<div dir="ltr"><div>Yeah I'd take a good look at the setup as you're also running spamd explicitly as well, rathan than the internal calls to spamassassin from mailscanner.<br><br></div>What instructions did you use to install MailScanner?<br></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature">-- <br>Martin Hepworth, CISSP<br>Oxford, UK</div></div>
<br><div class="gmail_quote">On 4 March 2016 at 14:36, Daniel Malmgren <span dir="ltr"><<a href="mailto:daniel@kolefors.se" target="_blank">daniel@kolefors.se</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi.<br>
I'm completely new to MailScanner (installed it today), so please don't shoot me if this is dead simple. I got everything working, but it seems for some reason all mails are being scanned twice. I suspect this isn't MailScanners fault, but rather me having set up my postfix in a stupid manner. There are different message id's for the two mails being scanned. Any hints about what could be wrong? Please tell me what further information could be useful. This is on a Debian 8.3 server, running postfix and dovecot.<br>
<br>
This is what I get in my mail.log (domains replaced):<br>
(note that daniel is an alias for malmgren, so all mail to daniel ends up in malmgrens mailbox. I get the exact same problem when sending directly to malmgren though.)<br>
<br>
Mar 4 14:14:16 cube postfix/smtpd[29904]: connect from <a href="http://webadmin.myworkdomain.se" rel="noreferrer" target="_blank">webadmin.myworkdomain.se</a>[193.42.159.5]<br>
Mar 4 14:14:17 cube postfix/cleanup[29908]: 1B4BD4004F: hold: header Received: from <a href="http://smtp.myworkdomain.se" rel="noreferrer" target="_blank">smtp.myworkdomain.se</a> (<a href="http://webadmin.myworkdomain.se" rel="noreferrer" target="_blank">webadmin.myworkdomain.se</a> [193.42.159.5])??by cube (Postfix) with ESMTPS id 1B4BD4004F??for <<a href="mailto:daniel@myhomedomain.se" target="_blank">daniel@myhomedomain.se</a>>; Fri, 4 Mar 2016 14:14:16 +0100 (CET) from <a href="http://webadmin.myworkdomain.se" rel="noreferrer" target="_blank">webadmin.myworkdomain.se</a>[193.42.159.5]; from=<prvs=187193eaf2=<a href="mailto:Daniel.Malmgren@myworkdomain.se" target="_blank">Daniel.Malmgren@myworkdomain.se</a>> to=<<a href="mailto:daniel@myhomedomain.se" target="_blank">daniel@myhomedomain.se</a>> proto=ESMTP helo=<<a href="http://smtp.myworkdomain.se" rel="noreferrer" target="_blank">smtp.myworkdomain.se</a>><br>
Mar 4 14:14:17 cube postfix/cleanup[29908]: 1B4BD4004F: message-id=<<a href="mailto:1193eba94cd847849abfc1e6e595511a@ucs-ex-02.myworkdomain.se" target="_blank">1193eba94cd847849abfc1e6e595511a@ucs-ex-02.myworkdomain.se</a>><br>
Mar 4 14:14:17 cube postfix/smtpd[29904]: disconnect from <a href="http://webadmin.myworkdomain.se" rel="noreferrer" target="_blank">webadmin.myworkdomain.se</a>[193.42.159.5]<br>
Mar 4 14:14:22 cube MailScanner[29485]: New Batch: Scanning 1 messages, 14054 bytes<br>
Mar 4 14:14:22 cube MailScanner[29485]: Virus and Content Scanning: Starting<br>
Mar 4 14:15:04 cube postfix/smtpd[29904]: connect from localhost[127.0.0.1]<br>
Mar 4 14:15:04 cube postfix/smtpd[29904]: disconnect from localhost[127.0.0.1]<br>
Mar 4 14:15:27 cube MailScanner[29485]: Requeue: 1B4BD4004F.AB70C to EC1A64028E<br>
Mar 4 14:15:27 cube postfix/qmgr[15119]: EC1A64028E: from=<prvs=187193eaf2=<a href="mailto:daniel.malmgren@myworkdomain.se" target="_blank">daniel.malmgren@myworkdomain.se</a>>, size=13369, nrcpt=1 (queue active)<br>
Mar 4 14:15:27 cube MailScanner[29485]: Uninfected: Delivered 1 messages<br>
Mar 4 14:15:27 cube spamd[9821]: spamd: connection from localhost [127.0.0.1]:47051 to port 783, fd 5<br>
Mar 4 14:15:27 cube spamd[9821]: spamd: setuid to debian-spamd succeeded<br>
Mar 4 14:15:27 cube spamd[9821]: spamd: processing message <<a href="mailto:1193eba94cd847849abfc1e6e595511a@ucs-ex-02.myworkdomain.se" target="_blank">1193eba94cd847849abfc1e6e595511a@ucs-ex-02.myworkdomain.se</a>> for debian-spamd:116<br>
Mar 4 14:15:27 cube MailScanner[29485]: Deleted 1 messages from processing-database<br>
Mar 4 14:15:27 cube MailScanner[29485]: Logging message 1B4BD4004F.AB70C to SQL<br>
Mar 4 14:15:35 cube spamd[9821]: spamd: clean message (0.0/5.0) for debian-spamd:116 in 7.9 seconds, 13418 bytes.<br>
Mar 4 14:15:35 cube spamd[9821]: spamd: result: . 0 - HTML_IMAGE_ONLY_32,HTML_MESSAGE,RCVD_IN_DNSWL_NONE scantime=7.9,size=13418,user=debian-spamd,uid=116,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=47051,mid=<<a href="mailto:1193eba94cd847849abfc1e6e595511a@ucs-ex-02.myworkdomain.se" target="_blank">1193eba94cd847849abfc1e6e595511a@ucs-ex-02.myworkdomain.se</a>>,autolearn=ham autolearn_force=no<br>
Mar 4 14:15:36 cube spamd[4003]: prefork: child states: I<br>
Mar 4 14:15:36 cube postfix/pickup[23000]: 289EE4004F: uid=116 from=<prvs=187193eaf2=<a href="mailto:daniel.malmgren@myworkdomain.se" target="_blank">daniel.malmgren@myworkdomain.se</a>><br>
Mar 4 14:15:36 cube postfix/pipe[29946]: EC1A64028E: to=<<a href="mailto:malmgren@myhomedomain.se" target="_blank">malmgren@myhomedomain.se</a>>, orig_to=<<a href="mailto:daniel@myhomedomain.se" target="_blank">daniel@myhomedomain.se</a>>, relay=spamfilter, delay=79, delays=71/0.02/0/8.2, dsn=2.0.0, status=sent (delivered via spamfilter service)<br>
Mar 4 14:15:36 cube postfix/qmgr[15119]: EC1A64028E: removed<br>
Mar 4 14:15:36 cube postfix/cleanup[29908]: 289EE4004F: hold: header Received: by cube (Postfix, from userid 116)??id 289EE4004F; Fri, 4 Mar 2016 14:15:35 +0100 (CET) from local; from=<prvs=187193eaf2=<a href="mailto:daniel.malmgren@myworkdomain.se" target="_blank">daniel.malmgren@myworkdomain.se</a>> to=<<a href="mailto:malmgren@myhomedomain.se" target="_blank">malmgren@myhomedomain.se</a>><br>
Mar 4 14:15:36 cube postfix/cleanup[29908]: 289EE4004F: message-id=<<a href="mailto:1193eba94cd847849abfc1e6e595511a@ucs-ex-02.myworkdomain.se" target="_blank">1193eba94cd847849abfc1e6e595511a@ucs-ex-02.myworkdomain.se</a>><br>
Mar 4 14:15:43 cube MailScanner[29485]: New Batch: Scanning 1 messages, 14059 bytes<br>
Mar 4 14:15:43 cube MailScanner[29485]: Virus and Content Scanning: Starting<br>
Mar 4 14:16:44 cube MailScanner[29485]: SpamAssassin cache hit for message 289EE4004F.A3592<br>
Mar 4 14:16:44 cube MailScanner[29485]: Requeue: 289EE4004F.A3592 to 7F6B1402AB<br>
Mar 4 14:16:44 cube postfix/qmgr[15119]: 7F6B1402AB: from=<prvs=187193eaf2=<a href="mailto:daniel.malmgren@myworkdomain.se" target="_blank">daniel.malmgren@myworkdomain.se</a>>, size=13818, nrcpt=1 (queue active)<br>
Mar 4 14:16:44 cube MailScanner[29485]: Uninfected: Delivered 1 messages<br>
Mar 4 14:16:44 cube MailScanner[29485]: Deleted 1 messages from processing-database<br>
Mar 4 14:16:44 cube MailScanner[29485]: Logging message 289EE4004F.A3592 to SQL<br>
Mar 4 14:16:44 cube dovecot: lmtp(30007): Connect from local<br>
Mar 4 14:16:45 cube dovecot: lmtp(30007, malmgren): XKKvNbyK2VY3dQAAs8rsrw: sieve: msgid=<<a href="mailto:1193eba94cd847849abfc1e6e595511a@ucs-ex-02.myworkdomain.se" target="_blank">1193eba94cd847849abfc1e6e595511a@ucs-ex-02.myworkdomain.se</a>>: stored mail into mailbox 'Daniel'<br>
Mar 4 14:16:45 cube postfix/lmtp[30006]: 7F6B1402AB: to=<<a href="mailto:malmgren@myhomedomain.se" target="_blank">malmgren@myhomedomain.se</a>>, relay=cube[private/dovecot-lmtp], delay=78, delays=77/0.02/0.05/0.91, dsn=2.0.0, status=sent (250 2.0.0 <<a href="mailto:malmgren@myhomedomain.se" target="_blank">malmgren@myhomedomain.se</a>> XKKvNbyK2VY3dQAAs8rsrw Saved)<br>
Mar 4 14:16:45 cube dovecot: lmtp(30007): Disconnect from local: Successful quit<br>
Mar 4 14:16:45 cube postfix/qmgr[15119]: 7F6B1402AB: removed<br>
<br>
Regards<span class="HOEnZb"><font color="#888888"><br>
Daniel Malmgren<br>
<br>
<br>
-- <br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/listinfo/mailscanner" rel="noreferrer" target="_blank">http://lists.mailscanner.info/listinfo/mailscanner</a><br>
<br>
</font></span></blockquote></div><br></div>