Emails on HOLD not processed and delivered

Tue Nov 25 17:34:56 GMT 2008

----- Original Message ----- 
From: "Arthur Stephens" <astephens at ptera.net>
To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
Sent: Tuesday, November 25, 2008 3:06 PM
Subject: Re: Emails on HOLD not processed and delivered

> Glenn Steen wrote:
>> 2008/11/24 Arthur Stephens <astephens at ptera.net>:
>>
>>> I discovered this problem when customers complained about not getting 
>>> emails
>>> from some people.
>>>
>>> It appears that whenever an email using ESMTP protocol goes on hold to 
>>> be
>>> processed by mail scanner, it ends up being removed without processing 
>>> it.
>>> Here are a couple of the numerous log entries reflecting this...
>>>
>>> [root at mailgate ~]# grep 4013E6FB03C: /var/log/maillog
>>> Nov 24 10:09:21 mailgate postfix/smtpd[14870]: 4013E6FB03C:
>>> client=mail.sound-tele.com[66.45.208.237]
>>> Nov 24 10:09:21 mailgate postfix/cleanup[14455]: 4013E6FB03C: hold: 
>>> header
>>> Received: from mail.sound-tele.com (mail.sound-tele.com 
>>> [66.45.208.237])??by
>>> mailgate.ptera.net (Postfix) with ESMTP id 4013E6FB03C??for
>>> <sladichoffice at ptera.net>; Mon, 24 Nov 2008 10:09:21 -0800 (PST from
>>> mail.sound-tele.com[66.45.208.237]; from=<ST-MsgCtr at sound-tele.com>
>>> to=<sladichoffice at ptera.net> proto=ESMTP helo=<mail.sound-tele.com>
>>> Nov 24 10:09:21 mailgate postfix/cleanup[14455]: 4013E6FB03C:
>>> message-id=<EX2003BPcZi71mrvoGd00007995 at mail.sound-tele.com>
>>>
>>> [root at mailgate ~]# grep  53A4C6FB0A0: /var/log/maillog
>>> Nov 24 10:22:30 mailgate postfix/smtpd[14219]: 53A4C6FB0A0:
>>> client=unknown[206.169.232.4]
>>> Nov 24 10:22:30 mailgate postfix/cleanup[17578]: 53A4C6FB0A0: hold: 
>>> header
>>> Received: from mail.columbiagrain.com (unknown [206.169.232.4])??by
>>> mailgate.ptera.net (Postfix) with ESMTP id 53A4C6FB0A0??for
>>> <foxhill at ptera.net>; Mon, 24 Nov 2008 10:22:30 -0800 (PST) from
>>> unknown[206.169.232.4]; from=<rolstad at columbiagrain.com>
>>> to=<foxhill at ptera.net> proto=ESMTP helo=<mail.columbiagrain.com>
>>> Nov 24 10:22:30 mailgate postfix/cleanup[17578]: 53A4C6FB0A0:
>>> message-id=<28D95A3746D8414AA52458549F3EA58705228B88 at pdx-mail1.columbiagrain.com>
>>>
>>> [root at mailgate ~]# grep 592E66FB09E: /var/log/maillog
>>> Nov 24 10:28:16 mailgate postfix/smtpd[18108]: 592E66FB09E:
>>> client=seven.pairlist.net[209.68.2.241]
>>> Nov 24 10:28:16 mailgate postfix/cleanup[15863]: 592E66FB09E: hold: 
>>> header
>>> Received: from seven.pairlist.net (seven.pairlist.net 
>>> [209.68.2.241])??by
>>> mailgate.ptera.net (Postfix) with ESMTP id 592E66FB09E??for
>>> <cbk13 at ptera.net>; Mon, 24 Nov 2008 10:28:16 -0800 (PST) from
>>> seven.pairlist.net[209.68.2.241]; 
>>> from=<seattleiso-bounces at seattleiso.org>
>>> to=<cbk13 at ptera.net> proto=ESMTP helo=<seven.pairlist.net>
>>> Nov 24 10:28:16 mailgate postfix/cleanup[15863]: 592E66FB09E:
>>> message-id=<alpine.WNT.1.10.0811241055310.3112 at hsadmjw2.hsvcs.washington.edu>
>>> [root at mailgate ~]#
>>>
>>> I am so unlearned about this I do not know where to begin to solve this
>>> problem.
>>> Googling didn't reveal anything obvious.
>>> What is the information between the ?? trying to tell me?
>>>
>>>
>> Nothing special, just the received line that triggered the header
>> check to arrange for the message to be put on hold, for MailScanner to
>> pick up. IIRC, the ?? is a replacement for linebreaks.
>> So far so good.
>>
>> What should happen next is that MailScanner should pick up a few
>> messages and process them in a batch, telling you what happens, then
>> either deleting, quarantine or requeue the message (with a new queue
>> ID).
>> That doesn't seem to be happening for you.
>> Is MailScanner running?
>> If it is, do you perhaps have any files in the hold queue directory
>> that isn't a queue file (this has been know to make things go to
>> pieces:-)?
>>
>> Cheers
>>
> Ok I checked the queue directory and found only queue files there.
> Here is the log of the missing email in question... I will mark the
> lines with a >>
>
> >> Nov 24 04:57:54 mailgate postfix/smtpd[15326]: connect from
> qmta10.emeryville.ca.mail.comcast.net[76.96.30.17]
> Nov 24 04:57:55 mailgate sqlgrey: grey: domain awl match: updating
> 76.96.30(76.96.30.17), comcast.net
> Nov 24 04:57:56 mailgate postfix/smtpd[15311]: connect from
> ff2.tintwin.com[216.117.206.100]
> Nov 24 04:57:57 mailgate MailScanner[2499]: Requeue: 286976FB0FC.A6B4D
> to 295586FB089
> Nov 24 04:57:57 mailgate postfix/qmgr[1828]: 295586FB089:
> from=<ret at anisome.net>, size=5793, nrcpt=1 (queue active)
> Nov 24 04:57:57 mailgate MailScanner[2499]: Uninfected: Delivered 1 
> messages
> Nov 24 04:57:57 mailgate sqlgrey: grey: new:
> 216.117.206(216.117.206.100), mxhheabbhpxhuefmabc at amazinglydiva.com ->
> lauriek at ptera.net
> >> Nov 24 04:57:57 mailgate postfix/smtpd[15326]: 4ABEF6FB0E8:
> client=qmta10.emeryville.ca.mail.comcast.net[76.96.30.17]
> Nov 24 04:57:57 mailgate postfix/smtpd[15311]: NOQUEUE: reject: RCPT
> from ff2.tintwin.com[216.117.206.100]: 450 4.7.1 <lauriek at ptera.net>:
> Recipient address rejected: Greylisted for 5 minutes;
> from=<MxhHeABBHpxhUefMABc at amazinglydiva.com> to=<lauriek at ptera.net>
> proto=SMTP helo=<amazinglydiva.com>
> >> Nov 24 04:57:57 mailgate postfix/cleanup[13547]: 4ABEF6FB0E8: hold:
> header Received: from QMTA10.emeryville.ca.mail.comcast.net
> (qmta10.emeryville.ca.mail.comcast.net [76.96.30.17])??by
> mailgate.ptera.net (Postfix) with ESMTP id 4ABEF6FB0E8??for
> <rexroad at ptera.net>; Mon, 24  from
> qmta10.emeryville.ca.mail.comcast.net[76.96.30.17];
> from=<chucknvicki at comcast.net> to=<rexroad at ptera.net> proto=ESMTP
> helo=<QMTA10.emeryville.ca.mail.comcast.net>
> >> Nov 24 04:57:57 mailgate postfix/cleanup[13547]: 4ABEF6FB0E8:
> message-id=<112420081325.17455.492AAB5E000238320000442F221555389407050C079002050C9A080C at comcast.net>
>
> This is the last entry for 4ABEF6FB0E8: No requeue. No delivery.
>
> Here is the trace of that email without the clutter.
>
> [root at mailgate ~]# grep 4ABEF6FB0E8: /var/log/maillog
> Nov 24 04:57:57 mailgate postfix/smtpd[15326]: 4ABEF6FB0E8:
> client=qmta10.emeryville.ca.mail.comcast.net[76.96.30.17]
> Nov 24 04:57:57 mailgate postfix/cleanup[13547]: 4ABEF6FB0E8: hold:
> header Received: from QMTA10.emeryville.ca.mail.comcast.net
> (qmta10.emeryville.ca.mail.comcast.net [76.96.30.17])??by
> mailgate.ptera.net (Postfix) with ESMTP id 4ABEF6FB0E8??for
> <rexroad at ptera.net>; Mon, 24  from
> qmta10.emeryville.ca.mail.comcast.net[76.96.30.17];
> from=<chucknvicki at comcast.net> to=<rexroad at ptera.net> proto=ESMTP
> helo=<QMTA10.emeryville.ca.mail.comcast.net>
> Nov 24 04:57:57 mailgate postfix/cleanup[13547]: 4ABEF6FB0E8:
> message-id=<112420081325.17455.492AAB5E000238320000442F221555389407050C079002050C9A080C at comcast.net>
> [root at mailgate ~]#
>
> Thanks
> Arthur
>
> -- 
> Arthur Stephens
> Senior Sales Technician
> Ptera Wireless Internet Service
> PO Box 135
> Liberty Lake, WA 99019
> 509-927-7837
> For technical support visit http://www.ptera.net/support
> -----------------------------------------------------------------------------
> "This message may contain confidential and/or propriety information,
> and is intended for the person/entity to whom it was originally
> addressed. Any use by others is strictly prohibited.
> Please note that any views or opinions presented in this email are solely
> those of the author and are not intended to represent those of the 
> company."
>
>
>
> __________ Información de NOD32, revisión 3639 (20081125) __________
>
> Este mensaje ha sido analizado con  NOD32 antivirus system
> http://www.nod32.com
>
>

--------------------------------------------------------------------------------

> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
> __________ Informacisn de NOD32, revisisn 3639 (20081125) __________
>
> Este mensaje ha sido analizado con  NOD32 antivirus system
> http://www.nod32.com
>
>

Could it be a "Spam List" issue, because of a time out?

Leave the

Spam List =

empty and restart mailscanner 