Duplicate emails - same smtp id processed by different MS processes.

[Julian Field]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Jeff Falgout wrote:

>Ah, the Wise one has spoken. I see the option in the conf file.
>
>
Bow, you unworthy mortal :-)))

>Could that explain why I'm also seeing email's that have no message and
>are
>are followed up by the the complete email?
>
>
Yes, it does. MailScanner is picking up the message before its body has
been written. Another MailScanner child process then picks up the same
message again, this time with the body.

>Thanks Julian.
>
>
No worries!

>
>
>>>>mailscanner at ECS.SOTON.AC.UK 12/7/2004 10:34:51 AM >>>
>>>>
>>>>
>With sendmail-8.13 on Linux systems, you need to set "Lock Type =
>posix"
>in MailScanner.conf.
>
>Jeff Falgout wrote:
>
>
>
>>I'm stumped on this one . . .
>>
>>[root at ww11 root]# rpm -q mailscanner
>>mailscanner-4.36.4-1
>>[root at ww11 root]# cat /etc/redhat-release
>>Red Hat Linux release 8.0 (Psyche)
>>[root at ww11 root]# rpm -q sendmail
>>sendmail-8.13.1-1.rhl9
>>
>>
>>The following is a sample of duplicate emails that have been popping
>>
>>
>up
>
>
>>intermittently -
>>
>>Header of both duplicate emails (same for both):
>>
>>Return-path: <user at lfcplans.com>
>>Received: from ww11.co.jefferson.co.us [172.18.2.30]
>>       by relay.co.jefferson.co.us; Tue, 07 Dec 2004 08:07:54 -0700
>>Received: from smtpauth08.mail.atl.earthlink.net
>>(smtpauth08.mail.atl.earthlink.net [209.86.89.68])
>>       by ww11.co.jefferson.co.us (8.13.1/8.13.1) with ESMTP id
>>iB7F7nkC028885
>>       for <webmaster.list at co.jefferson.co.us>; Tue, 7 Dec 2004
>>08:07:49 -0700
>>Message-Id: <200412071507.iB7F7nkC028885 at ww11.co.jefferson.co.us>
>>Received: from [66.32.253.1] (helo=LFC)
>>       by smtpauth08.mail.atl.earthlink.net with asmtp (Exim 4.34)
>>       id 1CbgwO-0002Sz-1W
>>       for webmaster.list at co.jefferson.co.us; Tue, 07 Dec 2004
>>
>>
>10:07:48
>
>
>>-0500
>>From: "User Name" <user at lfcplans.com>
>>To: <webmaster.list at co.jefferson.co.us>
>>Subject: broken link
>>Date: Tue, 7 Dec 2004 10:07:45 -0500
>>MIME-Version: 1.0
>>Content-Type: multipart/alternative;
>>       boundary="----=_NextPart_000_002D_01C4DC44.99BD66B0"
>>X-Mailer: Microsoft Office Outlook, Build 11.0.6353
>>Thread-Index: AcTcboFzaT/QCzA/QyiZU0c9Y6C1ig==
>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>X-ELNK-Trace:
>>feb5d6ea45e01ec46a4deeea1b09fa1d9ef193a6bfc3dd4839521e14bdc0f52fceabc8245eb83f64a7ce0e8f8d31aa3f350badd9bab72f9c350badd9bab72f9c
>>X-Originating-IP: 66.32.253.1
>>X-JeffCo-MailScanner-Information: Please contact the Help Desk for
>>
>>
>more
>
>
>>information
>>X-JeffCo-MailScanner: Found to be clean
>>X-JeffCo-MailScanner-SpamCheck: not spam, SpamAssassin (score=1.75,
>>       required 4, BAYES_00 -0.05, HTML_90_100 0.02, HTML_MESSAGE
>>0.00,
>>       MSGID_FROM_MTA_HEADER 0.05, MSGID_FROM_MTA_ID 1.72)
>>X-JeffCo-MailScanner-SpamScore:  1.75
>>X-MailScanner-From: user at lfcplans.com
>>
>>This is a multi-part message in MIME format.
>>
>>
>>
>>Entries in the maillog:
>>
>>[root at ww11 root]# grep iB7F7nkC028885 /var/log/maillog*
>>/var/log/maillog:Dec  7 08:07:49 ww11 sendmail[28885]:
>>
>>
>iB7F7nkC028885:
>
>
>>from=<user at lfcplans.com>, size=7080, class=0, nrcpts=1,
>>msgid=<200412071507.iB7F7nkC028885 at ww11.co.jefferson.co.us>,
>>proto=ESMTP, daemon=MTA, relay=smtpauth08.mail.atl.earthlink.net
>>[209.86.89.68]
>>/var/log/maillog:Dec  7 08:07:53 ww11 MailScanner[26795]: Content
>>Checks: Detected and will disarm HTML message in iB7F7nkC028885
>>/var/log/maillog:Dec  7 08:07:54 ww11 MailScanner[26499]: Content
>>Checks: Detected and will disarm HTML message in iB7F7nkC028885
>>/var/log/maillog:Dec  7 08:07:54 ww11 sendmail[28974]:
>>
>>
>iB7F7nkC028885:
>
>
>>to=aaaaa,bbbb,cccc,dddd,eeee, delay=00:00:05, xdelay=00:00:01,
>>mailer=relay, pri=127080, relay=relay.co.jefferson.co.us.
>>
>>
>[172.16.8.29],
>
>
>>dsn=2.0.0, stat=Sent (Ok)
>>/var/log/maillog:Dec  7 08:07:54 ww11 sendmail[28982]:
>>
>>
>iB7F7nkC028885:
>
>
>>to=aaaaa,bbbb,cccc,dddd,eeee,  delay=00:00:05, xdelay=00:00:00,
>>mailer=relay, pri=127080, relay=relay.co.jefferson.co.us.
>>
>>
>[172.16.8.29],
>
>
>>dsn=2.0.0, stat=Sent (Ok)
>>[root at ww11 root]#
>>
>>
>>Notice the same smtp id is processed by 2 MailScanner processes? The
>>end result is 2 emails to the recipients.
>>
>>Any ideas???
>>
>>
>>
>>

--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!