Some mail (up to 7 days old) is stuck in /var/spool/mqueue

[Chris W. Parker]

Hello,

I've had one user complaining about missing emails. I've done quite a
bit of research and at first I didn't think that it was MailScanner's
fault and that perhaps it was something to do with the user's Exchange
mailbox. But this turns out not to be the case.

So what I found in MailScanner's logs was the following:

Jul 26 12:35:47 filter sendmail[18495]: k6QJZjmx018495:
from=<bounce-1313649-8033581 at lyris.sunbelt-software.com>, size=3113,
class=0, nrcpts=1,
msgid=<LYRIS-8033581-1313649-2006.07.26-15.35.21--cparker#swatgear.com at l
yris.sunbelt-software.com>, proto=SMTP, daemon=MTA,
relay=lyris.sunbelt-software.com [64.128.133.151]
Jul 26 12:35:47 filter sendmail[18495]: k6QJZjmx018495:
to=<cparker at swatgear.com>, delay=00:00:02, mailer=esmtp, pri=33113,
stat=queued
Jul 26 12:35:56 filter sendmail[18369]: k6QJXqX7018369:
from=<users_friend at sbcglobal.net>, size=8126196, class=0, nrcpts=1,
msgid=<20060726193329.16524.qmail at web81513.mail.mud.yahoo.com>,
proto=SMTP, daemon=MTA, relay=web81513.mail.mud.yahoo.com
[68.142.199.33]
Jul 26 12:35:56 filter sendmail[18369]: k6QJXqX7018369:
to=<my_user at swatgear.com>, delay=00:02:04, mailer=esmtp, pri=8156196,
stat=queued
Jul 26 12:36:10 filter MailScanner[17767]: New Batch: Scanning 2
messages, 8130378 bytes
Jul 26 12:36:10 filter MailScanner[17767]: Spam Checks: Starting
Jul 26 12:36:10 filter MailScanner[17767]: Message k6QJZjmx018495 from
64.128.133.151 (bounce-1313649-8033581 at lyris.sunbelt-software.com) is
whitelisted
Jul 26 12:36:18 filter MailScanner[17767]: Virus and Content Scanning:
Starting
Jul 26 12:36:35 filter MailScanner[17767]: Uninfected: Delivered 2
messages
Jul 26 12:36:35 filter MailScanner[17767]: Batch processed in 25.18
seconds
Jul 26 12:36:35 filter MailScanner[17767]: Logging message
k6QJZjmx018495 to SQL
Jul 26 12:36:35 filter MailScanner[17777]: k6QJZjmx018495: Logged to
MailWatch SQL
Jul 26 12:36:35 filter MailScanner[17767]: Logging message
k6QJXqX7018369 to SQL
Jul 26 12:36:35 filter MailScanner[17777]: k6QJXqX7018369: Logged to
MailWatch SQL
Jul 26 12:36:35 filter MailScanner[17767]: "Always Looked Up Last" took
0.03 seconds
Jul 26 12:36:36 filter sendmail[18515]: k6QJZjmx018495:
to=<cparker at swatgear.com>, delay=00:00:51, xdelay=00:00:01,
mailer=esmtp, pri=123113, relay=[10.0.0.6] [10.0.0.6], dsn=2.0.0,
stat=Sent (
<LYRIS-8033581-1313649-2006.07.26-15.35.21--cparker#swatgear.com at lyris.s
unbelt-software.com> Queued mail for delivery)

As you can see there were two messages that were processed in this
batch. One message (k6QJZjmx018495) has a final line that states "Queued
mail for delivery". However, the problem email is k6QJXqX7018369. This
email NEVER says "Queued mail for delivery". This is strange since it
meets all MailScanner checks for spam and content, etc. On top of this I
have found this message (k6QJXqX7018369) in the /var/spool/mqueue
directory just waiting to be sent.


Any ideas what could be causing this?

Also, I've just verified that other emails still in the
/var/spool/mqueue directory are also missing the line that reads "Queued
mail for delivery".


Thanks,
Chris.