Hi,

I have a mail server with the following softwares installed:

Sendmail
Procmail
MailScanner with SpamAssassin and Anti-virus software

All software are updated with last versions and the process is working
correct. As sendmail receives a message, it passes to MailScanner,
which passes to SpamAssassin and Anti-Virus Software. After,
MailScanner returns to sendmail and the message is passed to procmail.
Than the message is released to the user at /var/spool/mail. This
structure is working for years.

Now the problem: Yesterday a user complain about messages that did not
arrived to her (6 messages). I looked on the procmail log + sendmail
log and found something curious. From procmail log, I can see that
only 3 messages were delivered to the user´s inbox folder. From
sendmail log, I can see that 6 messages were delivered to the user.
Notice that the log is ok for sendmail and no error is being showed.
Below you can see part of the logs.

I was wondering were is the 3 messages. The user did not receive them
and neither deleted. Actually from procmail log I can see that this is
true, as there is only 3 messages. Any hint to solve this mistery?

Thanks for any information and on this.

Regards.

Marcelo

PS: From the logs below, notice that message 1 was delivered but not
message 2. There is no reference to message 2 at procmail.log, but
apparently nothing wrong happened to that message, as we can see from
sendmail.log. Any comment or suggestion? Thanks

PROCMAIL.LOG

MESSAGE 1
From XXX@terra.com.br Wed Mar 19 09:31:34 2008
Subject: YYYYYYYYYYYYYYYYYY
Folder: /var/spool/mail/lucy
278546

SENDMAIL.LOG

MESSAGE 1
Mar 19 09:31:32 iaibr1 sm-mta-mailscanner[28333]: m2JCVVMZ028333:
from=<XXX@terra.com.br>,
Mar 19 09:31:32 iaibr1 sm-mta-mailscanner[28333]: m2JCVVMZ028333:
Milter accept: message
Mar 19 09:31:34 iaibr1 MailScanner[20061]: Virus Scanning completed at
165499 bytes per second
Mar 19 09:31:34 iaibr1 MailScanner[20061]: Uninfected: Delivered 1
messages
Mar 19 09:31:34 iaibr1 MailScanner[20061]: Batch completed at 156836
bytes per second (277248 / 1)
Mar 19 09:31:34 iaibr1 MailScanner[20061]: Batch (1 message) processed
in 1.77 seconds
Mar 19 09:31:34 iaibr1 sendmail[28343]: m2JCVVMZ028333:
to=<lucy@dir.iai.int>, delay=00:00:03, xdelay=00:00:00, mailer=local,
pri=396417, dsn=2.0.0, stat=Sent

MESSAGE 2
Mar 19 09:59:26 iaibr1 sm-mta-mailscanner[30598]: m2JCxOwx030598:
from=<XXX@terra.com.br>,
Mar 19 09:59:26 iaibr1 sm-mta-mailscanner[30598]: m2JCxOwx030598:
Milter accept: message
Mar 19 09:59:28 iaibr1 MailScanner[29021]: Uninfected: Delivered 1
messages
Mar 19 09:59:28 iaibr1 MailScanner[29021]: Batch completed at 890281
bytes per second (1795543 / 2)
Mar 19 09:59:28 iaibr1 MailScanner[29021]: Batch (1 message) processed
in 2.02 seconds
Mar 19 09:59:29 iaibr1 sendmail[30609]: m2JCxOwx030598:
to=<lucy@dir.iai.int>, delay=00:00:05, xdelay=00:00:01, mailer=local,
pri=1914711, dsn=2.0.0, stat=Sent

On Thu, 20 Mar 2008, lmachite@dir.iai.int wrote:

> I was wondering were is the 3 messages. The user did not receive them
> and neither deleted. Actually from procmail log I can see that this is
> true, as there is only 3 messages. Any hint to solve this mistery?
>

It is possible they were marked as high score spam, what do you do with
that... store? deliver? delete? forward?

Do you have log spam = yes ?
MailScanner logs to facility 'mail' everything it does.

This question is beter placed on the mailscanner mailing list

--
Cheers
Res

mysql> update auth set Framed-IP-Address='127.0.0.127' where user= 'troll';