| |||||||||||||||||||||||||||||||
|
I am using postfix with policyd-weight, KAV (Kaspersky Anti-Virus) and SA on a mail gateway for two internal exchange servers. Here is a cutout from the mail log on an incoming mail: --- Sep 20 10:53:57 relay postfix/smtpd[29187]: connect from russian-caravan.cloud9.net[168.100.1.4] Sep 20 10:53:58 relay postfix/policyd-weight[29443]: decided action=PREPEND X-policyd-weight: using cached result; rate: -7.6; <client=168.100.1.4> <helo=russian-caravan.cloud9.net> <from=owner-postfix-users> <to=tb>; delay: 1s Sep 20 10:53:58 relay postfix/smtpd[29187]: NOQUEUE: filter: RCPT from russian-caravan.cloud9.net[168.100.1.4]: <tb>: Recipient address triggers FILTER lmtp:127.0.0.1:10030; from=<owner-postfix-users> to=<tb> proto=ESMTP helo=<russian-caravan.cloud9.net> Sep 20 10:53:58 relay postfix/smtpd[29187]: 10437E000091: client=russian-caravan.cloud9.net[168.100.1.4] Sep 20 10:53:58 relay postfix/cleanup[30195]: 10437E000091: message-id=<46F234FC.10501> Sep 20 10:53:58 relay postfix/qmgr[20319]: 10437E000091: from=<owner-postfix-users>, size=9067, nrcpt=1 (queue active) Sep 20 10:53:58 relay postfix/smtpd[29187]: disconnect from russian-caravan.cloud9.net[168.100.1.4] Sep 20 10:53:58 relay postfix/smtpd[457]: connect from localhost[127.0.0.1] Sep 20 10:53:58 relay postfix/smtpd[457]: 7D817E0000A3: client=localhost[127.0.0.1] Sep 20 10:53:58 relay postfix/cleanup[29773]: 7D817E0000A3: message-id=<46F234FC.10501> KAV -> [20.09.07 10:53:58 I] [672] l8KArwC00000672 <-- from=<owner-postfix-users> KAV -> [20.09.07 10:53:58 I] [672] l8KArwC00000672 <-- message_id=<<46F234FC.10501>> Sep 20 10:53:58 relay postfix/qmgr[20319]: 7D817E0000A3: from=<owner-postfix-users>, size=9333, nrcpt=1 (queue active) KAV -> [20.09.07 10:53:58 I] [672] l8KArwC00000672 <-- info message_id=<<46F234FC.10501>>, found=<>, cured=<>, warning=<>, suspicious=<> KAV -> [20.09.07 10:53:58 I] [672] l8KArwC00000672 === group=<default>, from=<owner-postfix-users>,check result=<clean> KAV -> [20.09.07 10:53:58 I] [672] l8KArwC00000672 --> to=<tb>,status=<sent> Sep 20 10:53:58 relay postfix/smtpd[457]: disconnect from localhost[127.0.0.1] Sep 20 10:53:58 relay postfix/lmtp[453]: 10437E000091: to=<tb>, relay=127.0.0.1[127.0.0.1]:10030, delay=0.71, delays=0.53/0/0.04/0.14, dsn=2.0.0, status=sent (250 2.0.0 <tb> Ok) Sep 20 10:53:58 relay postfix/qmgr[20319]: 10437E000091: removed Sep 20 10:53:58 relay spamd[20240]: spamd: got connection over /var/run/spamd.socket Sep 20 10:53:58 relay spamd[20240]: spamd: setuid to nobody succeeded Sep 20 10:53:58 relay spamd[20240]: spamd: processing message <46F234FC.10501> for nobody:65534 Sep 20 10:54:00 relay spamd[20240]: spamd: clean message (-1.3/6.0) for nobody:65534 in 2.3 seconds, 9154 bytes. Sep 20 10:54:00 relay spamd[20240]: spamd: result: . -1 - BAYES_00,MISSING_HEADERS scantime=2.3,size=9154,user=nobody,uid=65534,required_score=6.0,rhost=lo calhost,raddr=127.0.0.1,rport=/var/run/spamd.socket,mid=<46F234FC.10501@ free.fr>,bayes=0.000000,autolearn=no Sep 20 10:54:00 relay postfix/pickup[29969]: DD42AE000091: uid=65534 from=<owner-postfix-users> Sep 20 10:54:00 relay postfix/pipe[32072]: 7D817E0000A3: to=<tb>, relay=spamassassin, delay=2.4, delays=0.05/0/0/2.3, dsn=2.0.0, status=sent (delivered via spamassassin service) Sep 20 10:54:00 relay postfix/qmgr[20319]: 7D817E0000A3: removed Sep 20 10:54:00 relay postfix/cleanup[30195]: DD42AE000091: message-id=<46F234FC.10501> Sep 20 10:54:00 relay postfix/qmgr[20319]: DD42AE000091: from=<owner-postfix-users>, size=9656, nrcpt=1 (queue active) Sep 20 10:54:00 relay spamd[20230]: prefork: child states: II Sep 20 10:54:00 relay postfix/smtp[30297]: DD42AE000091: to=<tb>, relay=internal.exchange.server[1.2.3.4]:25, delay=0.07, delays=0.01/0/0/0.06, dsn=2.6.0, status=sent (250 2.6.0 <46F234FC.10501> Queued mail for delivery) Sep 20 10:54:00 relay postfix/qmgr[20319]: DD42AE000091: removed --- One incoming mail gets three different queue ids (10437E000091, 7D817E0000A3, DD42AE000091), because the mail is transported over KAV and SA. So when I want to track an incoming mail later on, I cannot use the queue id for it. Is there a way to change this, so that only one queue id is being used? Or a script, that can track a message with different queue ids? Cutouts from the used config files... main.cf: smtpd_recipient_restrictions = [...], check_recipient_access hash:/etc/postfix/recipients_access, [...] recipients_access: [...] tol-energy.de FILTER lmtp:127.0.0.1:10030 [...] master.cf: [...] 127.0.0.1:10030 inet n n n - 20 spawn user=kluser argv=/opt/kav/5.5/kav4mailservers/bin/smtpscanner 127.0.0.1:10031 inet n - n - 21 smtpd -o content_filter=spamassassin -o local_recipient_maps= -o relay_recipient_maps= -o smtpd_restriction_classes= -o smtpd_client_restrictions= -o smtpd_helo_restrictions= -o smtpd_sender_restrictions= -o mynetworks=127.0.0.0/8 -o strict_rfc821_envelopes=yes -o smtpd_error_sleep_time=0 -o smtpd_soft_error_limit=1001 -o smtpd_hard_error_limit=1000 -o myhostname=relay spamassassin unix - n n - 20 pipe flags=Rq user=nobody argv=/usr/bin/spamc -U /var/run/spamd.socket -f -e /usr/sbin/sendmail -oi -f ${sender} ${recipient} [...] Thanks! -- Best Regards, Thomas Babut
| ||||||||||||||||||||||||||||||
© 2004-2008 readlist.com