
我最好的理論是,某些內核限制受到了阻止出站連接的影響。我們基本上已經嘗試了從tcpdumps 到配置全新的虛擬伺服器(我們在任何其他虛擬伺服器上都沒有這個問題)的所有方法,但是這個問題在某種程度上仍然存在,即使使用新的postfix 建置(工作)也是如此。
只要 postfix 沒有發生太多事情,電子郵件就可以工作,出站連線也可以運作。 /proc/user_beancounters 顯示沒有受到限制(如下所示)。然而,即使是 IP 位址也無法 ping 通。 TCP 堆疊看起來很健康。負載低。沒有iowait。已經刷新了 iptables。有人經歷過這樣的事情嗎?
uid resource held maxheld barrier limit failcnt
3: kmemsize 166216365 170262528 9223372036854775807 9223372036854775807 0
lockedpages 0 0 9223372036854775807 9223372036854775807 0
privvmpages 285727 351885 9223372036854775807 9223372036854775807 0
shmpages 16933 17605 9223372036854775807 9223372036854775807 0
dummy 0 0 0 0 0
numproc 150 303 9223372036854775807 9223372036854775807 0
physpages 314156 326191 0 1280000 0
vmguarpages 0 0 9223372036854775807 9223372036854775807 0
oomguarpages 165355 165355 9223372036854775807 9223372036854775807 0
numtcpsock 89 172 9223372036854775807 9223372036854775807 0
numflock 22 76 9223372036854775807 9223372036854775807 0
numpty 1 2 9223372036854775807 9223372036854775807 0
numsiginfo 0 75 9223372036854775807 9223372036854775807 0
tcpsndbuf 2733472 4371752 9223372036854775807 9223372036854775807 0
tcprcvbuf 1798336 5427296 9223372036854775807 9223372036854775807 0
othersockbuf 491120 1000760 9223372036854775807 9223372036854775807 0
dgramrcvbuf 0 238728 9223372036854775807 9223372036854775807 0
numothersock 361 505 9223372036854775807 9223372036854775807 0
dcachesize 135941831 136114679 9223372036854775807 9223372036854775807 0
numfile 2905 4990 9223372036854775807 9223372036854775807 0
dummy 0 0 0 0 0
dummy 0 0 0 0 0
dummy 0 0 0 0 0
numiptent 8 9 9223372036854775807 9223372036854775807 0
平輸出:
[root@xxx /]# ping 4.2.2.1
PING 4.2.2.1 (4.2.2.1) 56(84) bytes of data.
--- 4.2.2.1 ping statistics ---
9 packets transmitted, 0 received, 100% packet loss, time 8493ms
[root@xxx /]# service postfix stop
[root@xxx /]# ping 4.2.2.1
PING 4.2.2.1 (4.2.2.1) 56(84) bytes of data.
64 bytes from 4.2.2.1: icmp_seq=1 ttl=53 time=8.63 ms
64 bytes from 4.2.2.1: icmp_seq=2 ttl=53 time=8.62 ms
64 bytes from 4.2.2.1: icmp_seq=3 ttl=53 time=8.63 ms
64 bytes from 4.2.2.1: icmp_seq=4 ttl=53 time=8.66 ms
當 postfix 運作時,各種出站連線都會失敗。
答案1
問題是路由器(封包過濾器)中的防火牆規則錯誤。