mouss qpeqrnetoyennet justin piszcz wrote question 1 typical see logs 2 caused using fail2ban course others spammers grep timeout maillog sed sfromg awk print timeout after810 awk print 123sortuniq c 549 timeout connect 613 timeout data 419 timeout ehlo 75 timeout endofmessage 137 timeout helo 160 timeout mail 821 timeout rcpt 294 timeout rset 3 however also legitimate timeouts timeout endofmessage vgerkernelorg209132176167 timeout endofmessage vgerkernelorg209132176167 timeout endofmessage vgerkernelorg209132176167 timeout ehlo vgerkernelorg209132176167 timeout endofmessage vgerkernelorg209132176167 timeout endofmessage vgerkernelorg209132176167 timeout endofmessage vgerkernelorg209132176167 timeout endofmessage vgerkernelorg209132176167 timeout endofmessage vgerkernelorg209132176167 timeout endofmessage qmta01westchesterpamailcomcastnet76966216 timeout endofmessage qmta02emeryvillecamailcomcastnet76963024 timeout endofmessage qmta09westchesterpamailcomcastnet76966296 timeout endofmessage heavy header body checks header body checks abused generic content filter awhile following enabled using defaults smtpd_client_connection_count_limit 25 smtpd_client_connection_rate_limit 50 smtpd_error_sleep_time 10 smtpd_hard_error_limit 5 smtpd_junk_command_limit 3 smtpd_soft_error_limit 2 smtpd_timeout 60s mainly extracted httpwwwpantzorgsoftwarepostfixsetuppostfixhtml replacing defaults 1 200126831bk6dslsurnetcl200126831 1 82158130242dynuseronocom82158130242 1 84121208253dynuseronocom84121208253 1 adslull12523049151net24it15149230125 1 gwfry21190802cz85132248190 1 pool727786211pitbpafiosverizonnet727786211 2 17214389200fibertelcomar20089143172 2 h2221441698ipalltelnet9816144222 3 fl7152835dhcpembarqhsdnet7152835 4 ppp340ddslpacificnetau20314321313 9 88199922tktelekompl88199922 9 n24z185l52broadbandctmnet2028618552 still get various timeout x tell likely spamzombie hosts likely blocked via iptablesfail2ban probably disconnected often see many different networks different oses different configurations without fail2ban equivalent reason zombie end mx end connect case likely reverse dns lookup took longer zombie could wait maybe zombie authoris prefer servers dont checks including rdns lookup means better deliverability junk possibilities include zombie crashrebootdisconnected etc postconf n address_verify_map btreevarspoolpostfixetcverify alias_database hashetcaliases alias_maps hashetcaliases allow_percent_hack anvil_rate_time_unit 60s anvil_status_update_time 1d append_dot_mydomain yes biff body_checks pcreetcpostfixbody_checkspcre broken_sasl_auth_clients yes config_directory etcpostfix daemon_timeout 2d delay_warning_time 4h disable_vrfy_command yes header_checks pcreetcpostfixheader_checkspcre html_directory usrsharedocpostfixhtml inet_interfaces mailbox_command procmail extension mailbox_size_limit 0 message_size_limit 0 mime_header_checks header_checks mydestination myhostname localhostmydomain localhost mydomain mydomain localdomain myhostname mynetworks 1270008 1921680024 myorigin myhostname nested_header_checks header_checks readme_directory usrsharedocpostfix recipient_delimiter relayhost show_user_unknown_table_name smtp_bind_address smtpd_banner myhostname remove default good smtpd_client_restrictions smtpd_data_restrictions reject_unauth_pipelining ahuh smtpd_client_restrictions smtpd_data_restrictions reject_unauth_pipelining leading whitespace smtpd_data_restrictions remove smtpd_delay_reject yes smtpd_discard_ehlo_keyword_address_maps cidretcpostfixehlo_keyword_mapcidr smtpd_end_of_data_restrictions reject_unauth_pipelining smtpd_etrn_restrictions permit_mynetworks reject smtpd_helo_required yes smtpd_helo_restrictions smtpd_policy_service_max_idle 600s smtpd_policy_service_timeout 600s smtpd_recipient_restrictions permitlocal relaycheck presenderchecks prependheader prewhitelists stndchecks whitelists pcrechecks cidrchecks hashchecks unlistchecks spfcheck rhsblchecks policydcheck greylist smtpd_restriction_classes cidrchecks greylist hashchecks pcrechecks permitlocal policydcheck prependheader presenderchecks prewhitelists rblchecks relaycheck rhsblchecks spamchecks spfcheck stndchecks testblists unlistchecks verifysender whitelists unofrtunately postconf n show restrictions classes checks contain idea checks actually smtpd_sasl_auth_enable yes smtpd_sasl_local_domain mydomain smtpd_sasl_security_options noanonymous smtpd_sender_restrictions soft_bounce strict_rfc821_envelopes yes swap_bangpath unverified_sender_reject_code 550 justin wed 06 aug 2008 015819 0100 question regarding timeouts