我收到了关于Nagios Mailqueue长度的警报邮件:
Additional Info: WARN - Mailqueue length is 18 (More than threshold: 10)
在mailq ,我看到一些这样的消息:
-Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient------- A7B39BFB01A7 16746 Tue Apr 9 08:54:57 [email protected] (connect to asdasd.vn[203.119.8.111]: Connection timed out) [email protected]
smtpd_recipient_restrictions的值:
smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, check_policy_service unix:private/policy, reject_unknown_recipient_domain, reject_unverified_recipient
请注意,我已经启用了reject_unknown_recipient_domain 。
但让我们看看该域映射到哪个IP地址:
$ nslookup asdasd.vn Server: 8.8.8.8 Address: 8.8.8.8#53 Non-authoritative answer: asdasd.vn canonical name = thongbao.vnnic.vn. Name: thongbao.vnnic.vn Address: 203.119.8.111
除了黑名单203.119.8.111之外,还有什么办法可以禁用这个行为吗?
更新1
/var/log/maillog :
Apr 9 15:50:36 mail postfix/qmgr[18585]: 23A66BFB01A0: to=<[email protected]>, relay=none, delay=25004, delays=24983/21/ 0/0, dsn=4.4.1, status=deferred (delivery temporarily suspended: connect to asdasd.vn[203.119.8.111]: Connection timed out)
您可以通过postfix_header_checks运行它,只需设置一行说/^To:.*@asdasd.vn/REJECT,或者如果您愿意,可以执行其他操作。
标题检查的好处是你可以添加尽可能多的那些你想要的。