Version 9 (modified by Ross, 8 years ago) (diff)


Debug Email Delivery

There are many different varieties of Email delivery problems.

I didn't get the email from XXXX

The first step is to figure out which MOSH the email address should be receiving mail on. You can either look it up in the control panel, or run dig, e.g. if the email address ends in

dig -t mx

Note: it is really important to be sure that email is supposed to be delivered to an MF/PL server before you continue trouble shooting. Many people will complain about not receiving email when they have their MX record configured to send to gmail or they are forwarding messages off the server.

Once you are sure they should be receiving email on one of our servers, login and run either: mf-find-email-from <email@address> or mf-find-email-to <email@address>

These commands output all email sent or received by a given email address today (i.e. /var/log/mail.log). If you want to search previous days, you can specify a different mail log using the second argument, e.g.:mf-find-email-from <email@address> /var/log/mail.log.1.gz

You can also manually search the mail.log with:

less /var/log/mail.log

Use / to search and the letter n to go to the next hit.

If you want to search a previous log use zless, e.g.

zless /var/log/mail.log.1.gz

I sent something to my list but it didn't go out

  • First check to see if mailman received the list by looking in the list archives. You can go to:<list-name> and login with the master password, then click the archive link in the top right.
  • If it is not in the archive, it may not have been received. Try running: mf-find-email-from using the sender's address. You should see something like:
    Jan 22 18:58:39 leslie postfix/pipe[23020]: 32E721DD3D: to=<>, r
    elay=mailman, delay=0.22, delays=0.06/0/0/0.16, dsn=2.0.0, status=sent (delivered via mailman s
    • If not, grep for the list name in /var/log/mailman
    • If you do see it, go to the next step
  • If it is in the archive, we may be blocked by the recipient. Try grepping for the recipient address in /var/log/mail.log

Investigating possible spambot

  • If it seems like there might be a spambot on the system, maybe the ip address has been blocked. Then the following command might lend some insight:
    lsof -i | grep smtp

The output of this command should probably only show the users postfix, root, and clamsmtp. Any other users that own those processes should be investigated for malicious files. Usually from their web directory.