Problem with MailScanner, postfix and corrupt mails

[Robert Waldner]

On Mon, 07 Mar 2005 14:13:23 +0100, "Steen, Glenn" writes:
>Hm, the only time I've seen corrupt messages is when I've experienced
>machine failures (had a "bad kernel" situation a while back that made
>those ... frequent:-)... Until today, when I had one "unforced". Didn't
>analyze it more than to see that it was a spam, so unfortunately I
>deleted it. Will be sure to look more closely on this.

I could believe filesystem trouble on one machine, but on two, running
 off HW RAID-1? Unlikely, especially since I probably would've seen
 other problems then, too.

>Could you determine anything more these corrupt queue files have in
>common?

Other than the "structure" of the corruption, I couldn't find any
 similarities, happens to newsletters, locally originated stuff,
 personal mails from all over the world, spam. It hits 1-2 mails/day/
 machine (which do about 10k/day each).

>Oh and BTW, you do run a one queue setup, right?

How do you mean "one queue setup"? I have postfix stuff the mails into
 postfix/hold, where MailScanner picks them up and then requeues them
 into postfix/incoming:

Incoming Queue Dir = /var/spool/postfix/hold
Outgoing Queue Dir = /var/spool/postfix/incoming

Both directories reside on the same local partition.

cheers,
&rw
--
-- Honestly, security experts don't pick on Microsoft because we have
-- some fundamental dislike for the company. Indeed, Microsoft's poor
-- products are one of the reasons we're in business.
--                                                   - Bruce Schneier



------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!

    [ Part 2, Application/PGP-SIGNATURE  196bytes. ]
    [ Unable to print this part. ]