Fabio, > I see that the email forwarded to amavis has size 5757 but the email > sent from amavis to postfix after scanning is 6356... > The difference is relatively small I see, if the email was duplicated by > amavisd I should see that the size of the email is almost duplicated, true?
Two Received headers and the X-Virus-Scanned would amount to some 400 characters, with an additional X-Spam-Status the header size sincrease could be belong 700 characters. So I guess this looks normal and seems to indicate that body was not duplicated in this case, at least not in Postfix and not in amavisd. > I've said that the difference of the size of the email passed from > postfix to amavis and from amavis to postfix wasn't so high, so I think > at least amavisd-new doesn't duplicate email, but at this point is > postfix that duplicate wrongly the email after amavisd has scanned the > email. This could be true? I doubt it. I'd concentrate on a mail delivery program (procmail???) or user agent. For the above case, see also what was the mail size in the user's mailbox. > > Another tool that can be handy is to capture TCP traffic > > with tcpdump and analyze it later with ethereal > At the same time I can check and eventually rewrite the postfix > configuration, is a good idea? I doubt the problem lies there. Mark ------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
