From: Alexandre Balistrieri (balisir.inpe.br)
Date: Thu Jul 12 2007 - 14:32:14 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Thursday 12 July 2007, Noel Jones wrote:
> At 01:24 PM 7/12/2007, Alexandre Balistrieri wrote:
> >And worse, I did not find "LMTP id 29656-17" in amavisd-new current log.
>
> The amavisd-new log will only contain the id, 29656-17.
ok and i did no find it in amavisd-new current log.
>
> >Jul 12 13:27:09 localhost postfix/cleanup[19937]: 0BE906F6: reject: header
> >Received: from smtp.sir.inpe.br ([10.0.0.1])? by localhost
> >(filtro2.sir.inpe.br [10.0.0.2]) (amavisd-new, port 10024)? with LMTP id
> >29656-17 for <fipecq_andreasir.inpe.br>;? Fri, 6 Jul 2007 15:20:58 from
> >unknown[150.163.41.211]; from=<fipecq_andreaadm.inpe.br>
> >to=<unimed_valdineiaadm.inpe.br> proto=ESMTP helo=<[150.163.41.211]>:
> > 5.7.1 forged mail server name in Received: header:
>
> Is your mail getting looping somehow and passing through twice?
I don't know.

I did not understand this string "Fri, 6 Jul 2007 15:20:58 ..." (is this a
field?)

In amavisd-new log 0.gz (last week) i have found (coincidence?):
Jul 6 15:20:58 coringa amavis[29656]: (29656-17) LMTP:
[10.0.0.2]:10024 /var/amavisd/tmp/amavis-20070706T150532-29656:
<sardinhafipecqvida.or
g.br> -> <fipecq_andreasir.inpe.br> Received: SIZE=484783 from
smtp.sir.inpe.br ([10.0.0.1]) by localhost (filtro2.sir.inpe.br [10.0.0.2])
(a
mavisd-new, port 10024) with LMTP id 29656-17 for <fipecq_andreasir.inpe.br>;
Fri, 6 Jul 2007 15:20:58 -0300 (BRST)
Jul 6 15:20:58 coringa amavis[29656]: (29656-17) Checking: hdbXnnn0gana
[200.252.17.208] <sardinhafipecqvida.org.br> -> <fipecq_andreasir.i
npe.br>
Jul 6 15:20:58 coringa amavis[29656]: (29656-17) p004 1 Content-Type:
multipart/mixed
Jul 6 15:20:58 coringa amavis[29656]: (29656-17) p005 1/1 Content-Type:
multipart/alternative
Jul 6 15:20:58 coringa amavis[29656]: (29656-17) p001 1/1/1 Content-Type:
text/plain, size: 2 B, name:
Jul 6 15:20:58 coringa amavis[29656]: (29656-17) p002 1/1/2 Content-Type:
text/html, size: 251 B, name:
Jul 6 15:20:58 coringa amavis[29656]: (29656-17) p003 1/2 Content-Type:
application/vnd.ms-powerpoint, size: 352768 B, name: a_fabula_da_pere
reca.pps
Jul 6 15:20:59 coringa amavis[29656]: (29656-17) spam_scan: not wasting time
on SA, message longer than 204800 bytes: 932+477601
Jul 6 15:20:59 coringa amavis[29656]: (29656-17) FWD via SMTP:
<sardinhafipecqvida.org.br> -> <fipecq_andreasir.inpe.br>, 250 2.6.0 Ok,
id=
29656-17, from MTA([10.0.0.1]:10025): 250 2.0.0 Ok: queued as DF36D6CD
Jul 6 15:20:59 coringa amavis[29656]: (29656-17) Passed CLEAN,
[200.252.17.208] [200.252.17.208] <sardinhafipecqvida.org.br> ->
<fipecq_andr
easir.inpe.br>, Message-ID:
<8B1BC0392128774BBB9AC5CB823869FF43EDB1svida003.fipecqvida.org.br>, mail_id:
hdbXnnn0gana, Hits: -, 1888 ms
Jul 6 15:20:59 coringa amavis[29656]: (29656-17) TIMING [total 1896 ms] -
SMTP LHLO: 5 (0%)0, SMTP pre-MAIL: 2 (0%)0, lookup_sql: 8 (0%)1, SM
TP pre-DATA-flush: 3 (0%)1, SMTP DATA: 178 (9%)10, body_hash: 10 (1%)11,
gen_mail_id: 1 (0%)11, mime_decode: 171 (9%)20, get-file-type3: 103 (
5%)25, decompose_part: 1 (0%)25, parts_decode: 1 (0%)25, AV-scan-1: 1196 (63%)
89, spam-wb-list: 6 (0%)89, update_cache: 2 (0%)89, deal_with_ma
il_size: 1 (0%)89, fwd-connect: 11 (1%)90, fwd-mail-from: 1 (0%)90,
fwd-rcpt-to: 1 (0%)90, write-header: 7 (0%)90, fwd-data: 113 (6%)96, fwd-d
ata-end: 26 (1%)98, fwd-rundown: 6 (0%)98, main_log_entry: 38 (2%)100,
unlink-3-files: 2 (0%)100, rundown: 1 (0%)100
Jul 6 15:20:59 coringa amavis[29656]: (29656-17) extra modules
loaded: /etc/mail/spamassassin/FuzzyOcr.pm, MLDBM.pm, String/Approx.pm

--
[]s
Alexandre Balistrieri

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]