Duplicate emails - same smtp id processed by different MS processes.

Julian Field mailscanner at ecs.soton.ac.uk
Tue Dec 7 17:34:51 GMT 2004


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

With sendmail-8.13 on Linux systems, you need to set "Lock Type = posix"
in MailScanner.conf.

Jeff Falgout wrote:

>I'm stumped on this one . . .
>
>[root at ww11 root]# rpm -q mailscanner
>mailscanner-4.36.4-1
>[root at ww11 root]# cat /etc/redhat-release
>Red Hat Linux release 8.0 (Psyche)
>[root at ww11 root]# rpm -q sendmail
>sendmail-8.13.1-1.rhl9
>
>
>The following is a sample of duplicate emails that have been popping up
>intermittently -
>
>Header of both duplicate emails (same for both):
>
>Return-path: <user at lfcplans.com>
>Received: from ww11.co.jefferson.co.us [172.18.2.30]
>        by relay.co.jefferson.co.us; Tue, 07 Dec 2004 08:07:54 -0700
>Received: from smtpauth08.mail.atl.earthlink.net
>(smtpauth08.mail.atl.earthlink.net [209.86.89.68])
>        by ww11.co.jefferson.co.us (8.13.1/8.13.1) with ESMTP id
>iB7F7nkC028885
>        for <webmaster.list at co.jefferson.co.us>; Tue, 7 Dec 2004
>08:07:49 -0700
>Message-Id: <200412071507.iB7F7nkC028885 at ww11.co.jefferson.co.us>
>Received: from [66.32.253.1] (helo=LFC)
>        by smtpauth08.mail.atl.earthlink.net with asmtp (Exim 4.34)
>        id 1CbgwO-0002Sz-1W
>        for webmaster.list at co.jefferson.co.us; Tue, 07 Dec 2004 10:07:48
>-0500
>From: "User Name" <user at lfcplans.com>
>To: <webmaster.list at co.jefferson.co.us>
>Subject: broken link
>Date: Tue, 7 Dec 2004 10:07:45 -0500
>MIME-Version: 1.0
>Content-Type: multipart/alternative;
>        boundary="----=_NextPart_000_002D_01C4DC44.99BD66B0"
>X-Mailer: Microsoft Office Outlook, Build 11.0.6353
>Thread-Index: AcTcboFzaT/QCzA/QyiZU0c9Y6C1ig==
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>X-ELNK-Trace:
>feb5d6ea45e01ec46a4deeea1b09fa1d9ef193a6bfc3dd4839521e14bdc0f52fceabc8245eb83f64a7ce0e8f8d31aa3f350badd9bab72f9c350badd9bab72f9c
>X-Originating-IP: 66.32.253.1
>X-JeffCo-MailScanner-Information: Please contact the Help Desk for more
>information
>X-JeffCo-MailScanner: Found to be clean
>X-JeffCo-MailScanner-SpamCheck: not spam, SpamAssassin (score=1.75,
>        required 4, BAYES_00 -0.05, HTML_90_100 0.02, HTML_MESSAGE
>0.00,
>        MSGID_FROM_MTA_HEADER 0.05, MSGID_FROM_MTA_ID 1.72)
>X-JeffCo-MailScanner-SpamScore:  1.75
>X-MailScanner-From: user at lfcplans.com
>
>This is a multi-part message in MIME format.
>
>
>
>Entries in the maillog:
>
>[root at ww11 root]# grep iB7F7nkC028885 /var/log/maillog*
>/var/log/maillog:Dec  7 08:07:49 ww11 sendmail[28885]: iB7F7nkC028885:
>from=<user at lfcplans.com>, size=7080, class=0, nrcpts=1,
>msgid=<200412071507.iB7F7nkC028885 at ww11.co.jefferson.co.us>,
>proto=ESMTP, daemon=MTA, relay=smtpauth08.mail.atl.earthlink.net
>[209.86.89.68]
>/var/log/maillog:Dec  7 08:07:53 ww11 MailScanner[26795]: Content
>Checks: Detected and will disarm HTML message in iB7F7nkC028885
>/var/log/maillog:Dec  7 08:07:54 ww11 MailScanner[26499]: Content
>Checks: Detected and will disarm HTML message in iB7F7nkC028885
>/var/log/maillog:Dec  7 08:07:54 ww11 sendmail[28974]: iB7F7nkC028885:
>to=aaaaa,bbbb,cccc,dddd,eeee, delay=00:00:05, xdelay=00:00:01,
>mailer=relay, pri=127080, relay=relay.co.jefferson.co.us. [172.16.8.29],
>dsn=2.0.0, stat=Sent (Ok)
>/var/log/maillog:Dec  7 08:07:54 ww11 sendmail[28982]: iB7F7nkC028885:
>to=aaaaa,bbbb,cccc,dddd,eeee,  delay=00:00:05, xdelay=00:00:00,
>mailer=relay, pri=127080, relay=relay.co.jefferson.co.us. [172.16.8.29],
>dsn=2.0.0, stat=Sent (Ok)
>[root at ww11 root]#
>
>
>Notice the same smtp id is processed by 2 MailScanner processes? The
>end result is 2 emails to the recipients.
>
>Any ideas???
>
>

--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list