duplicated mailwatch loggin only from non-spam messages

[Martin.Hepworth]

Wilson

Might be worthwhile putting the outgoing exim logs onto a different
file, then you can see what each instance is up to in a clearer manner.
Something like this in etc/exim_outgoing.conf.

log_file_path = /var/log/exim/log/%slog

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Wilson A. Galafassi Jr.
> Sent: 15 May 2007 13:53
> To: MailScanner discussion
> Subject: RES: duplicated mailwatch loggin only from non-spam messages
>
> Here is my exim log:
>
>
> 2007-05-15 09:50:00 1HnwTY-0001T0-AZ <= wilson.galafassi at gmail.com
> H=(wx-out-0506.google.com) [66.249.82.233] P=esmtp S=4577
>
id=!&!AAAAAAAAAAAYAAAAAAAAACCX86jW8GpMuxxs8io8EHLCgAAAEAAAAJxHavjKBv1LoO
vH
> fk
> Pc5ZUBAAAAAA==@galafassi.com.br T="teste"
> 2007-05-15 09:50:09 cwd=/var/spool/MailScanner/incoming/28253 5 args:
> /usr/sbin/exim -C /etc/exim_outgoing.conf -Mc 1HnwTY-0001T0-AZ
> 2007-05-15 09:50:09 cwd=/tmp 2 args: /usr/sbin/sendmail -bS
> 2007-05-15 09:50:12 1HnwTh-0001Yo-Ni <= wilson.galafassi at gmail.com
U=celta
> P=local-bsmtp S=5282
>
id=!&!AAAAAAAAAAAYAAAAAAAAACCX86jW8GpMuxxs8io8EHLCgAAAEAAAAJxHavjKBv1LoO
vH
> fk
> Pc5ZUBAAAAAA==@galafassi.com.br T="teste"
> 2007-05-15 09:50:12 1HnwTY-0001T0-AZ => derek
<derek at celtaclube.com.br>
> R=virtual_sa_user T=virtual_sa_userdelivery
> 2007-05-15 09:50:12 1HnwTY-0001T0-AZ Completed
> 2007-05-15 09:50:14 cwd=/var/spool/MailScanner/incoming/28414 5 args:
> /usr/sbin/exim -C /etc/exim_outgoing.conf -Mc 1HnwTh-0001Yo-Ni
> 2007-05-15 09:50:14 1HnwTh-0001Yo-Ni => derek
<derek at celtaclube.com.br>
> R=virtual_user T=virtual_userdelivery
> 2007-05-15 09:50:14 1HnwTh-0001Yo-Ni Completed
>
> Exim is duplicating emails?
>
>
> -----Mensagem original-----
> De: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info] Em nome de Glenn
Steen
> Enviada em: terça-feira, 15 de maio de 2007 09:39
> Para: MailScanner discussion
> Assunto: Re: duplicated mailwatch loggin only from non-spam messages
>
> On 15/05/07, Wilson A. Galafassi Jr. <wilson.galafassi at gmail.com>
wrote:
> > This problem is in other Server. I´m running centos with exim
(Cpanel)
> >
> > May 15 08:44:20 netserver MailScanner[28417]: New Batch: Scanning 1
> > messages, 2524 bytes
> > May 15 08:44:20 netserver MailScanner[28417]: Spam Checks: Found 1
spam
> > messages
> > May 15 08:44:21 netserver MailScanner[28417]: Virus and Content
> Scanning:
> > Starting
> > May 15 08:44:21 netserver MailScanner[28417]: Logging message
> > 1HnvRy-0007OS-PG to SQL
> > May 15 08:44:21 netserver MailScanner[28257]: 1HnvRy-0007OS-PG:
Logged
> to
> > MailWatch SQL
> > May 15 08:44:39 netserver MailScanner[28417]: New Batch: Scanning 1
> > messages, 11182 bytes
> > May 15 08:44:41 netserver MailScanner[28417]: Virus and Content
> Scanning:
> > Starting
> > May 15 08:44:41 netserver MailScanner[28417]: Uninfected: Delivered
1
> > messages
> > May 15 08:44:41 netserver MailScanner[28417]: Logging message
> > 1HnvSI-0007Oq-D0 to SQL
> > May 15 08:44:41 netserver MailScanner[28257]: 1HnvSI-0007Oq-D0:
Logged
> to
> > MailWatch SQL
> > May 15 08:44:41 netserver spamc[28471]: connect to spamd on
127.0.0.1
> > failed, retrying (#1 of 3): Connection refused
> > May 15 08:44:42 netserver spamc[28471]: connect to spamd on
127.0.0.1
> > failed, retrying (#2 of 3): Connection refused
> > May 15 08:44:43 netserver spamc[28471]: connect to spamd on
127.0.0.1
> > failed, retrying (#3 of 3): Connection refused
>
> No spamd running, or a firewall rule missing? You should perhaps fix
that.
>
> > May 15 08:44:44 netserver spamc[28471]: connection attempt to spamd
> aborted
> > after 3 retries
> > May 15 08:44:46 netserver MailScanner[28414]: New Batch: Scanning 1
> > messages, 11497 bytes
> > May 15 08:44:46 netserver MailScanner[28414]: SpamAssassin cache hit
for
> > message 1HnvSL-0007PB-Ko
> > May 15 08:44:46 netserver MailScanner[28414]: Virus and Content
> Scanning:
> > Starting
> > May 15 08:44:47 netserver MailScanner[28414]: Uninfected: Delivered
1
> > messages
> > May 15 08:44:47 netserver MailScanner[28414]: Logging message
> > 1HnvSL-0007PB-Ko to SQL
> > May 15 08:44:47 netserver MailScanner[28257]: 1HnvSL-0007PB-Ko:
Logged
> to
> > MailWatch SQL
> >
> > Mailscanner generate 2 message 1HnvRy-0007OS-PG and 1HnvSL-0007PB-Ko
for
> the
> > same message.
>
> Same Message-ID? Check your exim logs... likely comes from one bad
> sender sending it twice... Happens occasionally;-)
>
> Cheers
> --
> -- Glenn
> email: glenn < dot > steen < at > gmail < dot > com
> work: glenn < dot > steen < at > ap1 < dot > se
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!




**********************************************************************
Confidentiality : This e-mail and any attachments are intended for the 
addressee only and may be confidential. If they come to you in error 
you must take no action based on them, nor must you copy or show them 
to anyone. Please advise the sender by replying to this e-mail 
immediately and then delete the original from your computer.

Opinion : Any opinions expressed in this e-mail are entirely those of 
the author and unless specifically stated to the contrary, are not 
necessarily those of the author's employer.

Security Warning : Internet e-mail is not necessarily a secure 
communications medium and can be subject to data corruption. We advise 
that you consider this fact when e-mailing us. 

Viruses : We have taken steps to ensure that this e-mail and any 
attachments are free from known viruses but in keeping with good 
computing practice, you should ensure that they are virus free.

Red Lion 49 Ltd T/A Solid State Logic
Registered as a limited company in England and Wales 
(Company No:5362730)
Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, 
United Kingdom
**********************************************************************