mail passes through spamassassin and clamd but sticks in hold queue, never delivered to local mailbox

Jeff Pitoniak jpitoniak at cybervzhn.com
Mon Apr 28 17:47:42 IST 2008 

> I don't see any processing entry in the maillog for any mail.
> MailScanner will also print some stuff when it processes a mail. What
> you've posted above is just the MailScanner startup chatting.
>
> Do a
>
> #> MailScanner --lint
>
>
> Also, did you set the following in MailScanner.conf (beware, you might
> have to adjust some directory acls if you just change it now!)
>
> Run As User = postfix
> Run As Group = postfix
> Incoming Queue Dir = /var/spool/postfix/hold
> Outgoing Queue Dir = /var/spool/postfix/incoming
> MTA = postfix
>
> Cheers,
> Ronny

I removed the header_check and reconfigured postfix to deliver to the
incoming queue temporarily to make sure the core
postfix/dovecot/squirrelmail config is working, which it is in (Maildir
config).  I changed the config back to answer your question.

MailScanner.conf is setup like you listed above.  The only deviation from
several of the howtos I read is that I am using a clamav-server which allows
separate instances with their own config and socket. 

I also have MailWatch installed (thus the apache group on the hold queue).
acls are as follows:

drwx------  2 postfix root     4096 Apr 28 11:10 active
drwx------  2 postfix root     4096 Apr 25 01:09 bounce
drwx------  2 postfix root     4096 Sep  1  2006 corrupt
drwx------ 16 postfix root     4096 Apr 28 03:55 defer
drwx------ 16 postfix root     4096 Apr 28 03:55 deferred
drwxr-xr-x  2 root    root     4096 Apr 26 04:56 etc
drwx------  2 postfix root     4096 Apr 28 00:30 flush
drwxr-x---  2 postfix apache   4096 Apr 28 00:32 hold
drwx------  2 postfix root     4096 Apr 28 11:10 incoming
drwx-wx---  2 postfix postdrop 4096 Apr 28 11:10 maildrop
drwxr-xr-x  2 root    root     4096 Apr 28 00:30 pid
drwx------  2 postfix root     4096 Apr 28 10:51 private
drwx--x---  2 postfix postdrop 4096 Apr 28 10:51 public
drwx------  2 postfix root     4096 Sep  1  2006 saved
drwx------  2 postfix root     4096 Sep  1  2006 trace

# /usr/sbin/MailScanner --lint
Trying to setlogsock(unix)
Read 819 hostnames from the phishing whitelist
Read 3772 hostnames from the phishing blacklist
Config: calling custom init function SQLBlacklist
Starting up SQL Blacklist
Read 0 blacklist entries
Config: calling custom init function MailWatchLogging
Started SQL Logging child
Config: calling custom init function SQLWhitelist
Starting up SQL Whitelist
Read 1 whitelist entries
Checking version numbers...
Version number in MailScanner.conf (4.68.8) is correct.

Unrar is not installed, it should be in /usr/bin/unrar.
This is required for RAR archives to be read to check
filenames and filetypes. Virus scanning is not affected.


Your envelope_sender_header in spam.assassin.prefs.conf is correct.
MailScanner setting GID to  (89)
MailScanner setting UID to  (89)

Checking for SpamAssassin errors (if you use it)...
SpamAssassin temporary working directory is
/var/spool/MailScanner/incoming/SpamAssassin-Temp
SpamAssassin temp dir = /var/spool/MailScanner/incoming/SpamAssassin-Temp
Using SpamAssassin results cache
Connected to SpamAssassin cache database
pyzor: check failed: internal error
SpamAssassin reported no errors.
Using locktype = posix
MailScanner.conf says "Virus Scanners = clamd"
Found these virus scanners installed: clamd
===========================================================================
Virus and Content Scanning: Starting
ProcessClamAVModOutput Clamd
ClamAVModule::INFECTED:: Eicar-Test-Signature :: ./1/eicar.com
ProcessClamAVModOutput Clamd
ClamAVModule::INFECTED:: Eicar-Test-Signature FOUND :: ./1/
Virus Scanning: Clamd found 2 infections
Infected message 1 came from 10.1.1.1
Virus Scanning: Found 2 viruses
Filename Checks:  (1 eicar.com)
Other Checks: Found 1 problems
===========================================================================
Virus Scanner test reports:
Clamd said "eicar.com was infected: Eicar-Test-Signature"

If any of your virus scanners (clamd)
are not listed there, you should check that they are installed correctly
and that MailScanner is finding them correctly via its virus.scanners.conf.
Config: calling custom end function SQLBlacklist
Closing down by-domain spam blacklist
Config: calling custom end function MailWatchLogging
Config: calling custom end function SQLWhitelist
Closing down by-domain spam whitelist
commit ineffective with AutoCommit enabled at
/usr/lib/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 93,
<CLIENT> line 1.
Commmit ineffective while AutoCommit is on at
/usr/lib/MailScanner/MailScanner/CustomFunctions/MailWatch.pm line 93,
<CLIENT> line 1.

And finally, here's the debug level maillog of the mail not going anywhere.


I replaced the server hostname with "the" or "the.server.com", the IP
address with "10.10.10.10", the actual From address with from at server.com or
"from", and the actual To address with "to" or "to at server.com" in the log
entries to protect the innocent.

Apr 28 12:09:47 the postfix/smtpd[31921]: connect from
localhost.localdomain[127.0.0.1]
Apr 28 12:09:47 the postfix/smtpd[31921]: match_hostname:
localhost.localdomain ~? 127.0.0.0/8
Apr 28 12:09:47 the postfix/smtpd[31921]: match_hostaddr: 127.0.0.1 ~?
127.0.0.0/8
Apr 28 12:09:47 the postfix/smtpd[31921]: >
localhost.localdomain[127.0.0.1]: 220 the.server.com ESMTP Postfix
Apr 28 12:09:47 the postfix/smtpd[31921]: watchdog_pat: 0x55556a2fe500
Apr 28 12:09:47 the postfix/smtpd[31921]: <
localhost.localdomain[127.0.0.1]: EHLO 10.10.10.10
Apr 28 12:09:47 the postfix/smtpd[31921]: >
localhost.localdomain[127.0.0.1]: 250-the.server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: >
localhost.localdomain[127.0.0.1]: 250-PIPELINING
Apr 28 12:09:47 the postfix/smtpd[31921]: >
localhost.localdomain[127.0.0.1]: 250-SIZE 10240000
Apr 28 12:09:47 the postfix/smtpd[31921]: >
localhost.localdomain[127.0.0.1]: 250-VRFY
Apr 28 12:09:47 the postfix/smtpd[31921]: >
localhost.localdomain[127.0.0.1]: 250-ETRN
Apr 28 12:09:47 the postfix/smtpd[31921]: >
localhost.localdomain[127.0.0.1]: 250-STARTTLS
Apr 28 12:09:47 the postfix/smtpd[31921]: >
localhost.localdomain[127.0.0.1]: 250-AUTH LOGIN PLAIN
Apr 28 12:09:47 the postfix/smtpd[31921]: match_list_match:
localhost.localdomain: no match
Apr 28 12:09:47 the postfix/smtpd[31921]: match_list_match: 127.0.0.1: no
match
Apr 28 12:09:47 the postfix/smtpd[31921]: >
localhost.localdomain[127.0.0.1]: 250-AUTH=LOGIN PLAIN
Apr 28 12:09:47 the postfix/smtpd[31921]: >
localhost.localdomain[127.0.0.1]: 250-ENHANCEDSTATUSCODES
Apr 28 12:09:47 the postfix/smtpd[31921]: >
localhost.localdomain[127.0.0.1]: 250-8BITMIME
Apr 28 12:09:47 the postfix/smtpd[31921]: >
localhost.localdomain[127.0.0.1]: 250 DSN
Apr 28 12:09:47 the postfix/smtpd[31921]: watchdog_pat: 0x55556a2fe500
Apr 28 12:09:47 the postfix/smtpd[31921]: <
localhost.localdomain[127.0.0.1]: MAIL FROM:<from at server.com>
Apr 28 12:09:47 the postfix/smtpd[31921]: extract_addr: input:
<from at server.com>
Apr 28 12:09:47 the postfix/smtpd[31921]: smtpd_check_addr:
addr=from at server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: connect to subsystem
private/rewrite
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr request = rewrite
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr rule = local
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr address =
from at server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: flags
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: flags
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value: 0
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: address
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: address
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value:
from at server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: (list terminator)
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: (end)
Apr 28 12:09:47 the postfix/smtpd[31921]: rewrite_clnt: local:
from at server.com -> from at server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr request = resolve
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr sender =
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr address =
from at server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: flags
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: flags
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value: 0
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: transport
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: transport
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value: local
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: nexthop
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: nexthop
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value:
the.server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: recipient
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: recipient
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value:
from at server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: flags
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: flags
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value: 256
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: (list terminator)
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: (end)
Apr 28 12:09:47 the postfix/smtpd[31921]: resolve_clnt: `' ->
`from at server.com' -> transp=`local' host=`the.server.com'
rcpt=`from at server.com' flags= class=local
Apr 28 12:09:47 the postfix/smtpd[31921]: ctable_locate: install entry key
from at server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: extract_addr: in:
<from at server.com>, result: from at server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: fsspace: .: block size 4096,
blocks free 7615541
Apr 28 12:09:47 the postfix/smtpd[31921]: smtpd_check_queue: blocks 4096
avail 7615541 min_free 0 msg_size_limit 10240000
Apr 28 12:09:47 the postfix/smtpd[31921]: >
localhost.localdomain[127.0.0.1]: 250 2.1.0 Ok
Apr 28 12:09:47 the postfix/smtpd[31921]: watchdog_pat: 0x55556a2fe500
Apr 28 12:09:47 the postfix/smtpd[31921]: <
localhost.localdomain[127.0.0.1]: RCPT TO:<to at server.com>
Apr 28 12:09:47 the postfix/smtpd[31921]: extract_addr: input:
<to at server.com>
Apr 28 12:09:47 the postfix/smtpd[31921]: smtpd_check_addr:
addr=to at server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr request = rewrite
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr rule = local
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr address = to at server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: flags
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: flags
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value: 0
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: address
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: address
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value:
to at server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: (list terminator)
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: (end)
Apr 28 12:09:47 the postfix/smtpd[31921]: rewrite_clnt: local: to at server.com
-> to at server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr request = resolve
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr sender =
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr address = to at server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: flags
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: flags
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value: 0
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: transport
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: transport
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value: local
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: nexthop
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: nexthop
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value:
the.server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: recipient
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: recipient
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value:
to at server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: flags
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: flags
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value: 256
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: (list terminator)
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: (end)
Apr 28 12:09:47 the postfix/smtpd[31921]: resolve_clnt: `' ->
`to at server.com' -> transp=`local' host=`the.server.com' rcpt=`to at server.com'
flags= class=local
Apr 28 12:09:47 the postfix/smtpd[31921]: ctable_locate: install entry key
to at server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: extract_addr: in: <to at server.com>,
result: to at server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr request = rewrite
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr rule = local
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr address = postmaster
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: flags
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: flags
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value: 0
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: address
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: address
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value:
postmaster at server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: private/rewrite socket: wanted
attribute: (list terminator)
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: (end)
Apr 28 12:09:47 the postfix/smtpd[31921]: rewrite_clnt: local: postmaster ->
postmaster at server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: >>> START Recipient address
RESTRICTIONS <<<
Apr 28 12:09:47 the postfix/smtpd[31921]: generic_checks:
name=permit_sasl_authenticated
Apr 28 12:09:47 the postfix/smtpd[31921]: generic_checks:
name=permit_sasl_authenticated status=0
Apr 28 12:09:47 the postfix/smtpd[31921]: generic_checks:
name=permit_mynetworks
Apr 28 12:09:47 the postfix/smtpd[31921]: permit_mynetworks:
localhost.localdomain 127.0.0.1
Apr 28 12:09:47 the postfix/smtpd[31921]: match_hostname:
localhost.localdomain ~? 127.0.0.0/8
Apr 28 12:09:47 the postfix/smtpd[31921]: match_hostaddr: 127.0.0.1 ~?
127.0.0.0/8
Apr 28 12:09:47 the postfix/smtpd[31921]: generic_checks:
name=permit_mynetworks status=1
Apr 28 12:09:47 the postfix/smtpd[31921]: >>> CHECKING RECIPIENT MAPS <<<
Apr 28 12:09:47 the postfix/smtpd[31921]: ctable_locate: leave existing
entry key to at server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: maps_find:
recipient_canonical_maps: to at server.com: not found
Apr 28 12:09:47 the postfix/smtpd[31921]: maps_find:
recipient_canonical_maps: support: not found
Apr 28 12:09:47 the postfix/smtpd[31921]: maps_find:
recipient_canonical_maps: @server.com: not found
Apr 28 12:09:47 the postfix/smtpd[31921]: mail_addr_find: to at server.com ->
(not found)
Apr 28 12:09:47 the postfix/smtpd[31921]: maps_find: canonical_maps:
to at server.com: not found
Apr 28 12:09:47 the postfix/smtpd[31921]: maps_find: canonical_maps: to: not
found
Apr 28 12:09:47 the postfix/smtpd[31921]: maps_find: canonical_maps:
@server.com: not found
Apr 28 12:09:47 the postfix/smtpd[31921]: mail_addr_find: to at server.com ->
(not found)
Apr 28 12:09:47 the postfix/smtpd[31921]: maps_find: virtual_alias_maps:
to at server.com: not found
Apr 28 12:09:47 the postfix/smtpd[31921]: maps_find: virtual_alias_maps: to:
not found
Apr 28 12:09:47 the postfix/smtpd[31921]: maps_find: virtual_alias_maps:
@server.com: not found
Apr 28 12:09:47 the postfix/smtpd[31921]: mail_addr_find: to at server.com ->
(not found)
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr request = lookup
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr table =
unix:passwd.byname
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr flags = 16448
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr key = to at server.com
Apr 28 12:09:47 the postfix/smtpd[31921]: private/proxymap socket: wanted
attribute: status
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: status
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value: 1
Apr 28 12:09:47 the postfix/smtpd[31921]: private/proxymap socket: wanted
attribute: value
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: value
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value: (end)
Apr 28 12:09:47 the postfix/smtpd[31921]: private/proxymap socket: wanted
attribute: (list terminator)
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: (end)
Apr 28 12:09:47 the postfix/smtpd[31921]: dict_proxy_lookup:
table=unix:passwd.byname flags=lock|fold_fix key=to at server.com -> status=1
result=
Apr 28 12:09:47 the postfix/smtpd[31921]: maps_find: local_recipient_maps:
to at server.com: not found
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr request = lookup
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr table =
unix:passwd.byname
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr flags = 16448
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr key = to
Apr 28 12:09:47 the postfix/smtpd[31921]: private/proxymap socket: wanted
attribute: status
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: status
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value: 0
Apr 28 12:09:47 the postfix/smtpd[31921]: private/proxymap socket: wanted
attribute: value
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: value
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value:
to:x:501:501:Technical Support:/home/to:/bin/sh
Apr 28 12:09:47 the postfix/smtpd[31921]: private/proxymap socket: wanted
attribute: (list terminator)
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: (end)
Apr 28 12:09:47 the postfix/smtpd[31921]: dict_proxy_lookup:
table=unix:passwd.byname flags=lock|fold_fix key=support -> status=0
result=to:x:501:501:Technical Support:/home/to:/bin/sh
Apr 28 12:09:47 the postfix/smtpd[31921]: maps_find: local_recipient_maps:
proxy:unix:passwd.byname(0,lock|fold_fix): to = to:x:501:501:Technical
Support:/home/to:/bin/sh
Apr 28 12:09:47 the postfix/smtpd[31921]: mail_addr_find: to at server.com ->
to:x:501:501:Technical Support:/home/to:/bin/sh
Apr 28 12:09:47 the postfix/smtpd[31921]: smtpd_check_rewrite: trying:
permit_inet_interfaces
Apr 28 12:09:47 the postfix/smtpd[31921]: permit_inet_interfaces:
localhost.localdomain 127.0.0.1
Apr 28 12:09:47 the postfix/smtpd[31921]: before input_transp_cleanup:
cleanup flags = enable_header_body_filter enable_automatic_bcc
enable_address_mapping enable_milters
Apr 28 12:09:47 the postfix/smtpd[31921]: after input_transp_cleanup:
cleanup flags = enable_header_body_filter enable_automatic_bcc
enable_address_mapping
Apr 28 12:09:47 the postfix/smtpd[31921]: connect to subsystem
public/cleanup
Apr 28 12:09:47 the postfix/smtpd[31921]: public/cleanup socket: wanted
attribute: queue_id
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: queue_id
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value: 87F07B807F
Apr 28 12:09:47 the postfix/smtpd[31921]: public/cleanup socket: wanted
attribute: (list terminator)
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: (end)
Apr 28 12:09:47 the postfix/smtpd[31921]: send attr flags = 50
Apr 28 12:09:47 the postfix/smtpd[31921]: 87F07B807F:
client=localhost.localdomain[127.0.0.1]
Apr 28 12:09:47 the postfix/smtpd[31921]: >
localhost.localdomain[127.0.0.1]: 250 2.1.5 Ok
Apr 28 12:09:47 the postfix/smtpd[31921]: watchdog_pat: 0x55556a2fe500
Apr 28 12:09:47 the postfix/smtpd[31921]: <
localhost.localdomain[127.0.0.1]: DATA
Apr 28 12:09:47 the postfix/smtpd[31921]: >
localhost.localdomain[127.0.0.1]: 354 End data with <CR><LF>.<CR><LF>
Apr 28 12:09:47 the postfix/smtpd[31921]: public/cleanup socket: wanted
attribute: status
Apr 28 12:09:47 the postfix/cleanup[31925]: 87F07B807F: hold: header
Received: from 10.10.10.10 (localhost.localdomain [127.0.0.1])??by
the.server.com (Postfix) with ESMTP id 87F07B807F??for <to at server.com>; Mon,
28 Apr 2008 12:09:47 -0400 (EDT) from localhost.localdomain[127.0.0.1];
from=<from at server.com> to=<to at server.com> proto=ESMTP helo=<10.10.10.10>
Apr 28 12:09:47 the postfix/cleanup[31925]: 87F07B807F:
message-id=<4398.192.168.10.2.1209398987.squirrel at 10.10.10.10>
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: status
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value: 0
Apr 28 12:09:47 the postfix/smtpd[31921]: public/cleanup socket: wanted
attribute: reason
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: reason
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute value: (end)
Apr 28 12:09:47 the postfix/smtpd[31921]: public/cleanup socket: wanted
attribute: (list terminator)
Apr 28 12:09:47 the postfix/smtpd[31921]: input attribute name: (end)
Apr 28 12:09:47 the postfix/smtpd[31921]: >
localhost.localdomain[127.0.0.1]: 250 2.0.0 Ok: queued as 87F07B807F
Apr 28 12:09:47 the postfix/smtpd[31921]: watchdog_pat: 0x55556a2fe500
Apr 28 12:09:47 the postfix/smtpd[31921]: <
localhost.localdomain[127.0.0.1]: QUIT
Apr 28 12:09:47 the postfix/smtpd[31921]: >
localhost.localdomain[127.0.0.1]: 221 2.0.0 Bye
Apr 28 12:09:47 the postfix/smtpd[31921]: match_hostname:
localhost.localdomain ~? 127.0.0.0/8
Apr 28 12:09:47 the postfix/smtpd[31921]: match_hostaddr: 127.0.0.1 ~?
127.0.0.0/8
Apr 28 12:09:47 the postfix/smtpd[31921]: disconnect from
localhost.localdomain[127.0.0.1]
Apr 28 12:09:48 the MailScanner[31848]: New Batch: Scanning 1 messages, 1356
bytes
Apr 28 12:09:48 the MailScanner[31848]: Spam Checks: Starting
Apr 28 12:09:48 the MailScanner[31848]: Message 87F07B807F.1D84D from
127.0.0.1 (from at server.com) is whitelisted
Apr 28 12:10:50 the update.virus.scanners: Delaying cron job up to 600
seconds

More information about the MailScanner mailing list