You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by dbsanders <br...@cybersand.com> on 2007/04/27 02:15:14 UTC

Mail Lost? How can this happen?

Not sure this is an SA problem at all, but maybe you can give me a clue.
I seem to be losing messages. They are received by my mail system:

Apr 26 10:28:45 heckle sendmail[9295]: [ID 801593 mail.info] l3QHShh9009295:
from=<xx...@sandirect.com>, size=78591, class=0, nrcpts=1,
msgid=<!&!AAAAAAAAAAAYAAAAAAAAAKUg0ihnLChGuixmNt9Cx7vCgAAAEAAAAOF11ZqeVbpKqSdCl5ZwK6wBAAAAAA==@sandirect.c,
proto=ESMTP, daemon=MTA, relay=ds2085.appliedi.net [216.82.71.202]
Apr 26 10:28:46 heckle sendmail[9297]: [ID 801593 mail.info] l3QHShh9009295:
to=<xx...@northwoodconnect.com>, delay=00:00:02, xdelay=00:00:00,
mailer=local, pri=108821, dsn=2.0.0, stat=Sent

(no mention of spamd or any spam processing for some reason in the system
mail log for this message)

procmail.log shows:

>From william@sandirect.com  Thu Apr 26 10:28:46 2007
 Subject: Northwood Connect - Qlogic  <#SANQ4747>
  Folder: SpamBox                                                        
78896

So it looks like this was processed by Spamd and classified as spam.
However, the message is NOT in SpamBox. I've looked. Many times.

I use sendmail with procmail for local delivery, on Solaris 10 SPARC.

--------------- procmailrc -------
DROPPRIVS=yes
:0fw
* < 256000
| spamc

:0:
* ^X-Spam-Status: Yes
SpamBox

-- 
View this message in context: http://www.nabble.com/Mail-Lost--How-can-this-happen--tf3655105.html#a10211386
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.


Re: Mail Lost? How can this happen?

Posted by Nigel Frankcom <ni...@blue-canoe.net>.
It won't be SA doing the deleting. SA does nothing with email except
scan and add the headers (if so set). 

What happens to the mail before and after is entirely down to your
mail prog. You can't bounce a message from SA, nor can you delete a
message from SA; all you can do is scan it and add some headers to say
if SA thinks it's ham or spam. 

If you are missing mail it may be worth seeing if you have rbl list
based refusal at your MTA.

Bottom line ... SA doesn't delete emails... it may mis-label them but
it doesn't delete.

If mails are being lost then the screw up is at the MTA; SA doesn't
delete emails (I think I may have said that already :-D)

Hope that helps.

KR

Nigel



On Fri, 27 Apr 2007 08:23:28 -0700 (PDT), dbsanders
<br...@cybersand.com> wrote:

>
>Strange, I checked the log and there is no closing bracket in the message id.
>Maybe this screwed with something in the SA/procmail process.
>
>
>
>
>Michael Scheidell wrote:
>> 
>> 
>>> -----Original Message-----
>>> From: dbsanders [mailto:bret@cybersand.com] 
>>> Sent: Thursday, April 26, 2007 8:15 PM
>>> To: users@spamassassin.apache.org
>>> Subject: Mail Lost? How can this happen?
>>> 
>>> 
>>> 
>>> Not sure this is an SA problem at all, but maybe you can give 
>>> me a clue. I seem to be losing messages. They are received by 
>>> my mail system:
>>> 
>>> Apr 26 10:28:45 heckle sendmail[9295]: [ID 801593 mail.info] 
>>> l3QHShh9009295: from=<xx...@sandirect.com>, size=78591, 
>>> class=0, nrcpts=1, 
>>> msgid=<!&!AAAAAAAAAAAYAAAAAAAAAKUg0ihnLChGuixmNt9Cx7vCgAAAEAAA
>>> AOF11ZqeVbpKqSdCl5ZwK6wBAAAAAA==@sandirect.c,
>> 
>> Did you cut off the logs here? I don't see a closing > in message id.
>> procmail.log shows:
>>> 
>>> From william@sandirect.com  Thu Apr 26 10:28:46 2007
>>>  Subject: Northwood Connect - Qlogic  <#SANQ4747>
>>>   Folder: SpamBox                                             
>> 
>> Procmail problem, join procmail list.
>> 
>> If SA was done with it and sent it to procmail, then procmail dropped
>> it.
>> 
>> 
>> -- 
>> Michael Scheidell, CTO
>> Join SECNAP at SecureWorld Atlanta, May 1-2, May 16-17 in Philadelphia
>> http://www.secnap.com/events for free and discounted seminar tickets
>> _________________________________________________________________________
>> This email has been scanned and certified safe by SpammerTrap(tm).
>> For Information please see http://www.spammertrap.com
>> _________________________________________________________________________
>> 
>> 

RE: Mail Lost? How can this happen?

Posted by dbsanders <br...@cybersand.com>.
Strange, I checked the log and there is no closing bracket in the message id.
Maybe this screwed with something in the SA/procmail process.




Michael Scheidell wrote:
> 
> 
>> -----Original Message-----
>> From: dbsanders [mailto:bret@cybersand.com] 
>> Sent: Thursday, April 26, 2007 8:15 PM
>> To: users@spamassassin.apache.org
>> Subject: Mail Lost? How can this happen?
>> 
>> 
>> 
>> Not sure this is an SA problem at all, but maybe you can give 
>> me a clue. I seem to be losing messages. They are received by 
>> my mail system:
>> 
>> Apr 26 10:28:45 heckle sendmail[9295]: [ID 801593 mail.info] 
>> l3QHShh9009295: from=<xx...@sandirect.com>, size=78591, 
>> class=0, nrcpts=1, 
>> msgid=<!&!AAAAAAAAAAAYAAAAAAAAAKUg0ihnLChGuixmNt9Cx7vCgAAAEAAA
>> AOF11ZqeVbpKqSdCl5ZwK6wBAAAAAA==@sandirect.c,
> 
> Did you cut off the logs here? I don't see a closing > in message id.
> procmail.log shows:
>> 
>> From william@sandirect.com  Thu Apr 26 10:28:46 2007
>>  Subject: Northwood Connect - Qlogic  <#SANQ4747>
>>   Folder: SpamBox                                             
> 
> Procmail problem, join procmail list.
> 
> If SA was done with it and sent it to procmail, then procmail dropped
> it.
> 
> 
> -- 
> Michael Scheidell, CTO
> Join SECNAP at SecureWorld Atlanta, May 1-2, May 16-17 in Philadelphia
> http://www.secnap.com/events for free and discounted seminar tickets
> _________________________________________________________________________
> This email has been scanned and certified safe by SpammerTrap(tm).
> For Information please see http://www.spammertrap.com
> _________________________________________________________________________
> 
> 

-- 
View this message in context: http://www.nabble.com/Mail-Lost--How-can-this-happen--tf3655105.html#a10221174
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.