On Tue, Jan 12, 2021 at 01:17:34PM -0800, sckall...@yahoo.com wrote:
> > The message was created by something other than local submission, since it
> arrived via SMTP to 127.0.0.1.

> Here are the mail headers of the non-delivery email:
> -------------------------------
> 
> Return-Path: <>
> Received: from xxx ([unix socket])
>        by xxx (Cyrus 2.5.15-28-g7d1550bfa-Kolab-2.5.15.28-1.16.el7.kolab_16) 
> with LMTPA;
>        Tue, 12 Jan 2021 20:50:11 +0000
> X-Sieve: CMU Sieve 2.4
> Received: by xxx (Postfix)
>       id E78E48DFA4; Tue, 12 Jan 2021 20:50:11 +0000 (UTC)

Bounce received on the 12th of January.

> Here is what is in Undelivered Message Headers.txt
> 
> Return-Path: <xxx>
> X-Virus-Scanned: amavisd-new at xxx
> DKIM-Filter: OpenDKIM Filter v2.11.0 xxx 571528DFA2
> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=xxx;
>       s=202xxx4; t=1610xxx9;
>       bh=D1Mnjy211JSi+7Gw2IHLfCuXjOXR1Ecwt0pY0n1yzig=;
>       h=From:To:References:In-Reply-To:Subject:Date:From;
>       b=...
> DKIM-Filter: OpenDKIM Filter v2.11.0 xxx 9AE9C281
> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=xxx;
>  s=2020xxxx; t=16099xxxxx;
>  bh=D1Mnjy211JSi+7Gw2IHLfCuXjOXR1Ecwt0pY0n1yzig=;
>  h=From:To:References:In-Reply-To:Subject:Date:From;
>  b=...
> From: <xxx>
> To: "'yyy zzz'" <x...@icloud.com>
> References: <94e5482b-a317-42c6-bfda-6ac286ad3...@icloud.com>
> In-Reply-To: <94e5482b-a317-42c6-bfda-6ac286ad3...@icloud.com>
> Subject: RE: XXX
> Date: Wed, 6 Jan 2021 18:03:24 -0800
> Message-ID: <2f18001d6e499$48eeff40$daccfdc0$@xxx>
> MIME-Version: 1.0
> Content-Type: multipart/mixed;
>  boundary="----=_NextPart_000_2F181_01D6E456.3ACC8290"
> Content-Language: en-us
> Thread-Index: AQKkAI6o4zpXvsvRdcbl2BfmNJLnZKiBLOog

There are no "Received:" headers here, are you sure you've posted *all*
the headers?  All messages received by Postfix get a "Received" header
prepended.  Where are they?  However, we do see that the message went
through Amavis, so ypu should have logs for that... and ideally for how
it got into Amavis as well.

It appears to be a reply to a message from icloud, sent on Jan 6th, so
delayed by 6 days.  But that delay could well be a result of the
master.cf breakage.

What's in your logs for "2f18001d6e499$48eeff40$daccfdc0$@xxx"
on "Wed, 6 Jan 2021 18:03:24 -0800"?  (With "grep" and the
like escape the '$' characters your just search for '.' instead.

You seem to be double-signing messages, before and after Amavis
perhaps?  Once is likely enough.

-- 
    Viktor.

Reply via email to