Accounts not recieving email - some outlook connection errors - 911

[ryno267]

Problem started this morning when a client called in that all 6 computers in his office popped up with the Outlook user/password prompt. Initial error code he gave, I searched and found that it said password was bad. The account has been in use for few months and none of them changed their passwords... Later he sent this error code:

Task 'mail.domain.com - Sending' reported error (0x80048002) : 'This task was cancelled before it was completed.'

Later, another call from a different client stating similar errors... that ACT couldn't connect to the mail server.

Later still a client had issues hooking up Outlook Express to the server and kept popping the user/pass window even though his password is correct and all settings are good. Again the account has been setup for a while.

These clients can all log onto the /webmail and send from there but NO EMAILS ARE BEING RECIEVED at all.


However, on two of my domains on that samer server, same reseller account, I have no errors from Outlook at work or now at home, and can even SEND from outlook to my gmail account but neither of those two accounts are recieving at all.

--
I've restarted exim, pop, and have restarted the server all to no avail.

Please help ASAP - thank you for your time.



I checked out /var/log/exim_mainlog.........

2006-08-01 21:46:47 failed to open /etc/exim_deny when checking "/etc/exim_deny": Permission denied (euid=47 egid=12)
2006-08-01 21:46:49 cwd=/usr/local/cpanel/whostmgr/docroot 5 args: /usr/sbin/exim -C /etc/exim_outgoing.conf -Mvh 1G7obO-0002i8-Si
2006-08-01 21:46:49 cwd=/usr/local/cpanel/whostmgr/docroot 5 args: /usr/sbin/exim -C /etc/exim_outgoing.conf -Mvb 1G7obO-0002i8-Si
2006-08-01 21:46:52 failed to open /etc/exim_deny when checking "/etc/exim_deny": Permission denied (euid=47 egid=12)
2006-08-01 21:47:28 failed to open /etc/exim_deny when checking "/etc/exim_deny": Permission denied (euid=47 egid=12)
2006-08-01 21:47:39 failed to open /etc/exim_deny when checking "/etc/exim_deny": Permission denied (euid=47 egid=12)
2006-08-01 21:47:53 failed to open /etc/exim_deny when checking "/etc/exim_deny": Permission denied (euid=47 egid=12)
2006-08-01 21:47:54 failed to open /etc/exim_deny when checking "/etc/exim_deny": Permission denied (euid=47 egid=12)
2006-08-01 21:48:08 failed to open /etc/exim_deny when checking "/etc/exim_deny": Permission denied (euid=47 egid=12)
2006-08-01 21:48:15 failed to open /etc/exim_deny when checking "/etc/exim_deny": Permission denied (euid=47 egid=12)
2006-08-01 21:48:23 failed to open /etc/exim_deny when checking "/etc/exim_deny": Permission denied (euid=47 egid=12)
2006-08-01 21:49:04 failed to open /etc/exim_deny when checking "/etc/exim_deny": Permission denied (euid=47 egid=12)

It keeps going on with similar errors...

[ryno267]

it seems that some of our exim config files got punched with some incorrect permissions...

grep -i chown /root/.bash_history

> chown -R root.root /bin
> chown -R root.root /boot
> chown -R root.root /dev
> chown -R root.root /downloads
> chown -R root.root /error_log
> chown -R root.root /etc


Any other reccomondations are more than welcome.

[chirpy]

Those commands are an extremely bad idea, especially the chown on /etc which will break things. You need to compare the ownership of the files on a clean system and set them appropriately if you've screed them up in system paths.

[ryno267]

ya bad things like changing the exim configuration files?

we've reset the chown on those files I believe to root.mail.




I am having one report of one of the accounts not receiving still.... Returned email to a new test email on that account shows:::

The following recipient(s) could not be reached:
'theemail@domain.us' on 8/2/06 09:21
503 valid RCPT command must precede DATA

Yes my "my server requires authentication" box is checked and has been.


Please advise...

[ryno267]

I found this site listing the typical dir permissions: http://www.gnoppix.org/pages/rute/node20.html

Mine currently looks like this:

drwxr-xr-x 2 root root 4096 Jul 21 00:26 bin
drwxr-xr-x 4 root root 2048 Aug 7 2005 boot
drwxr-xr-x 23 root root 118784 Aug 1 21:32 dev
drwxr-xr-x 3 root root 4096 Jun 29 16:58 downloads
-rw-r--r-- 1 root root 4841 May 23 19:18 error_log
drwx--x--x 83 root root 8192 Aug 2 11:43 etc



I'm wondering why /etc was set to 711... and my question is - can I change /etc back to 755 without fuxoring something else up?
I just want to make sure.

[chirpy]

/etc should be fine at either 711 or 755, obviously the former is more secure.

[ryno267]

roger that... ty