Re: [Sqlgrey-users] Frequent disconnect/reconnect issues

[Alex <mys...@gm...>]

Hi guys,

I'm still having database problems. Can someone tell me under what
circumstances the database would expect to see a value that doesn't
exist?

Aug 19 00:07:39 mail02 sqlgrey: dbaccess: warning: couldn't do
query:#012INSERT INTO from_awl (sender_name, sender_domain, src,
first_seen, last_seen)
VALUES('shimvebvl','uwerim.ru','91.121.21','2015-08-19
00:00:57',NOW()):#012, reconnecting to DB

And why this would cause a disconnect/reconnect to occur?

I've searched all three systems in the DB_Cluster, and none of them
have any of these values. Why would sqlgrey think it's there in the
first place?

This appears to be the original occurrence of that entry, just a few
minutes prior:

Aug 19 00:00:57 mail02 postfix/smtpd[24228]: NOQUEUE: reject: RCPT
from webboundaries.com[91.121.21.199]: 450 4.7.1
<lan...@ex...>: Recipient address rejected: Greylisted
for 5 minutes; from=<shi...@uw...>
to=<lan...@ex...> proto=ESMTP helo=<webboundaries.com>

It then failed open, where postfix accepted it and was spamassassin
marked it as spam.

Thanks,
Alex

On Tue, Aug 18, 2015 at 11:58 AM, Alex <mys...@gm...> wrote:
> Hi guys,
>
>> I'd expect sqlgrey to be configured to log to the
>> mail log, although I suppose yours could be different.
>> This will give you timestamps to use when looking through
>> the db log.
>
> I've figured out some new information on this problem.
>
> Aug 18 06:06:19 mail01 sqlgrey: warning: Use of uninitialized value
> $DBI::errstr in concatenation (.) or string at /usr/sbin/sqlgrey line
> 250.
> Aug 18 06:06:19 mail01 sqlgrey: dbaccess: warning: couldn't do
> query:#012INSERT INTO from_awl (sender_name, sender_domain, src,
> first_seen, last_seen)
> VALUES('return','nl2go.com','91.121.21','2015-08-18
> 05:59:38',NOW()):#012, reconnecting to DB
> Aug 18 06:06:19 mail01 sqlgrey: dbaccess: Using DBIx:DBCluster
> Aug 18 06:06:19 mail01 sqlgrey: dbaccess: Read_hosts: localhost,
> ns1.example.com, mail02.example.com, mail03.example.com,
> mail01.example.com
>
> Aug 17 01:43:40 mail02 sqlgrey: dbaccess: warning: couldn't do
> query:#012INSERT INTO from_awl (sender_name, sender_domain, src,
> first_seen, last_seen)
> VALUES('financeiro','teamplayy.com.br','91.121.21','2015-08-17
> 01:37:00',NOW()):#012, reconnecting to DB
> Aug 17 01:53:29 mail01 sqlgrey: dbaccess: warning: couldn't do
> query:#012INSERT INTO from_awl (sender_name, sender_domain, src,
> first_seen, last_seen)
> VALUES('shefdemwp','uwerim.ru','91.121.21','2015-08-17
> 01:46:49',NOW()):#012, reconnecting to DB
> Aug 17 05:57:58 mail02 sqlgrey: dbaccess: warning: couldn't do
> query:#012INSERT INTO from_awl (sender_name, sender_domain, src,
> first_seen, last_seen)
> VALUES('conor.burrell','businessandfinance.com','91.121.21','2015-08-17
> 05:51:17',NOW()):#012, reconnecting to DB
> Aug 17 09:43:48 mail01 sqlgrey: dbaccess: warning: couldn't do
> query:#012INSERT INTO from_awl (sender_name, sender_domain, src,
> first_seen, last_seen)
> VALUES('claudinei.moreira','alper.com.br','91.121.21','2015-08-17
> 09:37:12',NOW()):#012, reconnecting to DB
> Aug 17 10:26:43 mail01 sqlgrey: dbaccess: warning: couldn't do
> query:#012UPDATE domain_awl SET last_seen = NOW(), first_seen =
> first_seen WHERE sender_domain = NULL AND src = NULL:#012Can't connect
> to MySQL server on 'ns1.example.com' (111), reconnecting to DB
> Aug 17 12:44:38 mail01 sqlgrey: dbaccess: warning: couldn't do
> query:#012INSERT INTO from_awl (sender_name, sender_domain, src,
> first_seen, last_seen)
> VALUES('memberservices=example-marketplace.com__#-21wpwe5yvrgp4h','rlie15guji343ap6.mnrzh7tg8d0vr194.m8vlizz.8-amgceai.na28.bnc.salesforce.com','136.146.208','2015-08-17
> 12:39:23',NOW()):#012, reconnecting to DB
>
> Our server was changed to "example" in the above. It looks like maybe
> some records were corrupted? Multiple entries contain the 91.121.21
> address. Should I just truncate all the tables and let them rebuild
> themselves with new email data or perhaps there's a more precise fix?
>
> Thanks,
> Alex