Sendmail/mailscanner intermittent problem with sendmail acceptingmessages but not being handed to mailscanner

[Ken A]

Gordon Colyn wrote:
> Hi,
> 
> Is anyone experiencing problems where mail is just disappearing.  We get the 
> initial mail coming in but then it seems to just disappear...
> Jul  9 16:00:30 mx01 sendmail[25610]: m69DxOSG025610: 
> from=<Cristina.Kusterle at illy.it>, size=0, class=0, nrcpts=1, proto=ESMTP, 
> daemon=MTA, relay=host134-57-static.82-213-b.business.telecomitalia.it 
> [213.82.57.134]No more records....

I assume you added that "No more records...." to the end.
That log entry (minus the "No more records....") just means that 
213.82.57.134 connected, then quit. You can duplicate this on the server 
with this:

telnet localhost 25
helo localhost
mail from: <you at yourdomain.com>
rcpt to: <you at yourdomain.com>
quit

You can turn up the logging in sendmail if you want more info, or use 
tcpdump to see this happening.

Ken

> 
> ----- Original Message ----- 
> From: "Gordon Colyn" <gordon at itnt.co.za>
> To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
> Sent: Friday, June 20, 2008 3:16 PM
> Subject: Sendmail/mailscanner intermittent problem with sendmail 
> acceptingmessages but not being handed to mailscanner
> 
> 
> ITNT BannerI have a problem where I am getting mail delivered to our servers
> (problem is on all 4) and showing up in the log but not being handled by
> Mailscanner.  I only see one line in the log confirming that the mail was
> accepted by sendmail, but then nothing after that;
> 
> Anyone have any ideas?
> 
> Example;
> sendmail[8388]: m5K9VKpL008388: from=<bouncebox at faxfx.biz>, size=0, class=0,
> nrcpts=1, proto=ESMTP, daemon=MTA, relay=mail.faxfx.biz [196.31.203.114]
> and
> sendmail[7246]: m5K9S7tF007246: from=<bouncebox at faxfx.biz>, size=0, class=0,
> nrcpts=1, proto=ESMTP, daemon=MTA, relay=gatew2.faxfx.biz [196.31.203.114]
> 
> I should see this;
> sentinal sendmail[21377]: m5KDF2r7021377: from=<bstangeb at ha-nett.no>,
> size=2534, class=0, nrcpts=1,
> msgid=<000a01c8d2d7$04661f3d$8d3f1f8d at evvrwqfu>, proto=ESMTP, daemon=MTA,
> relay=client-201.240.26.201.speedy.net.pe [201.240.26.201] (may be forged)
> sendmail[21377]: m5KDF2r7021377: to=<salesd at lpa.co.za>, delay=00:00:01,
> mailer=esmtp, pri=32534, stat=queued
> MailScanner[13169]: Logging message m5KDF2r7021377 to SQL
>  MailScanner[13148]: m5KDF2r7021377: Logged to MailWatch SQL
> 
> I have this issue on a number of emails from different senders, this is just
> 2 of many examples.
> 
> I am running Mailscanner 4.69.9, sendmail 8.14.1, spamassassin 3.2.5, clamd
> 0.93
> 
> 
> Regards
> Gordon Colyn
> Office : 086 123 ITNT (4868)
> Cell : 083 296 7534
> Fax : 086 520 0885
> InTheNet Technologies
> www.itnt.co.za
> MSN:gordoncolyn at hotmail.com
> SKYPE:gordoncolyn
> 
> Confidentiality: This e-mail including any attachments is intended for the
> above named addressee(s) only and contains confidential information. If you
> have received this email in error you must take no action based on its
> contents, nor must you reproduce or show the e-mail or any attachments or
> any part thereof or communicate the contents to anyone; please reply to the
> sender of this e-mail informing them of the error.
> 
> Viruses: We recommend that in keeping with good computing practice the
> recipient should ensure that e-mails received are virus free before opening.
> 


-- 
Ken Anderson
Pacific.Net