FR: Insight for rising number of deferred mails
Following up on the happenings described in #318 (closed) the Office 365 servers started to defer a quite high percentage of mails from the affected IP saying 451 4.7.500 Server busy..
It would be cool to have an insight that can detect a rising number of deferred mails. I had quite a few K of those server busy messages in the logs.
Nov 24 09:13:39 mailout01 postfix/smtpd[8454]: 114D4800C4: client=example.com[1.2.3.4]
Nov 24 09:13:39 mailout01 postfix/cleanup[8459]: 114D4800C4: message-id=<47110815-message-id@example.com>
Nov 24 09:13:39 mailout01 postfix/qmgr[3354]: 114D4800C4: from=<from@example.com>, size=12459, nrcpt=1 (queue active)
Nov 24 09:13:39 mailout01 postfix/smtp[8504]: 114D4800C4: host some-company-de.mail.protection.outlook.com[104.47.11.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [FR2DEU01FT008.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command)
Nov 24 09:13:39 mailout01 postfix/smtp[8504]: 114D4800C4: to=<to@some-company.de>, relay=some-company-de.mail.protection.outlook.com[104.47.7.138]:25, delay=0.55, delays=0.01/0.01/0.33/0.19, dsn=4.7.500, status=deferred (host some-company-de.mail.protection.outlook.com[104.47.7.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [BE0DEU01FT008.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command))
Nov 24 09:19:42 mailout01 postfix/qmgr[3354]: 114D4800C4: from=<from@example.com>, size=12459, nrcpt=1 (queue active)
Nov 24 09:19:42 mailout01 postfix/smtp[8533]: 114D4800C4: host some-company-de.mail.protection.outlook.com[104.47.11.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [FR2DEU01FT023.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command)
Nov 24 09:19:43 mailout01 postfix/smtp[8533]: 114D4800C4: to=<to@some-company.de>, relay=some-company-de.mail.protection.outlook.com[104.47.7.138]:25, delay=364, delays=364/0/0.3/0.17, dsn=4.7.500, status=deferred (host some-company-de.mail.protection.outlook.com[104.47.7.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [BE0DEU01FT013.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command))
Nov 24 09:29:42 mailout01 postfix/qmgr[3354]: 114D4800C4: from=<from@example.com>, size=12459, nrcpt=1 (queue active)
Nov 24 09:29:43 mailout01 postfix/smtp[8592]: 114D4800C4: host some-company-de.mail.protection.outlook.com[104.47.7.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [BE0DEU01FT008.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command)
Nov 24 09:29:43 mailout01 postfix/smtp[8592]: 114D4800C4: to=<to@some-company.de>, relay=some-company-de.mail.protection.outlook.com[104.47.11.138]:25, delay=964, delays=964/0.03/0.42/0.11, dsn=4.7.500, status=deferred (host some-company-de.mail.protection.outlook.com[104.47.11.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [FR2DEU01FT026.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command))
Nov 24 09:49:42 mailout01 postfix/qmgr[3354]: 114D4800C4: from=<from@example.com>, size=12459, nrcpt=1 (queue active)
Nov 24 09:49:42 mailout01 postfix/smtp[8755]: 114D4800C4: host some-company-de.mail.protection.outlook.com[104.47.7.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [BE0DEU01FT017.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command)
Nov 24 09:49:42 mailout01 postfix/smtp[8755]: 114D4800C4: to=<to@some-company.de>, relay=some-company-de.mail.protection.outlook.com[104.47.11.138]:25, delay=2164, delays=2163/0.03/0.49/0.16, dsn=4.7.500, status=deferred (host some-company-de.mail.protection.outlook.com[104.47.11.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [FR2DEU01FT011.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command))
Nov 24 10:29:42 mailout01 postfix/qmgr[3354]: 114D4800C4: from=<from@example.com>, size=12459, nrcpt=1 (queue active)
Nov 24 10:29:42 mailout01 postfix/smtp[9110]: 114D4800C4: host some-company-de.mail.protection.outlook.com[104.47.7.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [BE0DEU01FT012.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command)
Nov 24 10:29:43 mailout01 postfix/smtp[9110]: 114D4800C4: to=<to@some-company.de>, relay=some-company-de.mail.protection.outlook.com[104.47.11.138]:25, delay=4564, delays=4563/0.1/0.71/0.14, dsn=4.7.500, status=deferred (host some-company-de.mail.protection.outlook.com[104.47.11.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [FR2DEU01FT014.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command))
Nov 24 10:29:43 mailout01 postfix/bounce[9088]: 114D4800C4: sender delay notification: 04C658015E
Nov 24 11:39:42 mailout01 postfix/qmgr[3354]: 114D4800C4: from=<from@example.com>, size=12459, nrcpt=1 (queue active)
Nov 24 11:39:43 mailout01 postfix/smtp[9724]: 114D4800C4: host some-company-de.mail.protection.outlook.com[104.47.11.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [FR2DEU01FT020.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command)
Nov 24 11:39:43 mailout01 postfix/smtp[9724]: 114D4800C4: to=<to@some-company.de>, relay=some-company-de.mail.protection.outlook.com[104.47.7.138]:25, delay=8764, delays=8764/0.08/0.5/0.16, dsn=4.7.500, status=deferred (host some-company-de.mail.protection.outlook.com[104.47.7.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [BE0DEU01FT024.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command))
Nov 24 12:49:42 mailout01 postfix/qmgr[3354]: 114D4800C4: from=<from@example.com>, size=12459, nrcpt=1 (queue active)
Nov 24 12:49:42 mailout01 postfix/smtp[10318]: 114D4800C4: host some-company-de.mail.protection.outlook.com[104.47.11.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [FR2DEU01FT009.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command)
Nov 24 12:49:42 mailout01 postfix/smtp[10318]: 114D4800C4: to=<to@some-company.de>, relay=some-company-de.mail.protection.outlook.com[104.47.7.138]:25, delay=12964, delays=12963/0.17/0.3/0.2, dsn=4.7.500, status=deferred (host some-company-de.mail.protection.outlook.com[104.47.7.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [BE0DEU01FT023.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command))
Nov 24 14:00:14 mailout01 postfix/qmgr[10447]: 114D4800C4: from=<from@example.com>, size=12459, nrcpt=1 (queue active)
Nov 24 14:00:15 mailout01 postfix/smtp[10829]: 114D4800C4: host some-company-de.mail.protection.outlook.com[104.47.7.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [BE0DEU01FT015.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command)
Nov 24 14:00:15 mailout01 postfix/smtp[10829]: 114D4800C4: to=<to@some-company.de>, relay=some-company-de.mail.protection.outlook.com[104.47.11.138]:25, delay=17196, delays=17196/0.16/0.34/0.13, dsn=4.7.500, status=deferred (host some-company-de.mail.protection.outlook.com[104.47.11.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [FR2DEU01FT020.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command))
Nov 24 15:12:40 mailout01 postfix/qmgr[10941]: 114D4800C4: from=<from@example.com>, size=12459, nrcpt=1 (queue active)
Nov 24 15:12:40 mailout01 postfix/smtp[11430]: 114D4800C4: host some-company-de.mail.protection.outlook.com[104.47.7.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [BE0DEU01FT012.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command)
Nov 24 15:12:41 mailout01 postfix/smtp[11430]: 114D4800C4: to=<to@some-company.de>, relay=some-company-de.mail.protection.outlook.com[104.47.11.138]:25, delay=21542, delays=21541/0.2/0.46/0.12, dsn=4.7.500, status=deferred (host some-company-de.mail.protection.outlook.com[104.47.11.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [FR2DEU01FT011.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command))
Nov 24 16:42:41 mailout01 postfix/qmgr[10941]: 114D4800C4: from=<from@example.com>, size=12459, nrcpt=1 (queue active)
Nov 24 16:42:41 mailout01 postfix/smtp[12081]: 114D4800C4: host some-company-de.mail.protection.outlook.com[104.47.7.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [BE0DEU01FT022.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command)
Nov 24 16:42:42 mailout01 postfix/smtp[12081]: 114D4800C4: to=<to@some-company.de>, relay=some-company-de.mail.protection.outlook.com[104.47.11.138]:25, delay=26943, delays=26942/0.21/0.46/0.16, dsn=4.7.500, status=deferred (host some-company-de.mail.protection.outlook.com[104.47.11.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [FR2DEU01FT014.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command))
Nov 24 18:12:41 mailout01 postfix/qmgr[10941]: 114D4800C4: from=<from@example.com>, size=12459, nrcpt=1 (queue active)
Nov 24 18:12:42 mailout01 postfix/smtp[12708]: 114D4800C4: host some-company-de.mail.protection.outlook.com[104.47.11.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [FR2DEU01FT007.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command)
Nov 24 18:12:42 mailout01 postfix/smtp[12708]: 114D4800C4: to=<to@some-company.de>, relay=some-company-de.mail.protection.outlook.com[104.47.7.138]:25, delay=32343, delays=32342/0.25/0.37/0.18, dsn=4.7.500, status=deferred (host some-company-de.mail.protection.outlook.com[104.47.7.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [BE0DEU01FT021.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command))
Nov 24 19:42:41 mailout01 postfix/qmgr[10941]: 114D4800C4: from=<from@example.com>, size=12459, nrcpt=1 (queue active)
Nov 24 19:42:41 mailout01 postfix/smtp[13238]: 114D4800C4: host some-company-de.mail.protection.outlook.com[104.47.11.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [FR2DEU01FT023.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command)
Nov 24 19:42:42 mailout01 postfix/smtp[13238]: 114D4800C4: to=<to@some-company.de>, relay=some-company-de.mail.protection.outlook.com[104.47.7.138]:25, delay=37743, delays=37742/0.22/0.39/0.29, dsn=4.7.500, status=deferred (host some-company-de.mail.protection.outlook.com[104.47.7.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [BE0DEU01FT020.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command))
Nov 24 21:12:41 mailout01 postfix/qmgr[10941]: 114D4800C4: from=<from@example.com>, size=12459, nrcpt=1 (queue active)
Nov 24 21:12:42 mailout01 postfix/smtp[13722]: 114D4800C4: host some-company-de.mail.protection.outlook.com[104.47.11.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [FR2DEU01FT013.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command)
Nov 24 21:12:42 mailout01 postfix/smtp[13722]: 114D4800C4: to=<to@some-company.de>, relay=some-company-de.mail.protection.outlook.com[104.47.7.138]:25, delay=43144, delays=43143/0.12/0.6/0.18, dsn=4.7.500, status=deferred (host some-company-de.mail.protection.outlook.com[104.47.7.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [BE0DEU01FT004.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command))
Nov 24 22:42:41 mailout01 postfix/qmgr[10941]: 114D4800C4: from=<from@example.com>, size=12459, nrcpt=1 (queue active)
Nov 24 22:42:41 mailout01 postfix/smtp[14250]: 114D4800C4: host some-company-de.mail.protection.outlook.com[104.47.7.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [BE0DEU01FT023.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command)
Nov 24 22:42:41 mailout01 postfix/smtp[14250]: 114D4800C4: to=<to@some-company.de>, relay=some-company-de.mail.protection.outlook.com[104.47.11.138]:25, delay=48543, delays=48542/0.15/0.4/0.14, dsn=4.7.500, status=deferred (host some-company-de.mail.protection.outlook.com[104.47.11.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [FR2DEU01FT017.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command))
Nov 25 00:12:41 mailout01 postfix/qmgr[10941]: 114D4800C4: from=<from@example.com>, size=12459, nrcpt=1 (queue active)
Nov 25 00:12:42 mailout01 postfix/smtp[14781]: 114D4800C4: host some-company-de.mail.protection.outlook.com[104.47.11.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [FR2DEU01FT010.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command)
Nov 25 00:12:42 mailout01 postfix/smtp[14781]: 114D4800C4: to=<to@some-company.de>, relay=some-company-de.mail.protection.outlook.com[104.47.7.138]:25, delay=53943, delays=53943/0.1/0.41/0.23, dsn=4.7.500, status=deferred (host some-company-de.mail.protection.outlook.com[104.47.7.138] said: 451 4.7.500 Server busy. Please try again later from [134.119.1.64]. (S77719) [BE0DEU01FT017.eop-deu01.prod.protection.outlook.com] (in reply to end of DATA command))
Nov 25 01:42:41 mailout01 postfix/qmgr[10941]: 114D4800C4: from=<from@example.com>, size=12459, nrcpt=1 (queue active)
Nov 25 01:42:42 mailout01 postfix/smtp[15319]: 114D4800C4: to=<to@some-company.de>, relay=some-company-de.mail.protection.outlook.com[104.47.7.138]:25, delay=59343, delays=59342/0.11/0.26/0.42, dsn=2.6.0, status=sent (250 2.6.0 <B41FFBCCB895EF4480130C3E15FF9016740AEA55@SRV-SBS.rst-wire.local> [InternalId=45539538241453, Hostname=FRYP281MB0159.DEUP281.PROD.OUTLOOK.COM] 19764 bytes in 0.064, 298.414 KB/sec Queued mail for delivery)
Nov 25 01:42:42 mailout01 postfix/qmgr[10941]: 114D4800C4: removed