Felix,

> I am using regular Unix syslogd. There is no supression like (last
> message repeated x times) as far as I know... I tried loglevel 0,1,2,3
> before I wrote to the mailing list but forgot to mention it. Now I tried
> even loglevel 5, but the same behaviour.

Thanks for checking for that possibility.

> What is interesting (and always the same) is the id...
> 
> The first correct GTUBE Mail has the same ID (not sub-id) like the first
> incorrect mail

The log_id is just a process id (pid), followed by a sequential task number,
which increments with each new mail message received from MTA by this
child process.

Eventually (on reaching $max_requests), a child process is retired
and substituted by a new one - with a fresh PID and starting to count
tasks from one again.

> to illustrate it:
> First mail causes:
> Jan 13 17:46:36 anthares amavis[26587]: (26587-01) ESMTP< MAIL FROM:
> 
> First mail WITHOUT the log entry has:
> Jan 13 17:47:02 anthares amavis[26587]: (26587-02) ESMTP< MAIL FROM:
> 
> Has it something to do with number "xxxx-01" and "xxxx-02"? I discovered
> this appendix is rising further and further... 26587-05 or 26588-04 as
> example....

Maybe you get a 'main log entry' only with the first message
processed by each child process.

> Btw - with loglevel 5 there are also logentries from amavisd - but not
> the required "blocked spam" one....
> I got the following as last entry:
> Jan 13 17:47:04 anthares amavis[26587]: (26587-02) one_response_for_all
> <b...@blub.com>: all DISCARD, '250 2.7.1 Ok, discarded, UBE, id=26587-02'
> 
> The first mails causes 3 more log entries after the entry above:
> Jan 13 17:46:48 anthares amavis[26588]: (26588-01) parse_received: ; = 
> Wed, 13 Jan 2010 17:46:47 +0100 (CET)\t(envelope-from b...@blub.com)/Wed, 
> 13 Jan 2010 17:46:47 +0100 (CET)\t(envelope-from b...@blub.com)//
> Jan 13 17:46:48 anthares amavis[26588]: (26588-01) parse_received: ; = 
> Wed, 13 Jan 2010 17:46:47 +0100 (CET)\t(envelope-from b...@blub.com)/Wed, 
> 13 Jan 2010 17:46:47 +0100 (CET)\t(envelope-from b...@blub.com)//
> Jan 13 17:46:48 anthares amavis[26588]: (26588-01) Blocked SPAM, 
> [x.x.x.x] [x.x.x.x] <b...@blub.com> -> <b...@receiver.net>, Message-ID: 
> <4b4df8bf.5080...@blub.com>, Hits: 1003.059, 313 ms
> 
> All these lines are missing after two mails :-/

This isn't something that a native amavisd does. Must be specific to
Maia Mailguard. Seems like the process just stops further activities
on a message right after deciding to discard it.

  Mark

------------------------------------------------------------------------------
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 
 AMaViS-HowTos:http://www.amavis.org/howto/ 

Reply via email to