RES: duplicated mailwatch loggin only from non-spam messages

[Wilson A. Galafassi Jr.]

Here is my exim log:


2007-05-15 09:50:00 1HnwTY-0001T0-AZ <= wilson.galafassi at gmail.com
H=(wx-out-0506.google.com) [66.249.82.233] P=esmtp S=4577
id=!&!AAAAAAAAAAAYAAAAAAAAACCX86jW8GpMuxxs8io8EHLCgAAAEAAAAJxHavjKBv1LoOvHfk
Pc5ZUBAAAAAA==@galafassi.com.br T="teste"
2007-05-15 09:50:09 cwd=/var/spool/MailScanner/incoming/28253 5 args:
/usr/sbin/exim -C /etc/exim_outgoing.conf -Mc 1HnwTY-0001T0-AZ
2007-05-15 09:50:09 cwd=/tmp 2 args: /usr/sbin/sendmail -bS
2007-05-15 09:50:12 1HnwTh-0001Yo-Ni <= wilson.galafassi at gmail.com U=celta
P=local-bsmtp S=5282
id=!&!AAAAAAAAAAAYAAAAAAAAACCX86jW8GpMuxxs8io8EHLCgAAAEAAAAJxHavjKBv1LoOvHfk
Pc5ZUBAAAAAA==@galafassi.com.br T="teste"
2007-05-15 09:50:12 1HnwTY-0001T0-AZ => derek <derek at celtaclube.com.br>
R=virtual_sa_user T=virtual_sa_userdelivery
2007-05-15 09:50:12 1HnwTY-0001T0-AZ Completed
2007-05-15 09:50:14 cwd=/var/spool/MailScanner/incoming/28414 5 args:
/usr/sbin/exim -C /etc/exim_outgoing.conf -Mc 1HnwTh-0001Yo-Ni
2007-05-15 09:50:14 1HnwTh-0001Yo-Ni => derek <derek at celtaclube.com.br>
R=virtual_user T=virtual_userdelivery
2007-05-15 09:50:14 1HnwTh-0001Yo-Ni Completed

Exim is duplicating emails?


-----Mensagem original-----
De: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] Em nome de Glenn Steen
Enviada em: terça-feira, 15 de maio de 2007 09:39
Para: MailScanner discussion
Assunto: Re: duplicated mailwatch loggin only from non-spam messages

On 15/05/07, Wilson A. Galafassi Jr. <wilson.galafassi at gmail.com> wrote:
> This problem is in other Server. I´m running centos with exim (Cpanel)
>
> May 15 08:44:20 netserver MailScanner[28417]: New Batch: Scanning 1
> messages, 2524 bytes
> May 15 08:44:20 netserver MailScanner[28417]: Spam Checks: Found 1 spam
> messages
> May 15 08:44:21 netserver MailScanner[28417]: Virus and Content Scanning:
> Starting
> May 15 08:44:21 netserver MailScanner[28417]: Logging message
> 1HnvRy-0007OS-PG to SQL
> May 15 08:44:21 netserver MailScanner[28257]: 1HnvRy-0007OS-PG: Logged to
> MailWatch SQL
> May 15 08:44:39 netserver MailScanner[28417]: New Batch: Scanning 1
> messages, 11182 bytes
> May 15 08:44:41 netserver MailScanner[28417]: Virus and Content Scanning:
> Starting
> May 15 08:44:41 netserver MailScanner[28417]: Uninfected: Delivered 1
> messages
> May 15 08:44:41 netserver MailScanner[28417]: Logging message
> 1HnvSI-0007Oq-D0 to SQL
> May 15 08:44:41 netserver MailScanner[28257]: 1HnvSI-0007Oq-D0: Logged to
> MailWatch SQL
> May 15 08:44:41 netserver spamc[28471]: connect to spamd on 127.0.0.1
> failed, retrying (#1 of 3): Connection refused
> May 15 08:44:42 netserver spamc[28471]: connect to spamd on 127.0.0.1
> failed, retrying (#2 of 3): Connection refused
> May 15 08:44:43 netserver spamc[28471]: connect to spamd on 127.0.0.1
> failed, retrying (#3 of 3): Connection refused

No spamd running, or a firewall rule missing? You should perhaps fix that.

> May 15 08:44:44 netserver spamc[28471]: connection attempt to spamd
aborted
> after 3 retries
> May 15 08:44:46 netserver MailScanner[28414]: New Batch: Scanning 1
> messages, 11497 bytes
> May 15 08:44:46 netserver MailScanner[28414]: SpamAssassin cache hit for
> message 1HnvSL-0007PB-Ko
> May 15 08:44:46 netserver MailScanner[28414]: Virus and Content Scanning:
> Starting
> May 15 08:44:47 netserver MailScanner[28414]: Uninfected: Delivered 1
> messages
> May 15 08:44:47 netserver MailScanner[28414]: Logging message
> 1HnvSL-0007PB-Ko to SQL
> May 15 08:44:47 netserver MailScanner[28257]: 1HnvSL-0007PB-Ko: Logged to
> MailWatch SQL
>
> Mailscanner generate 2 message 1HnvRy-0007OS-PG and 1HnvSL-0007PB-Ko for
the
> same message.

Same Message-ID? Check your exim logs... likely comes from one bad
sender sending it twice... Happens occasionally;-)

Cheers
-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se
-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!