[Declude.Virus] log question
Hi all, We had some problems with a spam assassin box filling up over the past weekend and, needless to say, it caused some grief with mail delivery. The problem I'm having presently is that there are a few legitimate emails that got logged in Imail and declude, but didn't get delivered properly. Here is a snip from the declude log (I think) highlighting one of the emails. 10:53:34 Q850dc49c00d6246c Tests failed [weight=-5]: IPNOTINMX=IGNORE CATCHALLMAILS=IGNORE I'm not sure exactly what I'm looking at, or if this is the cause of why the message didn't get delivered. If I'm reading this right, it seems that the message failed the listed tests and was tossed. If that's the case, did it get put into a folder I can recover it from or no? Thanks for your help, Thomas Doxtater Systems Administrator Finishline Studios [EMAIL PROTECTED] Office: 608.253.4088
Re: [Declude.Virus] log question
Thomas, The line you are looking for is the "Last Action" line. The line you posted means the message triggered the ipnotinmx test which normally is not used to punish messages. This message had a total weight of -5. From the information provided Declude did not toss that message. You need to now search your Imail logs and see if what happened next. If you post more log snippets it might shed some more light. Darrell ---Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Thomas Doxtater To: declude.virus@declude.com Sent: Wednesday, January 26, 2005 6:11 PM Subject: [Declude.Virus] log question Hi all, We had some problems with a spam assassin box filling up over the past weekend and, needless to say, it caused some grief with mail delivery. The problem I'm having presently is that there are a few legitimate emails that got logged in Imail and declude, but didn't get delivered properly. Here is a snip from the declude log (I think) highlighting one of the emails. 10:53:34 Q850dc49c00d6246c Tests failed [weight=-5]: IPNOTINMX=IGNORE CATCHALLMAILS=IGNORE I'm not sure exactly what I'm looking at, or if this is the cause of why the message didn't get delivered. If I'm reading this right, it seems that the message failed the listed tests and was tossed. If that's the case, did it get put into a folder I can recover it from or no? Thanks for your help, Thomas Doxtater Systems Administrator Finishline Studios [EMAIL PROTECTED] Office: 608.253.4088
Re: [Declude.Virus] log question
Thomas, I am going to assume that this message passed Declude JunkMail, and if logged there it also passed Declude Virus if you have that installed in standard configuration. If you want to see what happened to the message, look in your IMail log file for "850dc49c00d6246c" if you are using IMail 8.1x, otherwise, try the Mail From address. IMail should log the SMTP session and you should be able to piece that together and figure out what happened. Matt Thomas Doxtater wrote: Hi all, We had some problems with a spam assassin box filling up over the past weekend and, needless to say, it caused some grief with mail delivery. The problem I'm having presently is that there are a few legitimate emails that got logged in Imail and declude, but didn't get delivered properly. Here is a snip from the declude log (I think) highlighting one of the emails. 10:53:34 Q850dc49c00d6246c Tests failed [weight=-5]: IPNOTINMX=IGNORE CATCHALLMAILS=IGNORE I'm not sure exactly what I'm looking at, or if this is the cause of why the message didn't get delivered. If I'm reading this right, it seems that the message failed the listed tests and was tossed. If that's the case, did it get put into a folder I can recover it from or no? Thanks for your help, Thomas Doxtater Systems Administrator Finishline Studios [EMAIL PROTECTED] Office: 608.253.4088
[Declude.Virus] Log Question
Title: Log Question Scott, What level logging will show the emails being sent out for virus notifications. We are still experiencing an issue with two or more people needing to be notified, in our case, only one is receiving the email (postmaster.eml). Thanks for the aid. ___ Keith Johnson, MCP Network Engineer Network Advocates, Inc. Tel: 502.412.1050 Fax: 502.412.1058 Email: [EMAIL PROTECTED] Good pings come in small packets
Re: [Declude.Virus] Log Question
What level logging will show the emails being sent out for virus notifications. We are still experiencing an issue with two or more people needing to be notified, in our case, only one is receiving the email (postmaster.eml). Thanks for the aid. Only the debug mode will show that information. For multiple recipients, you can either have them in the To: header separated by *just* a comma (for example, To: [EMAIL PROTECTED],[EMAIL PROTECTED], not To: [EMAIL PROTECTED], [EMAIL PROTECTED]), or you can have separate .eml files (for example, a postmaster1.eml and postmaster2.eml file, one with To: [EMAIL PROTECTED] and the other with To: [EMAIL PROTECTED]). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
