Re: Repeated mails

[Matt Hayes]

On 10/13/2010 09:43 PM, Alberto Lepe wrote:
On Thu, Oct 14, 2010 at 10:33 AM, Matt Hayes <domin...@slackadelic.com
<mailto:domin...@slackadelic.com>> wrote:


    On 10/11/2010 10:26 PM, Alberto Lepe wrote:

        Hello, I need some advice with a problem (I believe is an easy
        question
        but I couldn't find an answer):

        My server logs is "normally" reporting twice almost every time
        someone
        is sending an email:

        ./mail.log.0:Oct 11 08:58:23 mail postfix/qmgr[5276]: CCC3C1C015:
        from=<nak...@example.co.jp <mailto:nak...@example.co.jp>
        <mailto:nak...@example.co.jp <mailto:nak...@example.co.jp>>>,
        size=127578,

        nrcpt=1 (queue active)
        ./mail.log.0:Oct 11 08:58:36 mail postfix/qmgr[5276]: E88691CCFF:
        from=<nak...@example.co.jp <mailto:nak...@example.co.jp>
        <mailto:nak...@example.co.jp <mailto:nak...@example.co.jp>>>,
        size=128101,

        nrcpt=1 (queue active)

        Looking more in detail those 2 ids:

        /var/log/mail.log.0:Oct 11 08:58:19 mail postfix/smtpd[3333]:
        CCC3C1C015: client=p2147-ipad21xsajima.ne.jp
        <http://p2147-ipad21xsajima.ne.jp>
        <http://p2147-ipad21xsajima.ne.jp>[20.0.0.147]

        /var/log/mail.log.0:Oct 11 08:58:19 mail postfix/cleanup[2680]:
        CCC3C1C015: message-id=<00ec01cb68d6$d7e41450$18011...@nakata>
        /var/log/mail.log.0:Oct 11 08:58:23 mail postfix/qmgr[5276]:
        CCC3C1C015:
        from=<nak...@example.co.jp <mailto:nak...@example.co.jp>
        <mailto:nak...@example.co.jp <mailto:nak...@example.co.jp>>>,
        size=127578,

        nrcpt=1 (queue active)
        /var/log/mail.log.0:Oct 11 08:58:36 mail postfix/smtp[2746]:
        CCC3C1C015:
        to=<hin...@example.co.jp <mailto:hin...@example.co.jp>
        <mailto:hin...@example.co.jp <mailto:hin...@example.co.jp>>>,

        relay=127.0.0.1[127.0.0.1]:10024, delay=17, delays=3.2/0/0/14,
        dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as E88691CCFF)
        /var/log/mail.log.0:Oct 11 08:58:36 mail postfix/qmgr[5276]:
        CCC3C1C015:
        removed

        /var/log/mail.log.0:Oct 11 08:58:36 mail postfix/smtpd[3349]:
        E88691CCFF: client=localhost[127.0.0.1]
        /var/log/mail.log.0:Oct 11 08:58:36 mail postfix/cleanup[3350]:
        E88691CCFF: message-id=<00ec01cb68d6$d7e41450$18011...@nakata>
        /var/log/mail.log.0:Oct 11 08:58:36 mail postfix/qmgr[5276]:
        E88691CCFF:
        from=<nak...@example.co.jp <mailto:nak...@example.co.jp>
        <mailto:nak...@example.co.jp <mailto:nak...@example.co.jp>>>,
        size=128101,

        nrcpt=1 (queue active)
        /var/log/mail.log.0:Oct 11 08:58:36 mail amavis[32232]: (32232-18)
        Passed SPAM, [20.0.0.147] [20.0.0.147] <nak...@example.co.jp
        <mailto:nak...@example.co.jp>
        <mailto:nak...@example.co.jp <mailto:nak...@example.co.jp>>> ->
        <hin...@example.co.jp <mailto:hin...@example.co.jp>
        <mailto:hin...@example.co.jp <mailto:hin...@example.co.jp>>>,
        quarantine: 6/spam-6qyX68lC4hKy.gz,

        Message-ID: <00ec01cb68d6$d7e41450$18011...@nakata>, mail_id:
        6qyX68lC4hKy, Hits: 8.687, size: 127578, queued_as: E88691CCFF,
        13947 ms
        /var/log/mail.log.0:Oct 11 08:58:36 mail postfix/smtp[2746]:
        CCC3C1C015:
        to=<hin...@example.co.jp <mailto:hin...@example.co.jp>
        <mailto:hin...@example.co.jp <mailto:hin...@example.co.jp>>>,

        relay=127.0.0.1[127.0.0.1]:10024, delay=17, delays=3.2/0/0/14,
        dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as E88691CCFF)
        /var/log/mail.log.0:Oct 11 08:58:36 mail postfix/local[3971]:
        E88691CCFF: to=<hin...@mail.mailserver.jp
        <mailto:hin...@mail.mailserver.jp>
        <mailto:hin...@mail.mailserver.jp
        <mailto:hin...@mail.mailserver.jp>>>,
        orig_to=<hin...@example.co.jp <mailto:hin...@example.co.jp>
        <mailto:hin...@example.co.jp <mailto:hin...@example.co.jp>>>,
        relay=local, delay=0.03,

        delays=0.01/0/0/0.02, dsn=2.0.0, status=sent (delivered to maildir)
        /var/log/mail.log.0:Oct 11 08:58:36 mail postfix/qmgr[5276]:
        E88691CCFF:
        removed

        It seems to me that "CCC3C1C015" mail was delivered to
        "hin...@example.co.jp <mailto:hin...@example.co.jp>
        <mailto:hin...@example.co.jp <mailto:hin...@example.co.jp>>" and
        "E88691CCFF"

        was delivered to quarantine and that is why is logged twice. Is
        that right?

        One of the users (nakata) is reporting that everytime he/she
        sends an
        email to anyone (for example, hinsyo), they get several copies
        of the
        same mail at once.

        The spam-assassin filter is still on testing period so some
        messages are
        marked as SPAM only but are not blocked. Could that be the reason of
        duplicated emails?

        Thank you in advance.



    It appears you are using amavisd-new as a content_filter?

    -Matt


Yes Matt. I'm using amavisd-new in port 10024.


Doesn't appear to be duplicate emails.. appears to me that amavisd-new 
is re-injecting email into postfix and it just 'looks' duplicate.. 
unless my eyes are failing me...

-Matt