wiki:debug-email-delivery

Debug Email Delivery

There are many different varieties of Email delivery problems.

I didn't get the email from XXXX

The first step is to figure out which MOSH the email address should be receiving mail on. You can either look it up in the control panel, or run dig, e.g. if the email address ends in papertiger.org.

dig -t mx papertiger.org

Note: it is really important to be sure that email is supposed to be delivered to an MF/PL server before you continue trouble shooting. Many people will complain about not receiving email when they have their MX record configured to send to gmail or they are forwarding messages off the server.

Once you are sure they should be receiving email on one of our servers, login and run either: mf-find-email-from <email@address> or mf-find-email-to <email@address>

These commands output all email sent or received by a given email address today (i.e. /var/log/mail.log). If you want to search previous days, you can specify a different mail log using the second argument, e.g.:mf-find-email-from <email@address> /var/log/mail.log.1.gz

You can also manually search the mail.log with:

less /var/log/mail.log

Use / to search and the letter n to go to the next hit.

If you want to search a previous log use zless, e.g.

zless /var/log/mail.log.1.gz

I sent an email and the person didn't receive it

  • First, try to determine what server they relayed it through. If they are using a desktop client, it is probably mail.mayfirst.org, which means it went via either paulo or gil. If they sent via webmail - horde uses cero and roundcube is on stallman.

I sent something to my email list but it didn't go out

  • Figure out which mailman (or other) server they sent from. If they don't provide a list name - then ask. If they do provide a name, search the control panel to find out if it's on lists.mayfirst.org (leslie) or lists.people-link.net (assata). It might also be a special case (like portside - which is on listserv on morales)
  • First check to see if mailman received the list by looking in the list archives. You can go to: https://lists.mayfirst.org/mailman/admin/<list-name> and login with the master password, then click the archive link in the top right.
  • If it is not in the archive, it may not have been received. Try running: mf-find-email-from using the sender's address. You should see something like:
    Jan 22 18:58:39 leslie postfix/pipe[23020]: 32E721DD3D: to=<support-team@lists.mayfirst.org>, r
    elay=mailman, delay=0.22, delays=0.06/0/0/0.16, dsn=2.0.0, status=sent (delivered via mailman s
    ervice)
    
    • If not, grep for the list name in /var/log/mailman
    • If you do see it, go to the next step
  • If it is in the archive, we may be blocked by the recipient. Try grepping for the recipient address in /var/log/mail.log

Investigating possible spambot

  • If it seems like there might be a spambot on the system, maybe the ip address has been blocked. Then the following command might lend some insight:
    lsof -i | grep smtp
    

The output of this command should probably only show the users postfix, root, and clamsmtp. Any other users that own those processes should be investigated for malicious files. Usually from their web directory.

Last modified 4 years ago Last modified on Mar 26, 2015, 11:20:29 AM