[7.450][BUG][NOTABUG] Inbound SMTP proxy fails to intercept most mail

[chow11]

I am getting a fair amount of both spam and non-spam that seem to bypass the SMTP proxy. The proxy does catch a few pieces of mail, but the majority seem to pass right though. The mail manager does display the occasional blocked mail (or accepted mail, mostly ASG generated mail).

I have seen reports on this forum about reports not working correctly, but I have not seen anyone else post about this issue.

SMTP->Advanced->Transparent Mode = does not matter if this is checked or not.

[chow11]

If I send myself mail from an outside account while I have the SMTP live log open, I do not see any traffic between hitting send and receiving the mail internally. I do see the occasional entry however, so the SMTP proxy is working occasionally.

[chow11]

I now believe that this is related to SMTP scanner crashes. Is there some way to see these crash reports (if any) for troubleshooting?

[chow11]

I continued to tinker with enabling and then disabling various parts of the SMTP proxy and now it appears to be fully functional. I have no idea what the magic settings were, best as I can tell they are identical to when I was having issues.

[RFCat_vk]

Hi,
you should be able to look in the smtp log to see the traffic going through the proxy.
I am not sure how quick you were making the changes then testing, but you need to allow a minute or two for the changes to take affect.

Ian M

[BAlfson]

Chow11, there's not enough information here to confirm a bug. It sounds like you just had a misconfiguration. If you want to pursue this, please post a list of any packet filter or DNAT rules that allow external traffic into your network or to 'Any'.

Cheers - Bob

[chow11]

I don't think there is a "bug" in the proxy (other than the occasional scanner crash in the log). Everything is working just fine for the last 20 hours.

I suspect there is an issue with making a lot of configuration changes in a short amount of time. Maybe if you make configuration change #1 and hit apply, but then before that service can restart you make another config change to the same sub-section and hit apply again things don't quite work right until a reboot. I don't know for sure, just guessing.

The symptoms were strange. ASG was in this weird state where I could watch the live SMTP log and send myself email from outside (eg: yahoo mail => me@mydomain.com) and my exchange 2007 server inside the proxy would receive the email and I see nothing in the log. Yet, 5 minutes later I see a spam mail rejected in the mail manager. I think all my issues were fixed with a reboot while I was tinkering.

[BAlfson]

I suspect there is an issue with making a lot of configuration changes in a short amount of time. Maybe if you make configuration change #1 and hit apply, but then before that service can restart you make another config change to the same sub-section and hit apply again things don't quite work right until a reboot. I don't know for sure, just guessing.

That's an interesting idea. Let's hope a developer passes by and comments.

Cheers - Bob

[ee-tra]

It's the job of confd and middleware to prevent this described situation.
If a user can configure the ASG so that the changes are not applied
and a reboot is needed to let the ASG work again this is definitely a bug.

Are you able to trigger such a situation?
If yes please describe what you did and attach following files.
/tmp/confd-debug.log
/tmp/mdwdebug.log
/var/log/confd.log
/var/log/mdw.log

[Astaro Beta Bot]

Astaro Beta Report
--------------------------------
Version: 7.450
Type: BUG
State: NOTABUG
Reporter: chow11
Contributor: 
MantisID: 
--------------------------------