On Sat, Feb 21, 2009 at 07:53:30PM +0000, Daniel C wrote:
> -------------------------------------------------------------------
> Message #1
> -------------------------------------------------------------------
> Return-Path:
> Received: from localhost (homer.mydomain.com [10.0.32.13])
> by mail.mydomain.com (Postfix) with ESMTP id 078CC372452
> for ; Sat, 21 Feb 2009 13:58:44 -0500 (EST)
> Received: from mail.mydomain.com ([10.0.32.13])
> by localhost (homer.mydomain.com [10.0.32.13]) (amavisd-new, port 10024)
> with LMTP id Bhudjsn5a1ui for ;
> Sat, 21 Feb 2009 13:58:40 -0500 (EST)
> Received: from [10.0.0.120] (ip-xxx.xxx.xxx.xxx.dsl-xxx.net [xxx.xxx.xxx.xxx])
> by mail.mydomain.com (Postfix) with ESMTP id 725511D9C79
> for ; Sat, 21 Feb 2009 13:58:40 -0500 (EST)
A broken HTML encapsulator is eating all content inside <>, in your
messages, can you post the headers and logs without going trhough
the broken (cross-site scripting vulnerable, ...) HTML generator?
This message is submitted via SMTP from outside.
> -------------------------------------------------------------------
> Message #2
> -------------------------------------------------------------------
> Received: from localhost (homer.mydomain.com [10.0.32.13])
> by mail.mydomain.com (Postfix) with ESMTP id 19F711903CB
> for ; Sat, 21 Feb 2009 13:58:47 -0500 (EST)
> Received: from mail.mydomain.com ([10.0.32.13])
> by localhost (homer.mydomain.com [10.0.32.13]) (amavisd-new, port 10024)
> with LMTP id xFoqocXefM+1 for ;
> Sat, 21 Feb 2009 13:58:40 -0500 (EST)
> Received: by mail.mydomain.com (Postfix, from userid 207)
> id 99AC83CFF59; Sat, 21 Feb 2009 13:58:40 -0500 (EST)
This message is submitted locally. Remove the code that is generating
this local message copy via sendmail(1).
> --------------------------------------------------------
> Extract from my log
> --------------------------------------------------------
> Feb 21 13:58:40 homer postfix/smtpd[6316]: connect from
> ip-xxx.xxx.xxx.xxx.dsl-xxx.net[xxx.xxx.xxx.xxx]
> Feb 21 13:58:40 homer postfix/smtpd[6316]: 725511D9C79:
> client=ip-xxx.xxx.xxx.xxx.dsl-xxx.net[xxx.xxx.xxx.xxx]
> Feb 21 13:58:40 homer postfix/cleanup[6344]: 725511D9C79: message-id=
> Feb 21 13:58:40 homer postfix/qmgr[4591]: 725511D9C79: from=, size=766,
> nrcpt=1 (queue active)
> Feb 21 13:58:40 homer amavis[23470]: (23470-09) LMTP::10024
> /var/amavis/tmp/amavis-20090221T131325-23470: -> SIZE=766 Received: from
> mail.mydomain.com ([10.0.32.13]) by localhost (homer.mydomain.com
> [10.0.32.13]) (amavisd-new, port 10024) with LMTP for ; Sat, 21 Feb 2009
> 13:58:40 -0500 (EST)
> Feb 21 13:58:40 homer postfix/smtpd[6316]: disconnect from
> ip-xxx.xxx.xxx.xxx.dsl-xxx.net[xxx.xxx.xxx.xxx]
> Feb 21 13:58:40 homer amavis[23470]: (23470-09) smtp connection cache, dt:
> 1259.0, state: 0
> Feb 21 13:58:40 homer amavis[23470]: (23470-09) Checking: Bhudjsn5a1ui
> [xxx.xxx.xxx.xxx] ->
> Feb 21 13:58:40 homer amavis[23470]: (23470-09) p001 1 Content-Type:
> text/html, size: 198 B, name:
What is user 207 and what is creating the locally submitted message below?
> Feb 21 13:58:40 homer postfix/pickup[4590]: 99AC83CFF59: uid=207 from=
> Feb 21 13:58:40 homer postfix/cleanup[6344]: 99AC83CFF59: message-id=
> Feb 21 13:58:40 homer postfix/qmgr[4591]: 99AC83CFF59: from=, size=705,
> nrcpt=1 (queue active)
> Feb 21 13:58:40 homer amavis[14164]: (14164-12) LMTP::10024
> /var/amavis/tmp/amavis-20090221T123157-14164: -> SIZE=705 Received: from
> mail.mydomain.com ([10.0.32.13]) by localhost (homer.mydomain.com
> [10.0.32.13]) (amavisd-new, port 10024) with LMTP for ; Sat, 21 Feb 2009
> 13:58:40 -0500 (EST)
> Feb 21 13:58:40 homer amavis[14164]: (14164-12) smtp connection cache, dt:
> 9.2, state: 0
> Feb 21 13:58:40 homer amavis[14164]: (14164-12) Checking: xFoqocXefM+1 ->
> Feb 21 13:58:40 homer amavis[14164]: (14164-12) p001 1 Content-Type:
> text/html, size: 199 B, name:
> Feb 21 13:58:44 homer amavis[23470]: (23470-09) SPAM-TAG, -> , No,
> score=-1.451 required=3 tests=[AWL=-0.410, BAYES_00=-2.599,
> HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RDNS_DYNAMIC=0.1]
> Feb 21 13:58:44 homer postfix/smtpd[6349]: connect from
> homer.mydomain.com[10.0.32.13]
> Feb 21 13:58:44 homer postfix/smtpd[6349]: 078CC372452:
> client=homer.mydomain.com[10.0.32.13]
> Feb 21 13:58:44 homer postfix/cleanup[6344]: 078CC372452: message-id=
> Feb 21 13:58:44 homer postfix/qmgr[4591]: 078CC372452: from=, size=1430,
> nrcpt=1 (queue active)
> Feb 21 13:58:44 homer postfix/smtpd[6349]: disconnect from
> homer.mydomain.com[10.0.32.13]
> Feb 21 13:58:44 homer amavis[23470]: (23470-09) FWD via SMTP: -> ,BODY=7BIT
> 250 2.0.0 Ok, id=23470-09, from MTA([10.0.32.13]:10025): 250 2.0.0 Ok: queued
> as 078CC372452
> Feb 21 13:58:44 homer postfix/qmgr[4591]: 078CC372452: removed
> Feb 21 13:58:44 homer postfix/virtual[6352]: 078CC372452: to=, relay=virtual,
> delay=0.01, delays=0.01/0/0/0.01, dsn=2.0.0, status=sent (delivered to
> maildir)
> Feb 21 13:58:44 homer amavis[23470]: (23470-09) Passed CLEAN,
> [xxx.xxx.xxx.xxx] [xxx.xxx.xxx.xxx] -> , Message-ID: , mail_id:
> Bhudjsn5a1ui, Hits: -1.451, size: 766, queued_as: 078CC372452, 3523 ms
> Feb 21 13:58:44 homer postfix/qmgr[4591]: 725511D9C79: removed
> Feb 21 13:58:44 homer postfix/lmtp[6345]: 725511D9C79: to=,
> relay=10.0.32.13[10.0.32.13]:10024, delay=3.8, delays=0.23/0/0/3.5,
> dsn=2.0.0, status=sent (250 2.0.0 Ok, id=23470-09, from
> MTA([10.0.32.13]:10025): 250 2.0.0 Ok: queued as 078CC372452)
> Feb 21 13:58:44 homer amavis[23470]: (23470-09) TIMING [total 3526 ms] - SMTP
> greeting: 1 (0%)0, SMTP LHLO: 0 (0%)0, SMTP pre-MAIL: 0 (0%)0, SMTP
> pre-DATA-flush: 1 (0%)0, SMTP DATA: 37 (1%)1, check_init: 0 (0%)1,
> digest_hdr: 0 (0%)1, digest_body: 0 (0%)1, gen_mail_id: 1 (0%)1, mime_decode:
> 5 (0%)1, get-file-type1: 12 (0%)2, parts_decode: 0 (0%)2, check_header: 1
> (0%)2, AV-scan-1: 2 (0%)2, spam-wb-list: 1 (0%)2, SA parse: 1 (0%)2, SA
> check: 3433 (97%)99, update_cache: 4 (0%)99, decide_mail_destiny: 1 (0%)99,
> fwd-connect: 4 (0%)99, fwd-mail-pip: 2 (0%)100, fwd-rcpt-pip: 0 (0%)100,
> fwd-data-chkpnt: 0 (0%)100, write-header: 0 (0%)100, fwd-data-contents: 0
> (0%)100, fwd-end-chkpnt: 6 (0%)100, prepare-dsn: 1 (0%)100, main_log_entry: 7
> (0%)100, update_snmp: 1 (0%)100, SMTP pre-response: 0 (0%)100, SMTP response:
> 0 (0%)100, unlink-1-files: 0 (0%)100, rundown: 1 (0%)100
> Feb 21 13:58:47 homer amavis[14164]: (14164-12) SPAM-TAG, -> , No,
> score=-1.1 required=3 tests=[AWL=0.042, BAYES_00=-2.599, HTML_MESSAGE=0.001,
> MIME_HTML_ONLY=1.457, NO_RELAYS=-0.001]
> Feb 21 13:58:47 homer postfix/smtpd[6349]: connect from
> homer.mydomain.com[10.0.32.13]
> Feb 21 13:58:47 homer postfix/smtpd[6349]: 19F711903CB:
> client=homer.mydomain.com[10.0.32.13]
> Feb 21 13:58:47 homer postfix/cleanup[6344]: 19F711903CB: message-id=
> Feb 21 13:58:47 homer postfix/qmgr[4591]: 19F711903CB: from=, size=1364,
> nrcpt=1 (queue active)
> Feb 21 13:58:47 homer postfix/smtpd[6349]: disconnect from
> homer.mydomain.com[10.0.32.13]
> Feb 21 13:58:47 homer amavis[14164]: (14164-12) FWD via SMTP: -> ,BODY=7BIT
> 250 2.0.0 Ok, id=14164-12, from MTA([10.0.32.13]:10025): 250 2.0.0 Ok: queued
> as 19F711903CB
> Feb 21 13:58:47 homer amavis[14164]: (14164-12) Passed CLEAN, -> ,
> Message-ID: , mail_id: xFoqocXefM+1, Hits: -1.1, size: 705, queued_as:
> 19F711903CB, 6463 ms
> Feb 21 13:58:47 homer postfix/lmtp[6361]: 99AC83CFF59: to=,
> relay=10.0.32.13[10.0.32.13]:10024, delay=6.5, delays=0.04/0.01/0/6.5,
> dsn=2.0.0, status=sent (250 2.0.0 Ok, id=14164-12, from
> MTA([10.0.32.13]:10025): 250 2.0.0 Ok: queued as 19F711903CB)
> Feb 21 13:58:47 homer postfix/qmgr[4591]: 99AC83CFF59: removed
> Feb 21 13:58:47 homer amavis[14164]: (14164-12) TIMING [total 6467 ms] - SMTP
> greeting: 1 (0%)0, SMTP LHLO: 0 (0%)0, SMTP pre-MAIL: 0 (0%)0, SMTP
> pre-DATA-flush: 1 (0%)0, SMTP DATA: 40 (1%)1, check_init: 1 (0%)1,
> digest_hdr: 0 (0%)1, digest_body: 0 (0%)1, gen_mail_id: 1 (0%)1, mime_decode:
> 5 (0%)1, get-file-type1: 12 (0%)1, parts_decode: 0 (0%)1, check_header: 1
> (0%)1, AV-scan-1: 2 (0%)1, spam-wb-list: 1 (0%)1, SA parse: 1 (0%)1, SA
> check: 6360 (98%)99, update_cache: 4 (0%)99, decide_mail_destiny: 1 (0%)99,
> fwd-connect: 5 (0%)100, fwd-mail-pip: 1 (0%)100, fwd-rcpt-pip: 0 (0%)100,
> fwd-data-chkpnt: 0 (0%)100, write-header: 0 (0%)100, fwd-data-contents: 0
> (0%)100, fwd-end-chkpnt: 18 (0%)100, prepare-dsn: 1 (0%)100, main_log_entry:
> 6 (0%)100, update_snmp: 1 (0%)100, SMTP pre-response: 0 (0%)100, SMTP
> response: 1 (0%)100, unlink-1-files: 0 (0%)100, rundown: 1 (0%)100
> Feb 21 13:58:47 homer postfix/virtual[6352]: 19F711903CB: to=, relay=virtual,
> delay=0.04, delays=0.02/0/0/0.02, dsn=2.0.0, status=sent (delivered to
> maildir)
> Feb 21 13:58:47 homer postfix/qmgr[4591]: 19F711903CB: removed
>
>
>
--
Viktor.
Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.
To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:[email protected]?body=unsubscribe%20postfix-users>
If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.
