speaking of my antivirus/antispam proxy, i recently (today) learned that occasionally my customers are getting hit with a 'multiple outbound mail' problem.

i gateway customer outbound mail through the AV/AS proxy. customer reported this morning that he sent an approximately 5 megabyte message out to a couple of dozen associates. he's been getting complaints now that some have received the message six, seven, eight times over. i checked the queue on the pop/imap/webmail server, and there was his message. the logs have dozens of the error message, as the server keeps trying to send the message which it apparently thinks didn't go through.

deferral: Connected_to_64.42.88.20_but_connection_died._Possible_duplicate!_(#4.4.2)/

i'd seen those errors before occasionally but had never given them a whole lot of thought, as i never got any complaints from customers - and i never experienced the multiple copy issue myself.

i'm a bit flummoxed, and not sure where to go from here. i've temporarily directed mail outbound directly from the pop/imap/webmail server, bypassing the AV/AS proxy, but i don't want to leave it like that indefinitely. but i'm also not sure where to look to debug. obviously, just the right circumstances would have to obtain for it to happen again, which could potentially mean leaving the qmail-scanner logging on indefinitely, which i don't relish.

anyone else experienced this? i'm *guessing* this is an interaction with qmail-scanner, but i'm not saying that it *is* a problem with qmail-scanner - it could be a problem with spamassassin or clamav. i do note that even now, in /var/spool/qmailscan/working/new, that customer's message is still there -

-rw-------  2 qscand  qscand  5697781 Jun 23 22:20 pravda111959043368965799
-rw-------  2 qscand  qscand  5697781 Jun 23 22:20 pravda111959043368965801
-rw-------  2 qscand  qscand  5697781 Jun 23 22:20 pravda111959043368965802
-rw-------  2 qscand  qscand  5697781 Jun 23 22:20 pravda111959043368965805
-rw-------  2 qscand  qscand  5697781 Jun 23 22:20 pravda111959043368965806
-rw-------  2 qscand  qscand  5697781 Jun 23 22:20 pravda111959043368965807

curious, to say the least. oh - i 'touched' the customers message in the queue pop/imap/webmail server's queue so that it would 'age out' right away, and stop the repeating deliveries.

thoughts?

Paul Theodoropoulos
http://www.anastrophe.com
http://www.smileglobal.com




-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to