When Postfix reports a table lookup problem together with “Can’t connect to local MySQL server through socket” (often naming /var/lib/mysql/mysql.sock or /var/run/mysqld/mysqld.sock), the most common cause is not a bad SQL query. It is that the Postfix process is running inside its /var/spool/postfix chroot and cannot see MySQL’s Unix socket. A second common trap is hosts = localhost: the Postfix mysql_table client interprets that as a Unix-socket connection. Use 127.0.0.1 to force TCP, expose the socket inside the chroot, or disable chrooting for the affected service. Test every map with postmap -q before restarting mail delivery.
Antihost offers Linux VPS plans with full root access, unlimited traffic on a 1 Gbps port and a 14-day free trial.
What the error actually means
Postfix does not normally query a mailbox or domain table by embedding SQL in main.cf. It uses a map definition, commonly a file such as /etc/postfix/mysql-virtual-mailbox-domains.cf, and the mysql_table client reads that file to connect to MySQL and run the configured query.
As an Amazon Associate I earn from qualifying purchases.
A mail log entry that combines a MySQL connection message with a fatal table lookup problem means the map could not complete its lookup. The failure can occur before SQL is executed: the process may be unable to reach the database socket, may be directed to the wrong transport, or may be using a database name that does not exist. A successful connection and an absent key are different problems, so test the map directly rather than diagnosing only from the delivery log.
One reported form of the message is:
Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (13)
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
The same underlying issue can appear with a socket under /var/run/mysqld/. The path in the error is important: it tells you that the client is attempting a Unix-socket connection, not a TCP connection.
Why a working MySQL socket is invisible to Postfix
Postfix chroot changes the filesystem view
Many Postfix daemons are configured to run chrooted below /var/spool/postfix. A chroot is an isolated filesystem view. A socket that exists on the host at /var/run/mysqld/mysqld.sock or /var/lib/mysql/mysql.sock is outside that view, so a chrooted lookup process cannot open it unless a corresponding path has been placed inside the jail.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
This explains a particularly confusing symptom: a map query succeeds when you run it from a normal shell, yet mail delivery still logs a MySQL connection failure. The shell test and the Postfix daemon are not necessarily seeing the same filesystem. If the shell can query the map but Postfix cannot, chroot isolation is the first explanation to check.
“Localhost” does not guarantee TCP
In the Postfix mysql_table client, setting hosts = localhost selects MySQL’s default Unix socket behavior. Prefixing the value with inet: does not reliably turn that particular name into the intended loopback TCP connection. To force a TCP connection to the same machine, use the numeric address 127.0.0.1.
That distinction matters because TCP and a Unix socket have separate paths, permissions and visibility. A socket can be inaccessible inside a chroot while TCP remains reachable, or MySQL can be listening on TCP while the socket is in a different directory than the map expects.
First, test the exact map Postfix is using
Do not change several settings at once. Identify the map referenced by the failing lookup, then query that map directly.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstall- Find the relevant
mysql:map reference in your Postfix configuration and note the complete.cffilename. - Choose a key that should exist in the table, such as a domain or mailbox value used by the lookup.
- Run a single-key query:
postmap -q <key> mysql:/etc/postfix/<file>.cf
The command prints the first matching value. If it prints a value, the map can connect and find that key from the environment in which you ran the command. If it prints nothing, the key may not exist, the query may select no row, or the map may still be failing; use verbose mode to distinguish those cases.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
postmap -v -q <key> mysql:/etc/postfix/<file>.cf
Verbose mode adds connection and query-attempt information. Record which host, database and socket the map is trying to use. Repeat the test for every MySQL map involved in delivery—domain, mailbox, alias or transport maps can each have a separate .cf file and a separate mistake.
Inspect every MySQL map file before choosing a fix
Check the host value
Open each affected .cf file and inspect its hosts setting. A value of localhost points the client toward the default Unix socket. A value of 127.0.0.1 requests a TCP connection to the local machine. An explicit Unix-socket form is also supported:
hosts = unix:/path/to/socket
Do not assume that changing one map fixes all lookups. If Postfix uses separate files for virtual domains and virtual mailboxes, update and test each file that is producing an error.
Free tools Windows power users keep installed
One-click scans. No signup required.
Verify the database name and table settings
A wrong database name in a file such as mysql-mailbox-domains.cf has been reported to produce symptoms similar to a connection failure. Compare the configured database name with the database that actually contains the lookup table. Also check the table and column names, query text, username and password for simple spelling or copy-and-paste errors.
Keep this check separate from the transport diagnosis. A map can reach MySQL successfully and still fail because it selects the wrong database or returns no matching row. Conversely, correcting a database name will not make a socket visible inside a chroot.
Fix 1: force a local TCP connection
For most installations, TCP is the least fragile way to avoid a socket that sits outside the Postfix jail. It changes the connection path without requiring a filesystem mount or link inside /var/spool/postfix.
Step 1: change the map host
In each failing MySQL map file, replace the localhost host value with:
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsRank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
hosts = 127.0.0.1
Leave the database name, query and credentials unchanged while testing this transport change. If a map contains more than one host, apply the same decision consistently and test the resulting failover behavior separately.
Step 2: make sure MySQL accepts loopback TCP
MySQL must be configured to listen on the loopback address. The relevant setting is:
bind-address = 127.0.0.1
After changing that setting, restart MySQL using the service procedure for your operating system. The setting limits listening to the local interface; it does not expose the database to other network hosts.
Step 3: check the MySQL account’s host permission
The MySQL account used by the map must be allowed to connect from 127.0.0.1. MySQL accounts can distinguish connection origin, so an account that works through a Unix socket is not automatically permitted over loopback TCP. Confirm that the account and its grant match the new connection method before blaming Postfix.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Step 4: retest before reloading Postfix
Run the same commands again:
postmap -q <key> mysql:/etc/postfix/<file>.cf
postmap -v -q <key> mysql:/etc/postfix/<file>.cf
A successful result confirms that the map can reach MySQL through the selected path from your test environment. Then apply your normal Postfix reload or restart procedure and watch the mail log for a new lookup attempt. If the shell test succeeds but the daemon still fails, check chroot settings rather than repeatedly editing SQL.
Fix 2: place the MySQL socket inside the Postfix chroot
Use this approach when you need Unix-socket transport or cannot change the database listener. The socket path supplied to the map must exist inside the chroot, not merely on the host filesystem.
Choose a path visible from the jail
If the host socket is /var/run/mysqld/mysqld.sock, the corresponding path inside the jail might be /var/spool/postfix/var/run/mysqld/mysqld.sock. The exact directory must be created and maintained in your system’s Postfix chroot layout; the example is a path relationship, not a universal directory requirement.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
Point the map at the in-jail socket with the explicit syntax:
hosts = unix:/var/run/mysqld/mysqld.sock
When the map runs chrooted, that path is resolved relative to the jail. Therefore, the socket must be present at the matching location under /var/spool/postfix.
Make the socket available reliably
A hard link or bind mount can make the host socket available inside the chroot. These mechanisms have different ownership and lifecycle implications, and a socket may need to be recreated when MySQL restarts. Treat the in-jail path as part of your service configuration, not as a one-time manual copy: copying a socket file does not create a usable live endpoint.
After MySQL restarts, verify that the in-jail path still points to the active socket and that the Postfix process can access it. If the link or mount disappears, the same connection error will return even though MySQL itself is healthy.
Test the socket path directly through the map
Run the verbose postmap query after the socket is in place. If it fails, compare the path in the map with the path actually present inside the jail. Also verify filesystem permissions for the process performing the lookup. A host-level ls of the socket is not sufficient evidence if the daemon is chrooted.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Fix 3: disable chrooting for the affected Postfix service
The simplest operational fix is to stop chrooting the service that performs the MySQL lookup. In master.cf, find the relevant service entry and change its chroot column to n. This changes the filesystem view for that service, allowing it to use the host’s normal MySQL socket path.
Apply this narrowly. Do not change every service merely because one map cannot connect. Identify the service that is failing, alter only that entry, then use your normal Postfix reload or restart procedure. Re-run the map test and generate a controlled lookup so you can confirm that the change affected the intended daemon.
Disabling chroot trades isolation for simplicity. If your deployment relies on chroot as a security boundary, prefer the TCP method or an explicitly maintained in-jail socket instead of removing the boundary without review.
Choosing between TCP, an in-jail socket and no chroot
| Option | Configuration change | Scope | Maintenance after MySQL restarts | Security and exposure consideration |
|---|---|---|---|---|
| Loopback TCP | hosts = 127.0.0.1; MySQL listens on 127.0.0.1 |
Each affected .cf map plus MySQL listener and account permission |
No socket link inside the jail to recreate | Uses a listening TCP endpoint; keep it bound to loopback and permit the map account from 127.0.0.1 |
| Unix socket inside chroot | hosts = unix:/path/to/socket and a matching socket path under /var/spool/postfix |
Map file plus chroot filesystem setup | Hard link or bind mount may need to be recreated when MySQL restarts | Retains socket-based access, but depends on correct path and filesystem permissions |
| Disable chroot for the affected service | Set that service’s master.cf chroot column to n |
The selected Postfix service | No in-jail socket maintenance | Removes chroot isolation for that service, so review the security trade-off |
Choose the smallest change that matches your operating requirements. TCP is usually easiest to operate when loopback listening and grants are acceptable. An in-jail socket avoids TCP but adds lifecycle work. Disabling chroot is direct, but it changes the isolation model for the service rather than only the map.
Recommended Free Tools
A diagnosis sequence that avoids guesswork
- Capture the complete error. Note whether it names
/var/lib/mysql/mysql.sock,/var/run/mysqld/mysqld.sockor another path, and whether a table lookup problem appears in the same event. - Identify the exact map. Use the map reference associated with the failing domain, mailbox, alias or transport lookup. Do not test a different
.cffile and assume it represents all maps. - Run a normal query. Use
postmap -qwith a key that should exist. - Run the verbose query. Use
postmap -v -qto see the connection and query attempt and to distinguish an empty result from a connection failure. - Inspect
hosts. Treatlocalhostas a socket request. Decide deliberately between127.0.0.1and an explicitunix:path. - Compare the filesystem views. If the shell query works but Postfix fails, inspect the service’s chroot setting and the socket’s presence under
/var/spool/postfix. - Validate MySQL-side prerequisites. For TCP, confirm
bind-address = 127.0.0.1and permission for the map account from127.0.0.1. For a socket, confirm the in-jail path and permissions. - Check the database name. A wrong database in a map file can mimic a connection-related failure. Verify it independently of the transport choice.
- Change one layer at a time. Alter the host transport, socket placement or chroot setting—not all three—then repeat the same map query.
- Reload only after the map works. A successful direct lookup gives you a known-good baseline before you test a real delivery.
What each test result tells you
The direct query returns the expected value
The map can connect and find the selected key from the shell environment. If Postfix still logs a connection error, focus on the daemon’s chroot status, the service entry in master.cf and whether the failing service uses a different map file.
The query fails and the map uses localhost
Change the host to 127.0.0.1 and verify MySQL’s loopback listener and account permission, or deliberately provide a socket path that exists inside the chroot. Do not keep changing SQL until the transport test succeeds.
The query fails with 127.0.0.1
Check that MySQL is listening on loopback, that the account is allowed from that address and that the configured database name is correct. A TCP setting in the map cannot help if MySQL is not accepting TCP connections on that address.
The query connects but prints no value
This is no longer primarily a socket problem. Verify that the key exists, that the query selects the intended table and columns, and that the database name in the map is correct. A successful connection can still produce an empty lookup result.
The socket works until MySQL restarts
An in-chroot hard link or bind mount may not have been recreated after the database service restarted. Check the in-jail path after every MySQL restart and make the mount or link part of the host’s service startup process if you keep this design.
Safe configuration checklist
- Every failing
mysql:reference points to the map file you actually tested. - The map’s
hostsvalue intentionally selects TCP or a Unix socket;localhostis not being used accidentally. - For TCP, MySQL listens on
127.0.0.1and the map account is permitted from that address. - For a socket, the explicit
unix:path resolves inside the Postfix chroot and remains available after a MySQL restart. - The database name, table names, columns and query correspond to the intended schema.
postmap -qreturns an expected value, andpostmap -v -qconfirms the intended connection path.- If chroot is disabled, only the affected service’s
master.cfentry was changed and the isolation trade-off was reviewed. - Postfix is reloaded or restarted only after the direct map test succeeds.
Bottom line
Start with the socket path and the map’s hosts setting. Postfix most often cannot connect because a chrooted daemon cannot see MySQL’s host-level Unix socket, or because localhost silently selects that socket. Force 127.0.0.1 and configure MySQL for loopback TCP, expose a maintained socket inside /var/spool/postfix, or disable chroot only for the affected service. The decisive check is a successful postmap -q against the exact map before you attempt another delivery.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
