#7680 retrace.fp.org is not able to send mail through bastion
Closed: Fixed 5 years ago by kevin. Opened 5 years ago by mkutlak.

From logs:

retrace01.qa.fedoraproject.org postfix/smtp[26539]: connect to bastion.phx2.fedoraproject.org[10.5.126.12]:25: Connection refused
  • Describe what you need us to do:
    Allow connection from retrace.fp.org to bastion. (I guess a fw rule for bastion is not defined.)

  • When do you need this? (YYYY/MM/DD)

  • When is this no longer needed or useful? (YYYY/MM/DD)
  • If we cannot complete your request, what is the impact?

Hi,

Email communication from that box had been explicitly blocked a bit ago, because the box sent such an amount of email that it was breaking other mailservers.
If this has now been fixed, we can unblock it, but then we'd like to have verification that rate limiting is now in place.

Regards,
Patrick

Metadata Update from @puiterwijk:
- Issue assigned to puiterwijk

5 years ago

Hej,
thank you for looking into it.

We've implemented rate limiter in faf-1.3.1
https://github.com/abrt/faf/commit/322d8033bdf751c297d125bd10fdd6533549e8d5

We currently use:
# rpm -q faf
faf-1.3.5-1.el7.noarch

With rate limiting configuration in place:
# tail -n 7 /etc/faf/plugins/web.conf
[throttle]
# Number of mails that can be sent per the time frame
rate = 1
# Time to wait (in seconds) before another mail can be sent
timeframe = 30
# Start the throttling after this number of mails is sent
burst = 1

Cheers,
Martin

Hi,

Okay, I'll get you unblocked.
However, I did notice the other day that no updates have been run on this system for quite a while, and it has a high uptime.
If you could run a yum update, and then reboot the machine, I'll unblock sending email after that is done.

Regards,
Patrick

The retrace server was just updated and rebooted.

Cheers

You should be able to send email again. Please test and I will close.

The mails are working now.

Thank you!

Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

5 years ago

Login to comment on this ticket.

Metadata