Felix, > I am using regular Unix syslogd. There is no supression like (last > message repeated x times) as far as I know... I tried loglevel 0,1,2,3 > before I wrote to the mailing list but forgot to mention it. Now I tried > even loglevel 5, but the same behaviour.
Thanks for checking for that possibility. > What is interesting (and always the same) is the id... > > The first correct GTUBE Mail has the same ID (not sub-id) like the first > incorrect mail The log_id is just a process id (pid), followed by a sequential task number, which increments with each new mail message received from MTA by this child process. Eventually (on reaching $max_requests), a child process is retired and substituted by a new one - with a fresh PID and starting to count tasks from one again. > to illustrate it: > First mail causes: > Jan 13 17:46:36 anthares amavis[26587]: (26587-01) ESMTP< MAIL FROM: > > First mail WITHOUT the log entry has: > Jan 13 17:47:02 anthares amavis[26587]: (26587-02) ESMTP< MAIL FROM: > > Has it something to do with number "xxxx-01" and "xxxx-02"? I discovered > this appendix is rising further and further... 26587-05 or 26588-04 as > example.... Maybe you get a 'main log entry' only with the first message processed by each child process. > Btw - with loglevel 5 there are also logentries from amavisd - but not > the required "blocked spam" one.... > I got the following as last entry: > Jan 13 17:47:04 anthares amavis[26587]: (26587-02) one_response_for_all > <b...@blub.com>: all DISCARD, '250 2.7.1 Ok, discarded, UBE, id=26587-02' > > The first mails causes 3 more log entries after the entry above: > Jan 13 17:46:48 anthares amavis[26588]: (26588-01) parse_received: ; = > Wed, 13 Jan 2010 17:46:47 +0100 (CET)\t(envelope-from b...@blub.com)/Wed, > 13 Jan 2010 17:46:47 +0100 (CET)\t(envelope-from b...@blub.com)// > Jan 13 17:46:48 anthares amavis[26588]: (26588-01) parse_received: ; = > Wed, 13 Jan 2010 17:46:47 +0100 (CET)\t(envelope-from b...@blub.com)/Wed, > 13 Jan 2010 17:46:47 +0100 (CET)\t(envelope-from b...@blub.com)// > Jan 13 17:46:48 anthares amavis[26588]: (26588-01) Blocked SPAM, > [x.x.x.x] [x.x.x.x] <b...@blub.com> -> <b...@receiver.net>, Message-ID: > <4b4df8bf.5080...@blub.com>, Hits: 1003.059, 313 ms > > All these lines are missing after two mails :-/ This isn't something that a native amavisd does. Must be specific to Maia Mailguard. Seems like the process just stops further activities on a message right after deciding to discard it. Mark ------------------------------------------------------------------------------ Throughout its 18-year history, RSA Conference consistently attracts the world's best and brightest in the field, creating opportunities for Conference attendees to learn about information security's most important issues through interactions with peers, luminaries and emerging and established companies. http://p.sf.net/sfu/rsaconf-dev2dev _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/