<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hello,<br>
<br>
I upgraded our mail server to a new server. I did fresh installation
and configuration on the new server. Now I am having a problem: All
the spam scored between 5 to 10 used to forward to an email address
on the old server. But on the new server it is send to local
postmaster <a class="moz-txt-link-abbreviated" href="mailto:mailer-daemon@szeta.mycompany.com">mailer-daemon@szeta.mycompany.com</a>, which in turn end up
into my mail inbox.<br>
<br>
My new system is CentOS7/MailScanner 4.8.5. The old system is
CentOS5/MailScanner 4.8.1.<br>
<br>
Here is the maillog from the new server:<br>
<font face="Courier New, Courier, monospace">Sep 28 13:03:54 szeta
MailScanner[4853]: Spam Actions: message C12B74022E75A.A3B93
actions are forward,<a class="moz-txt-link-abbreviated" href="mailto:spamholder@mycompany.com">spamholder@mycompany.com</a><br>
Sep 28 13:03:54 szeta MailScanner[4853]: Requeue:
C12B74022E75A.A3B93 to 2D8044022E767<br>
Sep 28 13:03:54 szeta postfix/qmgr[4831]: 2D8044022E767:
from=<>, size=1039, nrcpt=1 (queue active)<br>
Sep 28 13:03:54 szeta MailScanner[4853]: Uninfected: Delivered 1
messages<br>
Sep 28 13:03:54 szeta postfix/pickup[6681]: 9519C4022E75A:
uid=5001 from=<mailer-daemon><br>
Sep 28 13:03:54 szeta postfix/pipe[7329]: 2D8044022E767:
to=<a class="moz-txt-link-rfc2396E" href="mailto:spamholder@mycompany.com"><spamholder@mycompany.com></a>, relay=autoresponder,
delay=3.1, delays=3.1/0/0/0.05, dsn=2.0.0, status=sent (delivered
via autoresponder service)<br>
Sep 28 13:03:54 szeta postfix/qmgr[4831]: 2D8044022E767: removed<br>
<b>Sep 28 13:03:54 szeta postfix/cleanup[7315]: 9519C4022E75A:
hold: header Received: by szeta.mycompany.com (Postfix, from
userid 5001)??id 9519C4022E75A; Mon, 28 Sep 2015 13:03:54 -0700
(PDT) from local; from=<>
to=<a class="moz-txt-link-rfc2396E" href="mailto:MAILER-DAEMON@szeta.mycompany.com"><MAILER-DAEMON@szeta.mycompany.com></a></b><br>
Sep 28 13:03:54 szeta postfix/cleanup[7315]: 9519C4022E75A:
message-id=<a class="moz-txt-link-rfc2396E" href="mailto:20150928200354.9519C4022E75A@szeta.mycompany.com"><20150928200354.9519C4022E75A@szeta.mycompany.com></a><br>
Sep 28 13:03:54 szeta MailScanner[4853]: Deleted 1 messages from
processing-database<br>
Sep 28 13:03:54 szeta MailScanner[4853]: New Batch: Scanning 1
messages, 2171 bytes<br>
Sep 28 13:03:54 szeta MailScanner[4853]: Requeue:
9519C4022E75A.AF06D to BCE564022E767<br>
Sep 28 13:03:54 szeta MailScanner[4853]: Unscanned: Delivered 1
messages<br>
Sep 28 13:03:54 szeta postfix/qmgr[4831]: BCE564022E767:
from=<>, size=1925, nrcpt=1 (queue active)<br>
Sep 28 13:03:54 szeta MailScanner[4853]: Spam Checks: Starting<br>
Sep 28 13:03:54 szeta postfix/cleanup[7315]: ACCC94022E75A:
message-id=<a class="moz-txt-link-rfc2396E" href="mailto:20150928200354.9519C4022E75A@szeta.mycompany.com"><20150928200354.9519C4022E75A@szeta.mycompany.com></a><br>
Sep 28 13:03:54 szeta postfix/local[7374]: BCE564022E767:
to=<a class="moz-txt-link-rfc2396E" href="mailto:mailer-daemon@szeta.mycompany.com"><mailer-daemon@szeta.mycompany.com></a>, relay=local,
delay=0.17, delays=0.13/0/0/0.04, dsn=2.0.0, status=sent
(forwarded as ACCC94022E75A)<br>
Sep 28 13:03:54 szeta postfix/qmgr[4831]: ACCC94022E75A:
from=<>, size=2082, nrcpt=1 (queue active)<br>
Sep 28 13:03:54 szeta postfix/qmgr[4831]: BCE564022E767: removed<br>
Sep 28 13:03:54 szeta postfix/virtual[7339]: ACCC94022E75A:
to=<a class="moz-txt-link-rfc2396E" href="mailto:gao@pztop.com"><gao@pztop.com></a>, relay=virtual, delay=0.09,
delays=0.04/0/0/0.05, dsn=2.0.0, status=sent (delivered to
maildir)<br>
Sep 28 13:03:54 szeta postfix/qmgr[4831]: ACCC94022E75A: removed<br>
Sep 28 13:03:54 szeta MailScanner[4853]: Deleted 1 messages from
processing-database</font><br>
<br>
I looked the maillog from the old system and it looks like this:<br>
<font face="Courier New, Courier, monospace">Sep 26 04:26:02 zeta
MailScanner[2970]: Spam Actions: message 0774980C8.A80AC actions
are <a class="moz-txt-link-abbreviated" href="mailto:spamholder@mycompany.com,forward">spamholder@mycompany.com,forward</a><br>
Sep 26 04:26:02 zeta MailScanner[2970]: Requeue: 0774980C8.A80AC
to 3CD1780D3<br>
Sep 26 04:26:02 zeta MailScanner[2970]: Uninfected: Delivered 1
messages<br>
Sep 26 04:26:02 zeta postfix/qmgr[2966]: 3CD1780D3: from=<>,
size=1409, nrcpt=1 (queue active)<br>
Sep 26 04:26:02 zeta MailScanner[2970]: Deleted 1 messages from
processing-database<br>
Sep 26 04:26:02 zeta postfix/pickup[2965]: C9F6C8127: uid=5001
from=<mailer-daemon><br>
Sep 26 04:26:02 zeta postfix/cleanup[3350]: C9F6C8127: hold:
header Received: by zeta.mycompany.com (Postfix, from userid
5001)??id C9F6$<br>
Sep 26 04:26:02 zeta postfix/pipe[3358]: 3CD1780D3:
to=<a class="moz-txt-link-rfc2396E" href="mailto:spamholder@mycompany.com"><spamholder@mycompany.com></a>, relay=autoresponder,
delay=8.2, delays=8.2/0.01/0/0.02, d$<br>
Sep 26 04:26:02 zeta postfix/qmgr[2966]: 3CD1780D3: removed<br>
Sep 26 04:26:02 zeta postfix/cleanup[3350]: C9F6C8127:
message-id=<a class="moz-txt-link-rfc2396E" href="mailto:20150926112555.0774980C8@zeta.mycompany.com"><20150926112555.0774980C8@zeta.mycompany.com></a><br>
Sep 26 04:26:06 zeta MailScanner[2973]: New Batch: Scanning 1
messages, 1718 bytes<br>
Sep 26 04:26:06 zeta MailScanner[2973]: Virus and Content
Scanning: Starting<br>
Sep 26 04:26:07 zeta MailScanner[2973]: Spam Checks: Starting<br>
Sep 26 04:26:08 zeta MailScanner[2973]: Message C9F6C8127.A12D0
from 127.0.0.1 () to mycompany.com is spam, SpamAssassin (not
cached, sc$<br>
Sep 26 04:26:08 zeta MailScanner[2973]: Spam Checks: Found 1 spam
messages<br>
Sep 26 04:26:08 zeta MailScanner[2973]: Spam Actions: message
C9F6C8127.A12D0 actions are <a class="moz-txt-link-abbreviated" href="mailto:spamholder@mycompany.com,forward">spamholder@mycompany.com,forward</a><br>
Sep 26 04:26:08 zeta MailScanner[2973]: Requeue: C9F6C8127.A12D0
to 0689F80C8<br>
Sep 26 04:26:08 zeta postfix/qmgr[2966]: 0689F80C8: from=<>,
size=1745, nrcpt=1 (queue active)<br>
Sep 26 04:26:08 zeta MailScanner[2973]: Uninfected: Delivered 1
messages<br>
Sep 26 04:26:08 zeta MailScanner[2973]: Deleted 1 messages from
processing-database<br>
Sep 26 04:26:08 zeta postfix/virtual[3373]: 0689F80C8:
to=<a class="moz-txt-link-rfc2396E" href="mailto:spamholder@mycompany.com"><spamholder@mycompany.com></a>, relay=virtual, delay=5.9,
delays=5.9/0.01/0/0.01, dsn=$<br>
Sep 26 04:26:08 zeta postfix/qmgr[2966]: 0689F80C8: removed</font><br>
<br>
I couldn't figure out what happend here on my new server. Could
someone give me a help to troubleshoot this issue please? <br>
<br>
Here is my master.cf<br>
<font face="Courier New, Courier, monospace">[root@szeta postfix]#
cat master.cf | egrep -v "^\#"<br>
smtp inet n - n - - smtpd<br>
-o content_filter=autoresponder:dummy<br>
-o smtpd_tls_security_level=none<br>
-o smtpd_sasl_auth_enable=no<br>
submission inet n - n - - smtpd<br>
-o content_filter=autoresponder:dummy<br>
-o smtpd_sasl_auth_enable=yes<br>
-o smtpd_client_restrictions=permit_sasl_authenticated,reject<br>
pickup fifo n - n 60 1 pickup<br>
cleanup unix n - n - 0 cleanup<br>
qmgr fifo n - n 300 1 qmgr<br>
tlsmgr unix - - n 1000? 1 tlsmgr<br>
rewrite unix - - n - -
trivial-rewrite<br>
bounce unix - - n - 0 bounce<br>
defer unix - - n - 0 bounce<br>
trace unix - - n - 0 bounce<br>
verify unix - - n - 1 verify<br>
flush unix n - n 1000? 0 flush<br>
proxymap unix - - n - - proxymap<br>
proxywrite unix - - n - 1 proxymap<br>
smtp unix - - n - - smtp<br>
relay unix - - n - - smtp<br>
showq unix n - n - - showq<br>
error unix - - n - - error<br>
retry unix - - n - - error<br>
discard unix - - n - - discard<br>
local unix - n n - - local<br>
virtual unix - n n - - virtual<br>
lmtp unix - - n - - lmtp<br>
anvil unix - - n - 1 anvil<br>
scache unix - - n - 1 scache<br>
autoresponder unix - n n - - pipe<br>
flags=Fq user=autoresponse argv=/usr/local/sbin/autoresponse
-s ${sender} -r ${original_recipient} -S ${sasl_username} -C
${client_address}<br>
policy unix - n n - - spawn<br>
user=nobody argv=/usr/bin/perl
/usr/local/sbin/postfix-policyd-spf-perl<br>
<br>
</font><br>
Here I use an autoresponder which is a bash script. see
<a class="moz-txt-link-freetext" href="http://nefaria.com/autoresponse/">http://nefaria.com/autoresponse/</a><br>
<br>
<br>
Thanks a lot!<br>
<br>
Gao<br>
<br>
</body>
</html>