duplicated mailwatch loggin only from non-spam messages

[Glenn Steen]

On 15/05/07, Wilson A. Galafassi Jr. <wilson.galafassi at gmail.com> wrote:
> This problem is in other Server. I´m running centos with exim (Cpanel)
>
> May 15 08:44:20 netserver MailScanner[28417]: New Batch: Scanning 1
> messages, 2524 bytes
> May 15 08:44:20 netserver MailScanner[28417]: Spam Checks: Found 1 spam
> messages
> May 15 08:44:21 netserver MailScanner[28417]: Virus and Content Scanning:
> Starting
> May 15 08:44:21 netserver MailScanner[28417]: Logging message
> 1HnvRy-0007OS-PG to SQL
> May 15 08:44:21 netserver MailScanner[28257]: 1HnvRy-0007OS-PG: Logged to
> MailWatch SQL
> May 15 08:44:39 netserver MailScanner[28417]: New Batch: Scanning 1
> messages, 11182 bytes
> May 15 08:44:41 netserver MailScanner[28417]: Virus and Content Scanning:
> Starting
> May 15 08:44:41 netserver MailScanner[28417]: Uninfected: Delivered 1
> messages
> May 15 08:44:41 netserver MailScanner[28417]: Logging message
> 1HnvSI-0007Oq-D0 to SQL
> May 15 08:44:41 netserver MailScanner[28257]: 1HnvSI-0007Oq-D0: Logged to
> MailWatch SQL
> May 15 08:44:41 netserver spamc[28471]: connect to spamd on 127.0.0.1
> failed, retrying (#1 of 3): Connection refused
> May 15 08:44:42 netserver spamc[28471]: connect to spamd on 127.0.0.1
> failed, retrying (#2 of 3): Connection refused
> May 15 08:44:43 netserver spamc[28471]: connect to spamd on 127.0.0.1
> failed, retrying (#3 of 3): Connection refused

No spamd running, or a firewall rule missing? You should perhaps fix that.

> May 15 08:44:44 netserver spamc[28471]: connection attempt to spamd aborted
> after 3 retries
> May 15 08:44:46 netserver MailScanner[28414]: New Batch: Scanning 1
> messages, 11497 bytes
> May 15 08:44:46 netserver MailScanner[28414]: SpamAssassin cache hit for
> message 1HnvSL-0007PB-Ko
> May 15 08:44:46 netserver MailScanner[28414]: Virus and Content Scanning:
> Starting
> May 15 08:44:47 netserver MailScanner[28414]: Uninfected: Delivered 1
> messages
> May 15 08:44:47 netserver MailScanner[28414]: Logging message
> 1HnvSL-0007PB-Ko to SQL
> May 15 08:44:47 netserver MailScanner[28257]: 1HnvSL-0007PB-Ko: Logged to
> MailWatch SQL
>
> Mailscanner generate 2 message 1HnvRy-0007OS-PG and 1HnvSL-0007PB-Ko for the
> same message.

Same Message-ID? Check your exim logs... likely comes from one bad
sender sending it twice... Happens occasionally;-)

Cheers
-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se