Useful postfix commands14.05.23

Filed under: POSTS — Leave a comment	
April 1, 2015

Some useful postfix commands
postqueue -p = mailq    //postqueue -p is the same as mailq

service postfix reload    //reload config
service postfix restart   //restart postfix server

postconf  mail_version      //View the postfix version
postconf -d     //Show default postfix values
postconf -n     //Show non default postfix values

mailq     //list mail queue and MAIL_ID’s, list mail queue
postqueue -p //list mail queue and MAIL_ID’s, list mail queue
postfix  flush   // flush mail queue
postqueue -f    //process the queue now
postcat -q MAIL_ID     //read email from mail queue

postsuper -d MAIL_ID       //To remove MAIL_ID mail from the queue
postsuper -d ALL       //To remove all mail from the queue
postsuper -d ALL deferred        //To remove all mails in the deferred queue

postqueue -p | awk ‘/^[0-9,A-F]/ {print $7}’ | sort | uniq -c | sort -n           //sort and count emails by “from address”

postqueue -p | awk ‘/^[0-9,A-F].*user@adminlogs.info / {print $1}’ | cut -d ‘!’ -f 1 | postsuper -d –      //remove all email sent from user@adminlogs.info

To delete all messages from the queue by a certain user:
for i in `postqueue -p | grep user@domain.com | awk ‘{print $1}’ | grep -v host | grep -v \*`; do postsuper -d $i; done

postqueue -p | tail -n 1   //Mail queue stats short
postqueue -p | grep -c “^[A-Z0-9]”    //number of emails in Mail queue

tail -f /var/log/maillog    //watch logs live

############################

https://ashraflinux.wordpress.com/useful-postfix-commands-to-troubleshooting-postfix-issue/

Usefull postfix comands…..

This commands we use to troble shoot postfix issue.

To Check Postfix Queue

#mailq

The last line in the output of above commands shows No. of mails in queue
You can use

mailq |tail -1

To Check Sasl Auth

SASL (Simple Authentication and Security Layer) is used by posfix for SMTP authentication which inturn uses reverse IMAP

tail -f /var/log/messages|grep sasl

To Check Posfix Logs

tail -f /var/log/maillog|grep postfix

To Check For Forward-Loops

Example logs:

grep EF8BF618034 /var/log/maillog.7
Jun 30 11:56:37 inbound-us1 postfix/smtpd[27378]: EF8BF618034: client=smtp06.bis.na.blackberry.com[216.9.248.53]
Jun 30 11:56:38 inbound-us1 postfix/cleanup[24076]: warning: EF8BF618034: unreasonable virtual_alias_maps map *nesting* for terry@5starmedical.net
Jun 30 11:56:38 inbound-us1 postfix/cleanup[24076]: warning: EF8BF618034: unreasonable virtual_alias_maps map expansion size for terry@5starmedical.net

Note: the “map expansion size” warning shows up if the “virtual_alias_expansion_limit = 1000″ limit is exceeded. In the nested looping case, the expansion crosses this limit.

root@xyz]# qshape-maia  deferred

T  5 10 20 40  80 160  320  640 1280 1280+
                             TOTAL 7545 47 75 56 65 292 665 1807 2486 1197   855
                         yahoo.com 3581 20 51 30 37 227 406 1004 1431  327    48
                       yahoo.co.in 1932 10  1  7 10  40 173  582  756  203   150
                          yahoo.in   74  0  0  1  1   1  16   45   10    0     0
                       linked5.com   46  5 11  0  0   2   0   28    0    0     0
                       bsgroup.com   34  0  0  0  0   0   0    0    0    0    34
                       magicnet.mn   34  0  0  0  0   0   0    0    0   34     0
                          vsnl.com   22  0  0  0  0   0   0    2    5    0    15
                airtelbroadband.in   22  0  0  0  0   0   8    3    6    0     5
                          vsnl.net   21  0  0  0  0   0   1    0    4    0    16
                         ymail.com   18  1  1  0  0   2   4    9    1    0     0
                       nirma.co.in   15  0  0  0  0   0   0    7    8    0     0
                          gmail.co   13  0  0  0  0   0   0    2    1    0    10
                      lared.com.ar   13  0  0  0  0   0   0    0    0   13     0
                     redifmail.com   12  0  0  0  0   0   0    3    4    2     3
       backupeast.bizmaticsinc.com   11  0  0  0  0   0   0    2    4    0     5
                       shgl.com.my   10  0  0  0  0   0   0    0    3    0     7
              swarajenterprise.com   10  0  0  0  0   0   0    0    1    0     9
            digitalsolutions.co.in   10  0  0  0  0   0   0    1    4    0     5
                           eppl.in    9  0  0  0  0   0   0    0    8    0     1

List of domains that are being deferred

[root@xyz]# qshape-maia -s  deferred
                                      T  5 10 20 40  80 160  320  640 1280 1280+
                             TOTAL 5598 20 41 34 67 243 488 1253 1683 1044   725
          venderporinternet.com.ar  524  0  0  0  0   0   0    0    0  524     0
                  bizmaticsinc.com  220  2  0  1  1  40 164    2    4    1     5
                 itdevenezuela.com  201  0  0  0  0   0   0   13  140   48     0
                 contactxindia.com  194  0  0  1  0   1   7   72  107    6     0
                 jvfinancial.co.in  193  0  0  0  0   0   0  189    0    0     4
                   indiratrade.com  156  0  0  0  0   0   0    1    4  151     0
                    balavikasa.org  135  3  2  3  4  10  20   27   39   20     7
                   aquaplusltd.com  103  0  0  0  0   0   0    1  102    0     0
                        gsecin.com   92  0  0  0  0   0  10   58    0   23     1
                       linked5.com   75  0  7  1  0   6   0   15   25   18     3
                     eyeglobal.com   59  0  0  0  0   0   3   28   26    1     1
                         dhlh3.com   58  1  7  1 22  19   0    2    6    0     0
                  dpaulstravel.com   56  0  0  0  0   1  16   26   10    0     3
                        bsgroup.in   55  0  1  0  1   1   2    3   11    0    36
                      sherrymo.com   54  0  0  0  0   0   6   22   23    3     0
                           face.mn   52  0  0  0  2   0   7    0   10   30     3
                     mywebmaker.in   51  0  0  0  0   0   0    0   45    3     3
        lawofficewilliamsterns.com   51  0  0  0  0   0   0    0    0    0    51
                    mansishares.in   50  0  0  0  0   0  45    5    0    0     0

Checking Specific Mail From Queue

If you want to check specific mail from queue
    Check Message ID from mailq command

-Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient-------
    D5EB71AEA45*   54559 Wed Feb 13 06:56:01  delhi@sandalwoodresidential.net
                                             roxy@bol.net.in
                                             rshankerchy@yahoo.co.in

In the Above Example the first alphanumberical part in caps D5EB71AEA45 is the messages id.
    To view the full mails

postcat -q D5EB71AEA45

If you an error postcat: fatal: open queue file D5EB71AEA45: No such file or directory
    Then it means mail has been delivered or removed using postsuper

Removing Specific Mail From Queue

If you want to remove specific mail from queue

postsuper -d  D5EB71AEA45

Sorting Queued Mails By From Address:

# mailq | awk '/^[0-9,A-F]/ {print $7}' | sort | uniq -c | sort -n

If there are lots of mails of a particular sender that are queued and you are sure that they are spam/scam, you can suspend all deliveries by putting the queue on hold using the command:

# postsuper -h ALL

This should give you some output like:

postsuper: Placed on hold: 1625 messages

You can then remove mails selectively using the commands outlined below:

Removing Mails Based On Sender Address

if you want to remove all mails sent by peggysj@msn.com from the queue

or, if you have put the queue on hold, use

# mailq | awk '/^[0-9,A-F].*capitalone@mailade.com/ {print $1}' | cut -d '!' -f 1 | postsuper -d -

to remove all mails being sent using the From address “capitalone@mailade.com”.

Removing Mails Based On Domain

if you want to remove all mails sent by the domain msn.com from the queue

If you have placed the queue on hold, make sure you release it after you’ve finished deleting mails:

# postsuper -H ALL
postsuper: Released from hold: 238 messages

SMTP Connections Monitoring

tail -f /var/log/maillog|grep postfix
    Check if the mails are being delivered in the local and remote queue.

netstat -ant | grep 25
    To check if SMTP connections are established on port 25.

To check no of SMTP connections established on port 25.

netstat -ant 2> /dev/null | awk '{print $4" "$6}' | egrep '[0-9]+.[0-9]+.[0-9]+.[0-9]+:25' | grep ESTABLISHED | wc -l

To stop SMTP service.
    Coment this line in /etc/postfix/master.cf

smtp      inet  n       -       n       -       300       smtpd

Relaod Posfix

postfix reload

To start SMTP service.
    Uncoment this line in /etc/postfix/master.cf

smtp      inet  n       -       n       -       300       smtpd

Relaod Posfix

postfix reload

Checking Policyd Logs

Policyd is an anti-spam plugin for Postfix current installed Rclub_LB.mailbox.inbound.us.5 as Centralized plugin

tail -f /var/log/maillog|grep policyd

Replace the domain if you wanna remove the mails deffered for a particular domain

To remove all defered mails

/usr/sbin/postqueue -p | grep '^[A-Z0-9]' | cut -f1 -d' ' |tr -d \*|postsuper -d -

https://udaygade.wordpress.com/2015/04/01/412/

Anonymous

Useful postfix commands14.05.23

Information Epoch 1686005699