-specific override, where transport is the master.cf name of the message delivery transport.

NOTE: with a non-zero _destination_rate_delay, specify a transport_destination_concurrency_failed_cohort_limit of 10 or more to prevent Postfix from deferring all mail for the same destination after only one connection or handshake error.

This feature is available in Postfix 2.5 and later

Am 12.12.2016 um 11:43 schrieb Andreas Wass - Glas Gasperlmair:
Hallo Alex!

Vielen Dank für deine Antwort

Am 12.12.2016 um 11:22 schrieb Alex JOST:
Am 12.12.2016 um 08:57 schrieb Andreas Wass - Glas Gasperlmair:
Kann mir denn keiner helfen?
Warum kontaktiert mein postfix den externen Server erst so spät?
Intern wird sofort zugestellt und der Server der externen Empfänger wird
erst *38 Minuten später* das erste Mal kontaktiert

[...]
*Dec 12 08:30:15* mail postfix/smtp[30053]: A7D6E300A95AAC:
to=[hidden email],
orig_to=[hidden email],
relay=cust3862-1.in.mailcontrol.com[85.115.60.190]:25, delay=2252,
delays=1.5/2246/1.8/3, dsn=2.0.0, status=sent (250 2.0.0 uBC7UAE2111090
Message accepted for delivery)

delays=1.5/2246/1.8/3 => Das sind 2246 Sekunden im queue manager. Am besten mal mit "postqueue -p" nachsehen, welchen Status die Mails so haben.
postqueue -p sagt das gleiche wie mailq
A7D6E300A95AAC*  862116 Mon Dec 12 07:52:42  [hidden email]
                                         [hidden email]
                                         [hidden email]


smtp_destination_rate_delay = 150s

Das sticht mir mal ins Auge. Wozu hast Du das denn gesetzt?
Die komplette Konfiguration hab ich von https://dokuwiki.nausch.org/doku.php/centos:mail_c7:mta_4
Vielleicht wurde hier der ein oder andere Parameter zu straff gesetzt.
Hab folgende parameter jetzt mal auskommentiert und überlasse sie den defaults von postfix:
#smtpd_client_connection_count_limit = 20
#smtpd_client_connection_rate_limit = 20
#smtpd_client_message_rate_limit = 50
#smtpd_client_recipient_rate_limit = 50
#smtp_destination_rate_delay = 150s (Vielleicht war es wirklich dieser)

Mal sehn ob es hilft


Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Verzögerung bei Mailzustellung extern (gelöst)

Alex JOST
Am 13.12.2016 um 11:57 schrieb Andreas Wass - Glas Gasperlmair:
> *Vielen Dank wieder Mal an Alex Jost !

Schön, dass wir Dir helfen konnten :)


> smtp_destination_rate_delay = 150s*
> genau der hier war Schuld an der Verzögerung bei vielen gleichzeitigen
> Emails an die selbe Domain.
> Blöd, wenn man alles blind aus irgendeinem Tutorial übernimmt.

Stimmt! An diesem Punkt könntest Du Dir jetzt auch noch überlegen welche
anderen Parameter Du einfach so blind kopiert hast. Ich denke da z.B. an
die Einstellungen für SSL/TLS.

Für mich stellt sich auch die Frage warum Du manche DNSBLs in Postscreen
und dann nochmal mit smtpd_recipient_restrictions abfragst.

--
Alex JOST
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Verzögerung bei Mailzustellung extern (gelöst)

Andreas Wass - Glas Gasperlmair
Hallo Alex!

Vielen Dank, dass du Zeit hattest, auch die anderen Parameter anzusehen.

Am 13.12.2016 um 19:25 schrieb Alex JOST:
Am 13.12.2016 um 11:57 schrieb Andreas Wass - Glas Gasperlmair:
*Vielen Dank wieder Mal an Alex Jost !

Schön, dass wir Dir helfen konnten :)


smtp_destination_rate_delay = 150s*
genau der hier war Schuld an der Verzögerung bei vielen gleichzeitigen
Emails an die selbe Domain.
Blöd, wenn man alles blind aus irgendeinem Tutorial übernimmt.

Stimmt! An diesem Punkt könntest Du Dir jetzt auch noch überlegen welche anderen Parameter Du einfach so blind kopiert hast. Ich denke da z.B. an die Einstellungen für SSL/TLS.
Könntest du mir noch sagen, was du an den SSL/TLS Einstellungen ändern würdest?

Anbei nochmal meine  postconf -n
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
amavisd_milter = inet:127.0.0.1:8899
body_checks = pcre:/etc/postfix/body_checks_map
bounce_queue_lifetime = 3d
bounce_template_file = /etc/postfix/bounce.de-DE.cf
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
debugger_command = PATH=/bin:/usr/bin:/usr/local/bin; export PATH; (echo cont; echo where) | gdb $daemon_directory/$process_name $process_id 2>&1 >$config_directory/$process_name.$process_id.log & sleep 5
default_database_type = btree
default_privs = nobody
disable_vrfy_command = yes
header_checks = pcre:/etc/postfix/header_checks_map
html_directory = no
lmtp_generic_maps = btree:/etc/postfix/lmtp_generic_maps
lmtp_tls_protocols = $smtp_tls_protocols
mail_owner = postfix
mailbox_size_limit = 52428800
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
maximal_queue_lifetime = 3d
message_size_limit = 52428800
mydestination = $myhostname localhost.$mydomain localhost
myhostname = mail1.glasgasperlmair.at
mynetworks = 127.0.0.0/8 [::1]/128 192.168.104.0/23 192.168.103.0/24
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
postscreen_access_list = permit_mynetworks cidr:/etc/postfix/postscreen_whitelist
postscreen_bare_newline_action = ignore
postscreen_bare_newline_enable = no
postscreen_blacklist_action = drop
postscreen_dnsbl_action = enforce
postscreen_dnsbl_sites = zen.spamhaus.org*2 bl.spamcop.net*1 b.barracudacentral.org*1
postscreen_dnsbl_threshold = 2
postscreen_dnsbl_whitelist_threshold = 0
postscreen_greet_action = enforce
postscreen_non_smtp_command_enable = no
postscreen_pipelining_enable = no
postscreen_whitelist_interfaces = static:all
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.11.3/README_FILES
recipient_bcc_maps = btree:/etc/postfix/recipient_bcc_maps
recipient_canonical_classes = envelope_recipient
recipient_canonical_maps = btree:/etc/postfix/recipient_canonical_maps
recipient_delimiter = +
relay_domains = btree:/etc/postfix/relay_domains
relay_recipient_maps =
relocated_maps = btree:/etc/postfix/relocated_maps
sample_directory = /usr/share/doc/postfix-2.11.3/samples
sender_bcc_maps = btree:/etc/postfix/sender_bcc_maps
sender_canonical_classes = envelope_sender
sender_canonical_maps = btree:/etc/postfix/sender_canonical_maps
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
show_user_unknown_table_name = no
smtp_generic_maps = btree:/etc/postfix/smtp_generic_maps
smtp_tls_cert_file = $smtpd_tls_cert_file
smtp_tls_exclude_ciphers = aNULL eNULL EXPORT DES 3DES RC4 MD5 PSK aECDH EDH-DSS-DES-CBC3-SHA EDH-RSA-DES-CDC3-SHA KRB5-DE5 CBC3-SHA AES128-SHA DHE-RSA-AES128-SHA AES256-SHA DHE-RSA-AES256-SHA CAMELLIA128-SHA DHE-RSA-CAMELLIA128-SHA CAMELLIA256-SHA DHE-RSA-CAMELLIA256-SHA ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA
smtp_tls_key_file = $smtpd_tls_key_file
smtp_tls_loglevel = 0
smtp_tls_protocols = !SSLv2 !SSLv3
smtp_tls_security_level = may
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_discard_ehlo_keyword_address_maps = cidr:/etc/postfix/esmtp_access
smtpd_recipient_restrictions = check_recipient_access btree:/etc/postfix/access_recipient-rfc check_client_access cidr:/etc/postfix/access_client check_helo_access btree:/etc/postfix/access_helo check_recipient_access btree:/etc/postfix/access_recipient permit_sasl_authenticated permit_mynetworks check_sender_access btree:/etc/postfix/access_sender reject_unverified_recipient reject_unauth_destination permit
smtpd_relay_restrictions = permit_sasl_authenticated permit_mynetworks reject_unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_tls_security_options = noanonymous
smtpd_sasl_type = dovecot
smtpd_tls_ask_ccert = yes
smtpd_tls_cert_file = /etc/pki/postfix/certs/mail1.glasgasperlmair.at.crt
smtpd_tls_dh1024_param_file = /etc/pki/postfix/private/dh_2048.pem
smtpd_tls_dh512_param_file = /etc/pki/postfix/private/dh_512.pem
smtpd_tls_eecdh_grade = strong
smtpd_tls_exclude_ciphers = aNULL eNULL EXPORT DES 3DES RC4 MD5 PSK aECDH EDH-DSS-DES-CBC3-SHA EDH-RSA-DES-CDC3-SHA KRB5-DE5 CBC3-SHA
smtpd_tls_key_file = /etc/pki/postfix/private/mail1.glasgasperlmair.at.key
smtpd_tls_loglevel = 0
smtpd_tls_protocols = !SSLv2 !SSLv3
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
tls_preempt_cipherlist = yes
transport_maps = btree:/etc/postfix/transport_maps, $relay_domains
unverified_recipient_reject_reason = Recipient address lookup failed
unverified_sender_reject_reason = Sender address lookup failed
virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual-alias-maps.cf
virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf
virtual_transport = lmtp:[127.0.0.1]:24

Für mich stellt sich auch die Frage warum Du manche DNSBLs in Postscreen und dann nochmal mit smtpd_recipient_restrictions abfragst.

DNSBLs Prüfung macht ab sofort nur mehr postscreen.

Vielen Dank für die Hilfe
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Verzögerung bei Mailzustellung extern (gelöst)

Alex JOST
Am 14.12.2016 um 07:51 schrieb Andreas Wass - Glas Gasperlmair:
>> Stimmt! An diesem Punkt könntest Du Dir jetzt auch noch überlegen
>> welche anderen Parameter Du einfach so blind kopiert hast. Ich denke
>> da z.B. an die Einstellungen für SSL/TLS.
> Könntest du mir noch sagen, was du an den SSL/TLS Einstellungen ändern
> würdest?

Ich habe von Kryptografie keine Ahnung, deshalb halte ich mich
diesbezüglich an die Empfehlungen von Viktor Dukhovni. Deine
Einstellungen unterscheiden sich vor allem im Bezug auf die Ciphers
deutlich von seinen Empfehlungen.

   http://marc.info/?l=postfix-users&m=143884497605106&w=2
   http://marc.info/?l=postfix-users&m=145685265203724&w=2


 > smtp_tls_cert_file = $smtpd_tls_cert_file
 > smtp_tls_key_file = $smtpd_tls_key_file
 > smtpd_tls_ask_ccert = yes

Brauchst Du das wirklich? Ansonsten würde ich es auskommentieren.


 > smtp_tls_loglevel = 0
 > smtpd_tls_loglevel = 0

Ich finde es ganz praktisch in den Logs überprüfen zu können, ob eine
Nachricht verschlüsselt übermittelt wurde, aber da hat wohl jeder Admin
seine eigene Ansicht.


> tls_preempt_cipherlist = yes

Falls bei Dir noch Server mit Exchange 2003 ihre Nachrichten einkippen
solltest Du das hier auskommentieren, und nur für Submission aktivieren.

--
Alex JOST
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: Verzögerung bei Mailzustellung extern (gelöst)

Andreas Wass - Glas Gasperlmair
Hallo Alex!

Vielen Dank für deinen tolle Unterstützung!
Jetzt, wo alles mal funktioniert, werde ich alle gesetzten Parameter in
Ruhe durchsehen und recherchieren.

vg, Andi

Am 14.12.2016 um 11:55 schrieb Alex JOST:

> Am 14.12.2016 um 07:51 schrieb Andreas Wass - Glas Gasperlmair:
>>> Stimmt! An diesem Punkt könntest Du Dir jetzt auch noch überlegen
>>> welche anderen Parameter Du einfach so blind kopiert hast. Ich denke
>>> da z.B. an die Einstellungen für SSL/TLS.
>> Könntest du mir noch sagen, was du an den SSL/TLS Einstellungen ändern
>> würdest?
>
> Ich habe von Kryptografie keine Ahnung, deshalb halte ich mich
> diesbezüglich an die Empfehlungen von Viktor Dukhovni. Deine
> Einstellungen unterscheiden sich vor allem im Bezug auf die Ciphers
> deutlich von seinen Empfehlungen.
>
>   http://marc.info/?l=postfix-users&m=143884497605106&w=2
>   http://marc.info/?l=postfix-users&m=145685265203724&w=2
>
>
> > smtp_tls_cert_file = $smtpd_tls_cert_file
> > smtp_tls_key_file = $smtpd_tls_key_file
> > smtpd_tls_ask_ccert = yes
>
> Brauchst Du das wirklich? Ansonsten würde ich es auskommentieren.
>
>
> > smtp_tls_loglevel = 0
> > smtpd_tls_loglevel = 0
>
> Ich finde es ganz praktisch in den Logs überprüfen zu können, ob eine
> Nachricht verschlüsselt übermittelt wurde, aber da hat wohl jeder
> Admin seine eigene Ansicht.
>
>
>> tls_preempt_cipherlist = yes
>
> Falls bei Dir noch Server mit Exchange 2003 ihre Nachrichten einkippen
> solltest Du das hier auskommentieren, und nur für Submission aktivieren.
>

Loading...