Dovecot keeps shutting down and restarting.

[Daniel Yi]

Hello,

I've been noticing a lot of dovecot shut downs lately. I've brought it to the attention of my hosting provider, but they're not being of much help. Would appreciate some guidance.

Nov 2 10:07:22 srvr dovecot: master: Warning: Killed with signal 15 (by pid=28444 uid=0 code=kill)

Then all of the current imap accounts logged in will shut down.

Nov 2 10:07:23 srvr dovecot: master: Dovecot v2.2.32 (dfbe293d4) starting up for lmtp, imap, pop3 (core dumps disabled)

I checked the downtime stats on the server and below is the current trend.

- month of August: down 1 time (total 9sec)
- month of September: down 5 times (total 50sec)
- month of October: down 22 times (total 8m 59s)
- month of November, only 7 days in: down 27 times (total 4m 41s)

You can obviously see that dovecot's downtime has been increasing. I've searched around exhaustively, but can't seem to find any leads.

I'm on CentOS 6.9 and cPanel 66.0.26. Running CSF + LFD.
Would greatly appreciate some help.

Thank you.

 

[cPanelMichael]

Hello,

Do you notice any output to /var/log/maillog around the time of the failures?

Thank you.

 

[Daniel Yi]

/var/log/mailog is where I'm seeing these.
Below are the other lines from around the time this happens.

Nov  7 13:57:29 srvr spamd[19787]: spamd: connection from ::1 [::1]:42354 to port 783, fd 5
Nov  7 13:57:29 srvr dovecot: pop3-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session=</rcW+2ldALt/AAAB>
Nov  7 13:57:29 srvr spamd[19778]: prefork: child states: II
Nov  7 13:57:29 srvr dovecot: lmtp(8985): Connect from local
Nov  7 13:57:29 srvr dovecot: lmtp(8985): Disconnect from local: Successful quit
Nov  7 13:57:29 srvr dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__jcsuq1jjmmgi8ulofn3xnengqmd5hqvvf1obj9snszqkew...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=8990, secured, session=<fykb+2ldAsl/AAAB>
    Nov  7 13:57:29 srvr dovecot: imap(__cpanel__service__auth__imap__jcsuq1jjmmgi8ulofn3xnengqmd5hqvvf1obj9snszqkeww3xmssatpyczj1hjzj): Logged out in=11, out=450, bytes=11/450
    Nov  7 13:57:38 srvr dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=172.56.35.198, lip=123.456.78.90, mpid=9052, TLS, session=<6Wqg+2ldGvOsOCPG>
    Nov  7 13:57:57 srvr dovecot: imap([email protected]): Connection closed (IDLE running for 0.001 + waiting input for 2476.432 secs, 2 B in + 10 B out, state=wait-input) in=822, out=2896, bytes=822/2896
    Nov  7 13:58:03 srvr dovecot: imap([email protected]): Logged out in=531, out=5756, bytes=531/5756
    Nov  7 13:58:18 srvr dovecot: imap([email protected]): Connection closed (IDLE finished 1219.439 secs ago) in=2911, out=25916, bytes=2911/25916
    Nov  7 13:58:21 srvr dovecot: imap([email protected]): Connection closed (IDLE running for 0.001 + waiting input for 2439.872 secs, 2 B in + 10 B out, state=wait-input) in=1169, out=39384, bytes=1169/39384
    Nov  7 13:59:30 srvr dovecot: imap([email protected]): Connection closed (IDLE running for 0.001 + waiting input for 2569.872 secs, 2 B in + 10 B out, state=wait-input) in=826, out=2926, bytes=826/2926
    Nov  7 13:59:41 srvr dovecot: master: Warning: Killed with signal 15 (by pid=9356 uid=0 code=kill)
    Nov  7 13:59:41 srvr dovecot: imap([email protected]): Server shutting down. in=11970, out=60217, bytes=11970/60217
    Nov  7 13:59:41 srvr dovecot: imap([email protected]): Server shutting down. in=995, out=19157, bytes=995/19157
    Nov  7 13:59:41 srvr dovecot: imap([email protected]): Server shutting down. in=47, out=763, bytes=47/763
    Nov  7 13:59:41 srvr dovecot: imap([email protected]): Server shutting down. in=302, out=1116, bytes=302/1116
    Nov  7 13:59:41 srvr dovecot: imap([email protected]): Server shutting down. in=20183463, out=86739, bytes=20183463/86739
    Nov  7 13:59:41 srvr dovecot: imap([email protected]): Server shutting down. in=10685, out=2685, bytes=10685/2685
    Nov  7 13:59:41 srvr dovecot: imap([email protected]): Server shutting down. in=24058, out=143948, bytes=24058/143948
    Nov  7 13:59:41 srvr dovecot: imap([email protected]): Server shutting down. in=47, out=814, bytes=47/814
    Nov  7 13:59:41 srvr dovecot: imap([email protected]): Server shutting down. in=36224, out=287666, bytes=36224/287666
    Nov  7 13:59:41 srvr dovecot: imap([email protected]): Server shutting down. in=3251, out=35009, bytes=3251/35009
    Nov  7 13:59:41 srvr dovecot: imap([email protected]): Server shutting down. in=34008, out=88991, bytes=34008/88991
    Nov  7 13:59:41 srvr dovecot: imap([email protected]): Server shutting down. in=217, out=2536, bytes=217/2536
    Nov  7 13:59:41 srvr dovecot: imap([email protected]): Server shutting down. in=7214, out=355051, bytes=7214/355051
    Nov  7 13:59:41 srvr dovecot: imap([email protected]): Server shutting down. in=394, out=4514, bytes=394/4514
    Nov  7 13:59:41 srvr dovecot: imap([email protected]): Server shutting down. in=30318, out=70089, bytes=30318/70089
    Nov  7 13:59:41 srvr dovecot: imap([email protected]): Server shutting down. in=3578, out=34662, bytes=3578/34662
    Nov  7 13:59:41 srvr dovecot: imap([email protected]): Server shutting down. in=312, out=6255, bytes=312/6255
    Nov  7 13:59:41 srvr dovecot: imap([email protected]): Server shutting down. in=447, out=7138, bytes=447/7138
    Nov  7 13:59:41 srvr dovecot: imap([email protected]): Server shutting down. in=3754, out=16840, bytes=3754/16840
    Nov  7 13:59:41 srvr dovecot: imap([email protected]): Server shutting down. in=7233, out=466645, bytes=7233/466645
    Nov  7 13:59:42 srvr dovecot: master: Dovecot v2.2.32 (dfbe293d4) starting up for lmtp, imap, pop3 (core dumps disabled)

 

[cPanelMichael]

Hello,

Could you open a support ticket using the link in my signature so we can access your system to take a closer look?

Thank you.