I have a user that was sent a 10mb attachment. They report that it was kicked back to the sender saying max message size exceeded. This domain doesn't have a max message size set, nor does the particular user, nor does he have a max MAILBOX size.
In the logs, I am seeing something very strange: SMTPD (b07e000b01ca61ae) [64.4.56.32 (bay101-f22.bay101.hotmail.com) ] EHLO hotmail.com SMTPD (b07e000b01ca61ae) [64.4.56.32 (bay101-f22.bay101.hotmail.com) ] MAIL FROM:<[EMAIL PROTECTED]> SMTPD (b07e000b01ca61ae) [64.4.56.32 (bay101-f22.bay101.hotmail.com) ] RCPT TO:<[EMAIL PROTECTED]> SMTP (b07e000b01ca61ae) processing S:\imail\spool\Qb07e000b01ca61ae.SMD There is about a 30 minute difference in the timestamps on the last two lines. These are ALL the lines containing the queue number. The log file seems incomplete, because on every incoming connection, I usually get first a "connect REMOTEIP (REMOTE_SERVER) port PORTNO" line, followed by the ehlo, mail from, rcpt to. Then I usually get a "spoolfilepath" line after the rcpt to. Then I usually get Imail's "performing antispam checks" before the "processing" line, even though I have completely disabled all of Imail's antispam features. So some lines seem to be missing. After that is where it passes off to Declude, and Declude reports that its last action was "IGNORE" on this message (My logs are on HIGH, so I won't post the whole thing, just the last line, but all expected lines are there): 11/23/2004 17:19:08 Qb07e000b01ca61ae Last action = IGNORE. But there is no further mention of the queue number in the Imail logs. Did Declude bomb while passing back to Imail? Or did Imail drop the ball? How can I tell? I'm almost sure this isn't a hardware issue, because we are pretty seriously overpowered for our current mail volume (less than 30K/day) with a dual 2.4 Xeon w/ HT enabled, gig RAM, SCSI 15Krpm drives, separate physical mirrors for system/mailboxes/spool, defragged daily. I mean we aren't even pushing this thing yet. Dan Horne Web Services Administrator TAIS Web Wilcox World Travel & Tours [EMAIL PROTECTED] ---------------------------------------------------- CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. SPAM-FREE 1.0(2476) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
