Duplicate emails - same smtp id processed by different MS processes.

Tue Dec 7 17:24:30 GMT 2004

I'm stumped on this one . . .

[root at ww11 root]# rpm -q mailscanner
mailscanner-4.36.4-1
[root at ww11 root]# cat /etc/redhat-release
Red Hat Linux release 8.0 (Psyche)
[root at ww11 root]# rpm -q sendmail
sendmail-8.13.1-1.rhl9

The following is a sample of duplicate emails that have been popping up
intermittently -

Header of both duplicate emails (same for both):

(smtpauth08.mail.atl.earthlink.net [209.86.89.68])
        by ww11.co.jefferson.co.us (8.13.1/8.13.1) with ESMTP id
iB7F7nkC028885
        for <webmaster.list at co.jefferson.co.us>; Tue, 7 Dec 2004
08:07:49 -0700
Message-Id: <200412071507.iB7F7nkC028885 at ww11.co.jefferson.co.us>
Received: from [66.32.253.1] (helo=LFC)
        by smtpauth08.mail.atl.earthlink.net with asmtp (Exim 4.34)
        id 1CbgwO-0002Sz-1W
        for webmaster.list at co.jefferson.co.us; Tue, 07 Dec 2004 10:07:48
-0500
From: "User Name" <user at lfcplans.com>
To: <webmaster.list at co.jefferson.co.us>
Subject: broken link
Date: Tue, 7 Dec 2004 10:07:45 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_002D_01C4DC44.99BD66B0"
X-Mailer: Microsoft Office Outlook, Build 11.0.6353
Thread-Index: AcTcboFzaT/QCzA/QyiZU0c9Y6C1ig==
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-ELNK-Trace:
feb5d6ea45e01ec46a4deeea1b09fa1d9ef193a6bfc3dd4839521e14bdc0f52fceabc8245eb83f64a7ce0e8f8d31aa3f350badd9bab72f9c350badd9bab72f9c
X-Originating-IP: 66.32.253.1
X-JeffCo-MailScanner-Information: Please contact the Help Desk for more
information
X-JeffCo-MailScanner: Found to be clean
X-JeffCo-MailScanner-SpamCheck: not spam, SpamAssassin (score=1.75,
        required 4, BAYES_00 -0.05, HTML_90_100 0.02, HTML_MESSAGE
0.00,
        MSGID_FROM_MTA_HEADER 0.05, MSGID_FROM_MTA_ID 1.72)
X-JeffCo-MailScanner-SpamScore:  1.75
X-MailScanner-From: user at lfcplans.com

This is a multi-part message in MIME format.

Entries in the maillog:

[root at ww11 root]# grep iB7F7nkC028885 /var/log/maillog*
/var/log/maillog:Dec  7 08:07:49 ww11 sendmail[28885]: iB7F7nkC028885:
from=<user at lfcplans.com>, size=7080, class=0, nrcpts=1,
msgid=<200412071507.iB7F7nkC028885 at ww11.co.jefferson.co.us>,
proto=ESMTP, daemon=MTA, relay=smtpauth08.mail.atl.earthlink.net
[209.86.89.68]
/var/log/maillog:Dec  7 08:07:53 ww11 MailScanner[26795]: Content
Checks: Detected and will disarm HTML message in iB7F7nkC028885
/var/log/maillog:Dec  7 08:07:54 ww11 MailScanner[26499]: Content
Checks: Detected and will disarm HTML message in iB7F7nkC028885
/var/log/maillog:Dec  7 08:07:54 ww11 sendmail[28974]: iB7F7nkC028885:
to=aaaaa,bbbb,cccc,dddd,eeee, delay=00:00:05, xdelay=00:00:01,
mailer=relay, pri=127080, relay=relay.co.jefferson.co.us. [172.16.8.29],
dsn=2.0.0, stat=Sent (Ok)
/var/log/maillog:Dec  7 08:07:54 ww11 sendmail[28982]: iB7F7nkC028885:
to=aaaaa,bbbb,cccc,dddd,eeee,  delay=00:00:05, xdelay=00:00:00,
mailer=relay, pri=127080, relay=relay.co.jefferson.co.us. [172.16.8.29],
dsn=2.0.0, stat=Sent (Ok)
[root at ww11 root]#

Notice the same smtp id is processed by 2 MailScanner processes? The
end result is 2 emails to the recipients.

Any ideas???

Jeff

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!