Hello list, I've had this ongoing problem but have left it hanging as it is difficult to test sometimes, but one of my clients' clients has just gotten around to sending a test email with attachments to me (to test) and several of my client's employees and we're all experiencing stripped attachments from said email. Both my client and I use QMT hosts on CentOS 5 similarly configured, both using DSPAM.
Below are 1) the clients QMT clamd and send logs and 2) my QMT clamd and send logs. The test email was sent by the sender to my client and me with 4 pdf attachments to users on each QMT host. As you can see in each log there the 4 scanned attachments (clamd log) and larger sized email logged (send log). Viewing the mail on the server and in the email client the attachments are gone and the size of the email changed. I've changed user and domain info, everything else is un-touched. 1a) Client's clamd log of questionable email 2014-05-08 10:31:16.745172500 Listening daemon: PID: 1606 2014-05-08 10:31:16.745177500 MaxQueue set to: 100 2014-05-08 10:40:28.678671500 /var/qmail/simscan/1399567228.63204.1757/msg.1399567228.63204.1757: OK 2014-05-08 10:40:28.679188500 /var/qmail/simscan/1399567228.63204.1757/addr.1399567228.63204.1757: OK 2014-05-08 10:40:28.680575500 /var/qmail/simscan/1399567228.63204.1757/textfile1: OK 2014-05-08 10:40:28.680735500 /var/qmail/simscan/1399567228.63204.1757/textfile2: OK 2014-05-08 10:41:06.642352500 /var/qmail/simscan/1399567258.553367.1809/msg.1399567258.553367.1809: OK 2014-05-08 10:41:06.642528500 /var/qmail/simscan/1399567258.553367.1809/addr.1399567258.553367.1809: OK 2014-05-08 10:41:06.643731500 /var/qmail/simscan/1399567258.553367.1809/textfile1: OK 2014-05-08 10:41:06.643909500 /var/qmail/simscan/1399567258.553367.1809/textfile2: OK 2014-05-08 10:41:06.644907500 /var/qmail/simscan/1399567258.553367.1809/Roof & CMU Veneer Wall.pdf: OK 2014-05-08 10:41:06.645739500 /var/qmail/simscan/1399567258.553367.1809/Panel Wall.pdf: OK 2014-05-08 10:41:06.648692500 /var/qmail/simscan/1399567258.553367.1809/BPS_Elevations_100% SD.PDF: OK 2014-05-08 10:41:06.650922500 /var/qmail/simscan/1399567258.553367.1809/20140414111036551.pdf: OK 2014-05-08 10:51:05.884090500 No stats for Database check - forcing reload 1b) Client's send log of questionable email 2014-05-08 10:41:06.879908500 new msg 655979 2014-05-08 10:41:06.879931500 info msg 655979: bytes 2962846 from <clientscli...@clientsclientdomain.com> qp 1820 uid 89 2014-05-08 10:41:06.881908500 starting delivery 6524: msg 655979 to local mydomain.com...@mydomain.com 2014-05-08 10:41:06.883269500 status: local 1/10 remote 0/60 2014-05-08 10:41:11.099262500 delivery 6524: success: did_0+0+1/ 2014-05-08 10:41:11.099263500 status: local 0/10 remote 0/60 2014-05-08 10:41:11.099263500 end msg 655979 .......... 2a) My clamd log of questionable email: 2014-05-08 10:38:34.593747500 /var/qmail/simscan/1399567110.56384.1642/msg.1399567110.56384.1642: OK 2014-05-08 10:38:34.593750500 /var/qmail/simscan/1399567110.56384.1642/addr.1399567110.56384.1642: OK 2014-05-08 10:38:34.595607500 /var/qmail/simscan/1399567110.56384.1642/textfile1: OK 2014-05-08 10:38:34.596172500 /var/qmail/simscan/1399567110.56384.1642/textfile2: OK 2014-05-08 10:38:34.598097500 /var/qmail/simscan/1399567110.56384.1642/Roof & CMU Veneer Wall.pdf: OK 2014-05-08 10:38:34.603765500 /var/qmail/simscan/1399567110.56384.1642/Panel Wall.pdf: OK 2014-05-08 10:38:34.604838500 /var/qmail/simscan/1399567110.56384.1642/BPS_Elevations_100% SD.PDF: OK 2014-05-08 10:38:34.609207500 /var/qmail/simscan/1399567110.56384.1642/20140414111036551.pdf: OK 2b) My send log of questionable email: 2014-05-08 10:38:35.010130500 new msg 2883665 2014-05-08 10:38:35.010132500 info msg 2883665: bytes 2962824 from <clientscli...@clientsclientdomain.com> qp 1648 uid 89 2014-05-08 10:38:35.026076500 starting delivery 14591: msg 2883665 to local clientdomain.com-postmas...@clientdomain.com 2014-05-08 10:38:35.026079500 status: local 1/10 remote 0/60 2014-05-08 10:38:35.026080500 starting delivery 14592: msg 2883665 to local clientdomain.com-employ...@clientdomain.com 2014-05-08 10:38:35.026082500 status: local 2/10 remote 0/60 2014-05-08 10:38:35.393330500 delivery 14591: success: did_0+0+1/ 2014-05-08 10:38:35.393332500 status: local 1/10 remote 0/60 2014-05-08 10:38:35.782489500 delivery 14592: success: did_0+0+1/ 2014-05-08 10:38:35.782492500 status: local 0/10 remote 0/60 2014-05-08 10:38:35.782493500 end msg 2883665 This is a relatively new but ongoing issue. Can anyone point me in the right direction to solve this? EricB --------------------------------------------------------------------- To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
