[SOLVED] all server ports busy

[plnt]

Hi,

We have PMG cluster with 17 nodes. Nodes 1 - Nodes 4 are for receiving mail and and the rest are for sending.
In recent days, users who send us emails have been receiving a error all server ports busy. We have 24654 domains in the cluster.

I would be grateful for any advice. We have already tried various settings including postfix template but without success.

This is error from mail.log >

2024-11-26T20:28:53.663021+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [209.85.216.46]:60560: all server ports busy
2024-11-26T20:28:54.117314+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [103.75.76.187]:39666: all server ports busy
2024-11-26T20:28:54.194564+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [193.178.233.55]:58270: all server ports busy
2024-11-26T20:28:54.778994+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [209.85.221.52]:47110: all server ports busy
2024-11-26T20:28:54.781243+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [93.183.104.105]:40596: all server ports busy
2024-11-26T20:28:56.012935+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [93.183.104.105]:42348: all server ports busy
2024-11-26T20:28:56.173128+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [209.85.221.43]:53444: all server ports busy
2024-11-26T20:28:56.199910+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [209.85.208.42]:57480: all server ports busy
2024-11-26T20:28:57.859442+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [116.31.251.132]:19623: all server ports busy
2024-11-26T20:28:57.958169+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [109.123.217.161]:49677: all server ports busy
2024-11-26T20:28:58.029743+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [23.251.226.4]:49429: all server ports busy
2024-11-26T20:28:59.444287+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [93.183.104.105]:56557: all server ports busy
2024-11-26T20:28:59.625653+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [93.183.104.105]:35656: all server ports busy
2024-11-26T20:29:00.285586+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [173.0.84.4]:29330: all server ports busy
2024-11-26T20:29:00.306361+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [209.85.221.178]:54603: all server ports busy
2024-11-26T20:29:00.334598+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [93.183.104.105]:55060: all server ports busy
2024-11-26T20:29:00.388046+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [93.183.104.105]:40626: all server ports busy
2024-11-26T20:29:00.423541+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [23.251.226.11]:33797: all server ports busy
2024-11-26T20:29:00.673603+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [106.75.146.61]:19619: all server ports busy
2024-11-26T20:29:01.010324+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [40.107.21.133]:56160: all server ports busy
2024-11-26T20:29:01.057295+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [93.183.104.105]:47257: all server ports busy
2024-11-26T20:29:01.145524+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [93.183.104.105]:54477: all server ports busy
2024-11-26T20:29:01.192036+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [209.85.167.51]:48623: all server ports busy
2024-11-26T20:29:01.216953+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [213.215.88.222]:45479: all server ports busy
2024-11-26T20:29:01.291810+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [213.215.88.199]:32018: all server ports busy
2024-11-26T20:29:01.306566+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [213.215.88.199]:32022: all server ports busy
2024-11-26T20:29:01.308829+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [93.183.104.105]:58590: all server ports busy
2024-11-26T20:29:01.313305+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [213.215.88.199]:32024: all server ports busy
2024-11-26T20:29:01.347840+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [212.55.231.1]:52400: all server ports busy
2024-11-26T20:29:01.356785+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [212.55.231.1]:52416: all server ports busy
2024-11-26T20:29:01.372062+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [93.183.104.105]:38451: all server ports busy
2024-11-26T20:29:01.437284+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [212.55.231.1]:52432: all server ports busy
2024-11-26T20:29:02.158829+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [23.251.226.8]:57697: all server ports busy
2024-11-26T20:29:02.213466+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [54.240.11.130]:39499: all server ports busy
2024-11-26T20:29:02.268052+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [93.183.104.105]:33943: all server ports busy
2024-11-26T20:29:02.443100+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [23.251.226.2]:33201: all server ports busy
2024-11-26T20:29:02.517946+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [91.207.14.251]:1169: all server ports busy
2024-11-26T20:29:02.528586+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [93.183.104.105]:55234: all server ports busy
2024-11-26T20:29:03.118424+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [93.183.104.105]:43720: all server ports busy
2024-11-26T20:29:03.120003+01:00 mx3 postfix/postscreen[7004]: NOQUEUE: reject: CONNECT from [116.255.233.31]:57952: all server ports busy

 

[Stoiko Ivanov]

haven't seen that yet - but the behavior is explained in: https://www.postfix.org/POSTSCREEN_README.html#other_error

maybe a misconfiguration - or one of the domains is getting DDOSed? - check the logs for the IP's that are listed there - maybe you see a pattern

 

[plnt]

Hi Stoiko, thanks for the guidance.

In >

/etc/pmg/templates/main.cf.in

add this >

postscreen_pre_queue_limit = 500
postscreen_post_queue_limit = 500

Default was 100.

But unfortunately another error appeared.
The email arrived at 9:49, but it didn't arrive at pmg-smtp-filter until 9:58. Then it was immediately sent to the mailserver, there was no delay there.
This means that it has accepted the connection but is keeping it open until it is its turn.

2024-11-27T09:49:12.495514+01:00 mx6 postfix/smtpd[1516603]: connect from mail.juniorpapier.sk[90.64.253.140]
2024-11-27T09:49:12.617373+01:00 mx6 postfix/smtpd[1516603]: NOQUEUE: client=mail.juniorpapier.sk[90.64.253.140]
2024-11-27T09:58:14.000901+01:00 mx6 pmg-smtp-filter[1522991]: 1005526746DF2541879: new mail message-id=<000001db40a8$f54bcab0$dfe36010$@juniorpapier.sk>#012
2024-11-27T09:58:15.366698+01:00 mx6 pmg-smtp-filter[1522991]: 1005526746DF2541879: SA score=0/5 time=1.159 bayes=undefined autolearn=disabled

I raised the limits in pmg filter bin file (see attach)>

/usr/bin/pmg-smtp-filter

It looks pretty healthy now. We'll see in the morning.