So this is a problem that has been intermittent for a month or so and
I haven't really been able to find a way to debug it until I found the
option 'full-log-dir' in spamdyke.conf.
My problem has been my users will occasionally complain that they have
gotten duplicates of the same message. It happens sporadically and
seemingly without pattern. If I looked at the headers on both
messages everything is the same exact for the top/last Received: line
which is usually a few minutes different; the message-ids were the
same in both messages. It was my suspicion that the sending
mailserver started the conversation, sent all of the message, but for
some reason didn't receive the close/end/quit command and never
removed the message for it's queue, however the receiving server had
enough of a message to actually deliver it to my user.
So I enabled the full-log-dir feature and waited for a user to have a
duplicate. I finally got one and it looks like the problem is with a
timeout. Below is the edited contents of file:
#############################################
[EMAIL PROTECTED] ~]# more 20080515_152028_64.18.2.171_exprod7og109.obsmtp.com
05/15/2008 15:20:28 STARTED: VERSION = 3.1.6+TLS, PID = 23327
05/15/2008 15:20:28 LEGEND: To remote host = <<< ; to child process =
>>> ; blocked by filter = <XX
05/15/2008 15:20:28 LEGEND: From filter to remote host = <FF ; from
filter to child process = FF>
<<< 05/15/2008 15:20:28
220 rsmail.mymailserver.tld ESMTP
>>> 05/15/2008 15:20:28
HELO exprod7og109.obsmtp.com
<<< 05/15/2008 15:20:28
250 rsmail.mymailserver.tld
>>> 05/15/2008 15:20:28
MAIL FROM:<[EMAIL PROTECTED]>
<<< 05/15/2008 15:20:28
250 ok
>>> 05/15/2008 15:20:28
RCPT TO:<[EMAIL PROTECTED]>
<<< 05/15/2008 15:20:28
250 ok
>>> 05/15/2008 15:20:28
RCPT TO:<[EMAIL PROTECTED]>
<<< 05/15/2008 15:20:28
250 ok
>>> 05/15/2008 15:20:29
DATA
<<< 05/15/2008 15:20:29
354 go ahead
>>> 05/15/2008 15:20:29
Received: from source ([63.90.125.11]) by exprod7ob109.postini.com
([64.18.6.12]) with SMTP;
Thu, 15 May 2008 12:20:18 PDT
Received: from mail.shrr.com ([63.90.125.10]) by mail.shrr.com with
Microsoft SMTPSVC(6.0.3790.3959);
Thu, 15 May 2008 15:17:43 -0400
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative;
... [ snipped message content ]...
------_=_NextPart_001_01C8B6C0.59C6D54D--
.
FF> 05/15/2008 15:23:30
.
QUIT
<FF 05/15/2008 15:23:30
421 Timeout. Talk faster next time.
<XX 05/15/2008 15:34:10
250 ok 1210880050 qp 23364
502 unimplemented (#5.5.1)
221 rsmail.mymailserver.tld
05/15/2008 15:34:10 CLOSED
[EMAIL PROTECTED] ~]#
#############################################
In a previous thread, a subscriber recommended adjusting the qmail
timeout to be lower than spamdyke's. Here is what the timeout
settings are on on my server:
[EMAIL PROTECTED] ~]# more /var/qmail/control/timeoutsmtpd
120
[EMAIL PROTECTED] ~]# grep -i timeout /etc/spamdyke.conf
# connection-timeout-secs=0 is disabling the feature
connection-timeout-secs=0
idle-timeout-secs=180
[EMAIL PROTECTED] ~]#
So it looks like the actual message data stopped sending at 05/15/2008
15:23:30 and got the "talk faster" error but didn't actually close the
connection until 05/15/2008 15:34:10.
So any ideas what I can try next to stop these duplicates?
-ken
--
Have a nice day ... unless you've made other plans.
_______________________________________________
spamdyke-users mailing list
spamdyke-users@spamdyke.org
http://www.spamdyke.org/mailman/listinfo/spamdyke-users
