Duplicate emails - same smtp id processed by different MS processes.

[Martin Hepworth]

Jeff

you sure you're only running one copy of MS???

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Jeff Falgout wrote:
> I'm stumped on this one . . .
>
> [root at ww11 root]# rpm -q mailscanner
> mailscanner-4.36.4-1
> [root at ww11 root]# cat /etc/redhat-release
> Red Hat Linux release 8.0 (Psyche)
> [root at ww11 root]# rpm -q sendmail
> sendmail-8.13.1-1.rhl9
>
>
> The following is a sample of duplicate emails that have been popping up
> intermittently -
>
> Header of both duplicate emails (same for both):
>
> Return-path: <user at lfcplans.com>
> Received: from ww11.co.jefferson.co.us [172.18.2.30]
>         by relay.co.jefferson.co.us; Tue, 07 Dec 2004 08:07:54 -0700
> Received: from smtpauth08.mail.atl.earthlink.net
> (smtpauth08.mail.atl.earthlink.net [209.86.89.68])
>         by ww11.co.jefferson.co.us (8.13.1/8.13.1) with ESMTP id
> iB7F7nkC028885
>         for <webmaster.list at co.jefferson.co.us>; Tue, 7 Dec 2004
> 08:07:49 -0700
> Message-Id: <200412071507.iB7F7nkC028885 at ww11.co.jefferson.co.us>
> Received: from [66.32.253.1] (helo=LFC)
>         by smtpauth08.mail.atl.earthlink.net with asmtp (Exim 4.34)
>         id 1CbgwO-0002Sz-1W
>         for webmaster.list at co.jefferson.co.us; Tue, 07 Dec 2004 10:07:48
> -0500
> From: "User Name" <user at lfcplans.com>
> To: <webmaster.list at co.jefferson.co.us>
> Subject: broken link
> Date: Tue, 7 Dec 2004 10:07:45 -0500
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
>         boundary="----=_NextPart_000_002D_01C4DC44.99BD66B0"
> X-Mailer: Microsoft Office Outlook, Build 11.0.6353
> Thread-Index: AcTcboFzaT/QCzA/QyiZU0c9Y6C1ig==
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
> X-ELNK-Trace:
> feb5d6ea45e01ec46a4deeea1b09fa1d9ef193a6bfc3dd4839521e14bdc0f52fceabc8245eb83f64a7ce0e8f8d31aa3f350badd9bab72f9c350badd9bab72f9c
> X-Originating-IP: 66.32.253.1
> X-JeffCo-MailScanner-Information: Please contact the Help Desk for more
> information
> X-JeffCo-MailScanner: Found to be clean
> X-JeffCo-MailScanner-SpamCheck: not spam, SpamAssassin (score=1.75,
>         required 4, BAYES_00 -0.05, HTML_90_100 0.02, HTML_MESSAGE
> 0.00,
>         MSGID_FROM_MTA_HEADER 0.05, MSGID_FROM_MTA_ID 1.72)
> X-JeffCo-MailScanner-SpamScore:  1.75
> X-MailScanner-From: user at lfcplans.com
>
> This is a multi-part message in MIME format.
>
>
>
> Entries in the maillog:
>
> [root at ww11 root]# grep iB7F7nkC028885 /var/log/maillog*
> /var/log/maillog:Dec  7 08:07:49 ww11 sendmail[28885]: iB7F7nkC028885:
> from=<user at lfcplans.com>, size=7080, class=0, nrcpts=1,
> msgid=<200412071507.iB7F7nkC028885 at ww11.co.jefferson.co.us>,
> proto=ESMTP, daemon=MTA, relay=smtpauth08.mail.atl.earthlink.net
> [209.86.89.68]
> /var/log/maillog:Dec  7 08:07:53 ww11 MailScanner[26795]: Content
> Checks: Detected and will disarm HTML message in iB7F7nkC028885
> /var/log/maillog:Dec  7 08:07:54 ww11 MailScanner[26499]: Content
> Checks: Detected and will disarm HTML message in iB7F7nkC028885
> /var/log/maillog:Dec  7 08:07:54 ww11 sendmail[28974]: iB7F7nkC028885:
> to=aaaaa,bbbb,cccc,dddd,eeee, delay=00:00:05, xdelay=00:00:01,
> mailer=relay, pri=127080, relay=relay.co.jefferson.co.us. [172.16.8.29],
> dsn=2.0.0, stat=Sent (Ok)
> /var/log/maillog:Dec  7 08:07:54 ww11 sendmail[28982]: iB7F7nkC028885:
> to=aaaaa,bbbb,cccc,dddd,eeee,  delay=00:00:05, xdelay=00:00:00,
> mailer=relay, pri=127080, relay=relay.co.jefferson.co.us. [172.16.8.29],
> dsn=2.0.0, stat=Sent (Ok)
> [root at ww11 root]#
>
>
> Notice the same smtp id is processed by 2 MailScanner processes? The
> end result is 2 emails to the recipients.
>
> Any ideas???
>
> Jeff
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!