Hey everyone,
I'm not sure I'm on the right list for this one... I have a postfix/dovecot install that was running fine on amazon web services that all of a sudden stopped receiving mail... In my mail log all I get is this:
Apr 30 03:16:26 ip-172-31-28-46 dovecot: imap(beth@primelashdiva.info): Connection closed in=595 out=1459
Apr 30 03:16:31 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth@primelashdiva.info>, method=PLAIN, rip=68.105.170.121, lip=172.31.28.46, mpid=31865, TLS, session=<cbidL6sxXQBEaap5>
Apr 30 03:16:33 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth@primelashdiva.info>, method=PLAIN, rip=68.105.170.121, lip=172.31.28.46, mpid=31867, TLS, session=<frXBL6sxYQBEaap5>
Apr 30 03:16:34 ip-172-31-28-46 dovecot: imap(beth@primelashdiva.info): Disconnected: Logged out in=97 out=440
Apr 30 03:16:38 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth@primelashdiva.info>, method=PLAIN, rip=68.105.170.121, lip=172.31.28.46, mpid=31869, TLS, session=<mvQGMKsxaABEaap5>
Apr 30 03:19:14 ip-172-31-28-46 dovecot: imap(beth@primelashdiva.info): Disconnected: Logged out in=408 out=1385
Apr 30 03:19:14 ip-172-31-28-46 dovecot: imap(beth@primelashdiva.info): Disconnected: Logged out in=847 out=3067
Apr 30 03:20:25 ip-172-31-28-46 postfix/postfix-script[3891]: stopping the Postfix mail system
Apr 30 03:20:25 ip-172-31-28-46 postfix/master[31225]: terminating on signal 15
Apr 30 03:20:25 ip-172-31-28-46 postfix/postfix-script[3963]: starting the Postfix mail system
Apr 30 03:20:25 ip-172-31-28-46 postfix/master[3964]: daemon started -- version 2.6.6, configuration /etc/postfix
Apr 30 03:20:44 ip-172-31-28-46 dovecot: master: Warning: Killed with signal 15 (by pid=3977 uid=0 code=kill)
Apr 30 03:20:44 ip-172-31-28-46 dovecot: imap: Server shutting down. in=472 out=1366
Apr 30 03:20:45 ip-172-31-28-46 dovecot: master: Dovecot v2.2.10 starting up for imap, pop3, lmtp (core dumps disabled)
Apr 30 03:21:17 ip-172-31-28-46 dovecot: imap-login: Aborted login (no auth attempts in 9 secs): user=<>, rip=68.105.170.121, lip=172.31.28.46, session=<Ar2lQKsxnQBEaap5>
Apr 30 03:24:30 ip-172-31-28-46 postfix/postfix-script[4141]: stopping the Postfix mail system
Apr 30 03:24:30 ip-172-31-28-46 postfix/master[3964]: terminating on signal 15
Apr 30 03:24:30 ip-172-31-28-46 dovecot: master: Warning: Killed with signal 15 (by pid=4147 uid=0 code=kill)
Apr 30 03:25:28 ip-172-31-28-46 postfix/postfix-script[2761]: starting the Postfix mail system
Apr 30 03:25:28 ip-172-31-28-46 postfix/master[2762]: daemon started -- version 2.6.6, configuration /etc/postfix
Apr 30 03:26:22 ip-172-31-28-46 dovecot: master: Dovecot v2.2.10 starting up for imap, pop3, lmtp (core dumps disabled)
Apr 30 03:27:03 ip-172-31-28-46 dovecot: imap-login: Aborted login (no auth attempts in 6 secs): user=<>, rip=68.105.170.121, lip=172.31.28.46, session=<eOVMVasxbQBEaap5>
Apr 30 03:27:36 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth@primelashdiva.info>, method=PLAIN, rip=68.105.170.121, lip=172.31.28.46, mpid=3001, TLS, session=<g49GV6sxiABEaap5>
Apr 30 03:27:54 ip-172-31-28-46 dovecot: imap-login: Aborted login (auth
failed, 1 attempts in 2 secs): user=beth@primelashdiva.info,
method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured,
session=
Apr 30 03:28:06 ip-172-31-28-46 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 6 secs): user=beth@primelashdiva.info, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured, session=
Apr 30 03:28:10 ip-172-31-28-46 dovecot: imap-login: Login: user=<
beth@primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1,
mpid=3008, secured, session=
Apr 30 03:28:10 ip-172-31-28-46 dovecot: imap(beth@primelashdiva.info): Disconnected: Logged out in=29 out=466
Apr 30 03:28:10 ip-172-31-28-46 dovecot: imap-login: Login: user=<
beth@primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1,
mpid=3011, secured, session=
Apr 30 03:28:10 ip-172-31-28-46 dovecot: imap(beth@primelashdiva.info): Disconnected: Logged out in=44 out=538
Apr 30 03:28:11 ip-172-31-28-46 dovecot: imap-login: Login: user=<
beth@primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1,
mpid=3014, secured, session=
Apr 30 03:28:11 ip-172-31-28-46 dovecot: imap(beth@primelashdiva.info): Disconnected: Logged out in=314 out=6899
Apr 30 03:28:12 ip-172-31-28-46 dovecot: imap-login: Login: user=<
beth@primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1,
mpid=3017, secured, session=
Apr 30 03:28:12 ip-172-31-28-46 dovecot: imap(beth@primelashdiva.info): Disconnected: Logged out in=209 out=816
Apr 30 03:29:12 ip-172-31-28-46 dovecot: imap-login: Login: user=<
beth@primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1,
mpid=3024, secured, session=
Apr 30 03:29:12 ip-172-31-28-46 dovecot: imap(beth@primelashdiva.info): Disconnected: Logged out in=91 out=872
Apr 30 03:30:12 ip-172-31-28-46 dovecot: imap-login: Login: user=< beth@primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=3027, secured, session=<9r6GYKsxsAB/AAAB>
Apr 30 03:30:12 ip-172-31-28-46 dovecot: imap(beth@primelashdiva.info): Disconnected: Logged out in=91 out=872
Apr 30 03:31:13 ip-172-31-28-46 dovecot: imap-login: Login: user=<
beth@primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1,
mpid=3037, secured, session=
Apr 30 03:31:13 ip-172-31-28-46 dovecot: imap(beth@primelashdiva.info): Disconnected: Logged out in=91 out=872
Apr 30 03:32:14 ip-172-31-28-46 dovecot: imap-login: Login: user=<
beth@primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1,
mpid=3043, secured, session=
Apr 30 03:32:14 ip-172-31-28-46 dovecot: imap(beth@primelashdiva.info): Disconnected: Logged out in=91 out=872
Apr 30 03:33:17 ip-172-31-28-46 dovecot: imap-login: Login: user=<
beth@primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1,
mpid=3051, secured, session=
Apr 30 03:33:17 ip-172-31-28-46 dovecot: imap(beth@primelashdiva.info): Disconnected: Logged out in=91 out=872
Apr 30 03:34:17 ip-172-31-28-46 dovecot: imap-login: Login: user=<
beth@primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1,
mpid=3057, secured, session=
Apr 30 03:34:17 ip-172-31-28-46 dovecot: imap(beth@primelashdiva.info): Disconnected: Logged out in=91 out=872
Apr 30 03:35:18 ip-172-31-28-46 dovecot: imap-login: Login: user=<
beth@primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1,
mpid=3063, secured, session=
Apr 30 03:35:18 ip-172-31-28-46 dovecot: imap(beth@primelashdiva.info): Disconnected: Logged out in=91 out=872
Apr 30 03:35:29 ip-172-31-28-46 dovecot: imap-login: Login: user=<
beth@primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1,
mpid=3066, secured, session=
Apr 30 03:35:29 ip-172-31-28-46 dovecot: imap(beth@primelashdiva.info): Disconnected: Logged out in=32 out=449
Apr 30 03:35:29 ip-172-31-28-46 dovecot: imap-login: Login: user=<
beth@primelashdiva.info>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1,
mpid=3069, secured, session=
Apr 30 03:35:29 ip-172-31-28-46 dovecot: imap(beth@primelashdiva.info): Disconnected: Logged out in=44 out=538
Apr 30 03:36:41 ip-172-31-28-46 postfix/postfix-script[3424]: stopping the Postfix mail system
Apr 30 03:36:41 ip-172-31-28-46 postfix/master[2762]: terminating on signal 15
Apr 30 03:36:42 ip-172-31-28-46 postfix/postfix-script[3496]: starting the Postfix mail system
Apr 30 03:36:42 ip-172-31-28-46 postfix/master[3497]: daemon started -- version 2.6.6, configuration /etc/postfix
Apr 30 03:36:48 ip-172-31-28-46 dovecot: master: Warning: Killed with signal 15 (by pid=3509 uid=0 code=kill)
Apr 30 03:36:48 ip-172-31-28-46 dovecot: imap: Server shutting down. in=586 out=1464
Apr 30 03:36:49 ip-172-31-28-46 dovecot: master: Dovecot v2.2.10 starting up for imap, pop3, lmtp (core dumps disabled)
Apr 30 03:37:05 ip-172-31-28-46 dovecot: imap-login: Aborted login (no auth attempts in 6 secs): user=<>, rip=52.37.99.183, lip=172.31.28.46, session=<9D4ueasxaAA0JWO3>
Apr 30 03:37:35 ip-172-31-28-46 dovecot: imap-login: Aborted login (no auth attempts in 8 secs): user=<>, rip=68.105.170.121, lip=172.31.28.46, session=<PN3weqsxwgBEaap5>
Apr 30 03:41:46 ip-172-31-28-46 dovecot: imap-login: Aborted login (tried to use disallowed plaintext auth): user=<>, rip=68.105.170.121, lip=172.31.28.46, session=<xC7oiasxUwBEaap5>
[ec2-user@ip-172-31-28-46 log]$
I'm not even sure where to go to start looking... Any pointers?
Thanks Everyone!