Hi there,
I'm not on this list, so please make sure that replies go to
marks@??? as well, thanks.
I'm not sure if this is an Exim issue, or an nscd issue. But I can't
really find an answer.
We have an Exim-setup with about twenty machines doing email for our
customers. We do about 70 emails/second on a loadbalanced environment
and after scanning for spam we deliver about 10 emails/second in
people's mailboxes. The delivery is loadbalanced over three machines.
(See the config attached to this email)
All works well, except for an 'Unrouteable address', once in a while.
Apr 22 17:47:47 maildrop2.maildrop.dmz.bit.nl exim[29127]:
1JoKih-0007Zi-PN ** stedelyk@???: Unrouteable address
Apr 22 18:04:57 maildrop1.maildrop.dmz.bit.nl exim[16182]:
1JoKzJ-0004Cz-I0 ** hengroep@???: Unrouteable address
Apr 22 18:17:41 maildrop2.maildrop.dmz.bit.nl exim[18194]:
1JoLBd-0004jR-96 ** marina@???: Unrouteable address
Apr 22 18:29:50 maildrop3.maildrop.dmz.bit.nl exim[30770]:
1JoLNO-00080H-Qy ** adm-smit@???: Unrouteable address
Apr 22 18:31:15 maildrop3.maildrop.dmz.bit.nl exim[31710]:
1JoLOl-0008FR-Gz ** nillesen@???: Unrouteable address
Apr 22 18:31:58 maildrop3.maildrop.dmz.bit.nl exim[32264]:
1JoLPS-0008OM-IY ** era214@???: Unrouteable address
Apr 22 18:32:46 maildrop2.maildrop.dmz.bit.nl exim[28466]:
1JoLQE-0007P5-7M ** dlp16@???: Unrouteable address
We do not do any recipient checking as these checks are done on the
frontend-machines, but all of these users exist on the machines where
delivery takes place.
The users exists thanks to libnss-ldap, combined with nscd.
As far as I can tell, the only thing that could cause these messages to
bounce is 'check_local_user'. According to the Exim documentation,
check_local_user does a getpwnam. Should I assume that, if Exim says
'Unrouteable address', the getpwnam-reply was 'User does not exist'? If
so, the problem would lie in nscd, giving false replies. As far as I can
see Exim should tempfail if it sees an LDAP error, and not 'Unrouteable
address'.
If anyone has a cluebat, please hit me with it. :)
Thanks!
--
Mark Schouten, Unix/NOC-engineer
BIT BV | info@??? | +31 318 648688
MS8714-RIPE | B1FD 8E60 A184 F89A 450D A128 049B 1B19 9AD6 17FF
