On 10/13/2010 09:43 PM, Alberto Lepe wrote:
On Thu, Oct 14, 2010 at 10:33 AM, Matt Hayes <domin...@slackadelic.com <mailto:domin...@slackadelic.com>> wrote:On 10/11/2010 10:26 PM, Alberto Lepe wrote: Hello, I need some advice with a problem (I believe is an easy question but I couldn't find an answer): My server logs is "normally" reporting twice almost every time someone is sending an email: ./mail.log.0:Oct 11 08:58:23 mail postfix/qmgr[5276]: CCC3C1C015: from=<nak...@example.co.jp <mailto:nak...@example.co.jp> <mailto:nak...@example.co.jp <mailto:nak...@example.co.jp>>>, size=127578, nrcpt=1 (queue active) ./mail.log.0:Oct 11 08:58:36 mail postfix/qmgr[5276]: E88691CCFF: from=<nak...@example.co.jp <mailto:nak...@example.co.jp> <mailto:nak...@example.co.jp <mailto:nak...@example.co.jp>>>, size=128101, nrcpt=1 (queue active) Looking more in detail those 2 ids: /var/log/mail.log.0:Oct 11 08:58:19 mail postfix/smtpd[3333]: CCC3C1C015: client=p2147-ipad21xsajima.ne.jp <http://p2147-ipad21xsajima.ne.jp> <http://p2147-ipad21xsajima.ne.jp>[20.0.0.147] /var/log/mail.log.0:Oct 11 08:58:19 mail postfix/cleanup[2680]: CCC3C1C015: message-id=<00ec01cb68d6$d7e41450$18011...@nakata> /var/log/mail.log.0:Oct 11 08:58:23 mail postfix/qmgr[5276]: CCC3C1C015: from=<nak...@example.co.jp <mailto:nak...@example.co.jp> <mailto:nak...@example.co.jp <mailto:nak...@example.co.jp>>>, size=127578, nrcpt=1 (queue active) /var/log/mail.log.0:Oct 11 08:58:36 mail postfix/smtp[2746]: CCC3C1C015: to=<hin...@example.co.jp <mailto:hin...@example.co.jp> <mailto:hin...@example.co.jp <mailto:hin...@example.co.jp>>>, relay=127.0.0.1[127.0.0.1]:10024, delay=17, delays=3.2/0/0/14, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as E88691CCFF) /var/log/mail.log.0:Oct 11 08:58:36 mail postfix/qmgr[5276]: CCC3C1C015: removed /var/log/mail.log.0:Oct 11 08:58:36 mail postfix/smtpd[3349]: E88691CCFF: client=localhost[127.0.0.1] /var/log/mail.log.0:Oct 11 08:58:36 mail postfix/cleanup[3350]: E88691CCFF: message-id=<00ec01cb68d6$d7e41450$18011...@nakata> /var/log/mail.log.0:Oct 11 08:58:36 mail postfix/qmgr[5276]: E88691CCFF: from=<nak...@example.co.jp <mailto:nak...@example.co.jp> <mailto:nak...@example.co.jp <mailto:nak...@example.co.jp>>>, size=128101, nrcpt=1 (queue active) /var/log/mail.log.0:Oct 11 08:58:36 mail amavis[32232]: (32232-18) Passed SPAM, [20.0.0.147] [20.0.0.147] <nak...@example.co.jp <mailto:nak...@example.co.jp> <mailto:nak...@example.co.jp <mailto:nak...@example.co.jp>>> -> <hin...@example.co.jp <mailto:hin...@example.co.jp> <mailto:hin...@example.co.jp <mailto:hin...@example.co.jp>>>, quarantine: 6/spam-6qyX68lC4hKy.gz, Message-ID: <00ec01cb68d6$d7e41450$18011...@nakata>, mail_id: 6qyX68lC4hKy, Hits: 8.687, size: 127578, queued_as: E88691CCFF, 13947 ms /var/log/mail.log.0:Oct 11 08:58:36 mail postfix/smtp[2746]: CCC3C1C015: to=<hin...@example.co.jp <mailto:hin...@example.co.jp> <mailto:hin...@example.co.jp <mailto:hin...@example.co.jp>>>, relay=127.0.0.1[127.0.0.1]:10024, delay=17, delays=3.2/0/0/14, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as E88691CCFF) /var/log/mail.log.0:Oct 11 08:58:36 mail postfix/local[3971]: E88691CCFF: to=<hin...@mail.mailserver.jp <mailto:hin...@mail.mailserver.jp> <mailto:hin...@mail.mailserver.jp <mailto:hin...@mail.mailserver.jp>>>, orig_to=<hin...@example.co.jp <mailto:hin...@example.co.jp> <mailto:hin...@example.co.jp <mailto:hin...@example.co.jp>>>, relay=local, delay=0.03, delays=0.01/0/0/0.02, dsn=2.0.0, status=sent (delivered to maildir) /var/log/mail.log.0:Oct 11 08:58:36 mail postfix/qmgr[5276]: E88691CCFF: removed It seems to me that "CCC3C1C015" mail was delivered to "hin...@example.co.jp <mailto:hin...@example.co.jp> <mailto:hin...@example.co.jp <mailto:hin...@example.co.jp>>" and "E88691CCFF" was delivered to quarantine and that is why is logged twice. Is that right? One of the users (nakata) is reporting that everytime he/she sends an email to anyone (for example, hinsyo), they get several copies of the same mail at once. The spam-assassin filter is still on testing period so some messages are marked as SPAM only but are not blocked. Could that be the reason of duplicated emails? Thank you in advance. It appears you are using amavisd-new as a content_filter? -Matt Yes Matt. I'm using amavisd-new in port 10024.
Doesn't appear to be duplicate emails.. appears to me that amavisd-new is re-injecting email into postfix and it just 'looks' duplicate.. unless my eyes are failing me...
-Matt
