Hallo *,

ich habe hier ein Problem mit meinem Mailserver, und weiss nicht,
wie ich es l�sen soll.

Folgendes:

pluto:~# mailq
28m   97K 18Ujut-00079S-00 <""@schiffbauer.net>
          ""@schiffbauer.net

pluto:~#

Da klemmt also eine Mail, die an einen Leeren String als mailbox
gerichtet ist. 97k Gross. Sie besteht eigendlich nur aus
Fehlermeldungen (s.u.) und hat keinen erkennbaren urspr�nglichen
Inhalt. 

Wie kann man nachvollziehen, wo diese Mail urspr�nglich herkommt?

Exim config:
 - kein offener Relayserver (Mails d�rfen nur mit vorheriger
   Authentifizierung versendet werden.
 - mails an unbekannte mailboxen werden zur�ckgewiesen
 - amavis ist konfiguriert und funktioniert (Mails mit Testviren
   werden gemeldet)

Z.Z. arbeiten mit mit nur ca. 1-3 Leute auf dem Server.

Im mainlog sehe ich nur Meldungen wie:

2003-01-04 10:14:11 18UkNf-0007ZW-00 <= <> R=18UkNe-0007ZP-00 U=mail P=local S=101790
2003-01-04 10:14:11 18UkNe-0007ZP-00 Error message sent to ""@schiffbauer.net
2003-01-04 10:14:11 18UkNe-0007ZP-00 Completed 2003-01-04 10:14:11 18UkNf-0007Zf-00 <= 
""@schiffbauer.net U=amavis P=scanned-ok S=101997 
[EMAIL PROTECTED]
2003-01-04 10:14:11 18UkNf-0007ZW-00 =>  <""@schiffbauer.net> D=amavis_director 
T=amavis
2003-01-04 10:14:11 18UkNf-0007ZW-00 Completed
2003-01-04 10:14:11 18UkNf-0007Zf-00 ** ""@schiffbauer.net D=local_user_cyrus 
T=local_delivery_cyrus: Child process of local_delivery_cyrus transport returned 65 
(could mean error in input data) from command: /usr/sbin/cyrdeliver
2003-01-04 10:14:11 18UkNf-0007Zm-00 <= <> R=18UkNf-0007Zf-00 U=mail P=local S=103036
2003-01-04 10:14:11 18UkNf-0007Zf-00 Error message sent to ""@schiffbauer.net
2003-01-04 10:14:11 18UkNf-0007Zf-00 Completed

und das *sehr* oft, eben nur immer mit anderen Message IDs.

Die mail selber h�rt auch scheinbar mitten in einer Fehlermeldung
auf, sodass man den Ursprung nicht direkt erkennen kann.

Weiss jemand Rat, wie man da weitermachen kann? Irgendwie muss man doch
rausbekommen k�nnen, ob, und wenn ja welcher Dienst das vielleicht
sein k�nnte.

Ich f�r jeden Tip dankbar!

Ratlos
-Marc


Header:
pluto:~# cat /var/spool/exim/input/18UkNg-0007Zv-00-H
18UkNg-0007Zv-00-H
amavis 102 65534
<""@schiffbauer.net>
1041671652 0
-ident amavis
-received_protocol scanned-ok
-body_linecount 2634
-deliver_firsttime
XX
1
""@schiffbauer.net

167P Received: from amavis by pluto.schiffbauer.net with scanned-ok
(Exim 3.35 #1 (Debian))
        id 18UkNg-0007Zv-00
        for <""@schiffbauer.net>; Sat, 04 Jan 2003 10:14:12 +0100
160P Received: from mail by pluto.schiffbauer.net with local (Exim 3.35 #1 (Debian))
        id 18UkNf-0007Zm-00
        for <""@schiffbauer.net>; Sat, 04 Jan 2003 10:14:11 +0100
040  X-Failed-Recipients: ""@schiffbauer.net
059F From: Mail Delivery System <[EMAIL PROTECTED]>
023T To: ""@schiffbauer.net
059  Subject: Mail delivery failed: returning message to sender
054I Message-Id: <[EMAIL PROTECTED]>
038  Date: Sat, 04 Jan 2003 10:14:11 +0100
040  X-Virus-Scanned: by AMaViS new-20020517
pluto:~#


Body (Anfang und Ende):
pluto:~# head -n 50 /var/spool/exim/input/18UkNg-0007Zv-00-D
18UkNg-0007Zv-00-D
This message was created automatically by mail delivery software (Exim).

A message that you sent could not be delivered to one or more of its recipients. This 
is a permanent error. The following address(es) failed:

  ""@schiffbauer.net
    Child process of local_delivery_cyrus transport returned 65 (could mean error in 
input data) from command:
    /usr/sbin/cyrdeliver

The following text was generated during the delivery attempt:

------ ""@schiffbauer.net ------

: Mailbox does not exist

------ This is a copy of the message, including all the headers.  ------

Return-path: <""@schiffbauer.net>
Received: from amavis by pluto.schiffbauer.net with scanned-ok (Exim 3.35 #1 (Debian))
        id 18UkNf-0007Zf-00
        for <""@schiffbauer.net>; Sat, 04 Jan 2003 10:14:11 +0100
Received: from mail by pluto.schiffbauer.net with local (Exim 3.35 #1 (Debian))
        id 18UkNf-0007ZW-00
        for <""@schiffbauer.net>; Sat, 04 Jan 2003 10:14:11 +0100
X-Failed-Recipients: ""@schiffbauer.net
From: Mail Delivery System <[EMAIL PROTECTED]>
To: ""@schiffbauer.net
Subject: Mail delivery failed: returning message to sender
Message-Id: <[EMAIL PROTECTED]>
Date: Sat, 04 Jan 2003 10:14:11 +0100
X-Virus-Scanned: by AMaViS new-20020517

This message was created automatically by mail delivery software (Exim).

A message that you sent could not be delivered to one or more of its recipients. This 
is a permanent error. The following address(es) failed:

  ""@schiffbauer.net
    Child process of local_delivery_cyrus transport returned 65 (could mean error in 
input data) from command:
    /usr/sbin/cyrdeliver

The following text was generated during the delivery attempt:

------ ""@schiffbauer.net ------

[...]

und das Ende ist komisch:

------ This is a copy of the message, including all the headers.  ------

Return-path: <""@schiffbauer.net>
Received: from amavis by pluto.schiffbauer.net with scanned-ok (Exim 3.35 #1 (Debian))
        id 18Ujui-00074W-00
        for <""@schiffbauer.net>; Sat, 04 Jan 2003 09:44:16 +0100
Received: from mail by pluto.schiffbauer.net with local (Exim 3.35 #1 (Debian))
        id 18Ujuh-00074N-00
        for <""@schiffbauer.net>; Sat, 04 Jan 2003 09:44:15 +0100
X-Failed-Recipients: ""@schiffbauer.net
From: Mail Delivery System <[EMAIL PROTECTED]>
To: ""@schiffbauer.net
Subject: Mail delivery failed: returning message to sender
Message-Id: <[EMAIL PROTECTED]>
Date: Sat, 04 Jan 2003 09:44:15 +0100
X-Virus-Scanned: by AMaViS new-20020517

This message was created automatically by mail delivery software (Exim).

A message that you sent could not be delivered to one or more of its recipients. This 
is a permanent error. The following address(es) failed:

  ""@schiffbauer.net
    Child process of local_delivery_cyrus transport returned 65 (could mean error in 
input data) from command:
    /usr/sbin/cyrdeliver

The following text was generated during the delivery a


                                                     ^^^^^
Die mail h�rt wirklich hier mitten im Satz auf.


-- 
-------------------------------------------
Take back the Net! http://www.anti-dmca.org
-------------------------------------------


-- 
H�ufig gestellte Fragen und Antworten (FAQ): 
http://www.de.debian.org/debian-user-german-FAQ/

Zum AUSTRAGEN schicken Sie eine Mail an [EMAIL PROTECTED]
mit dem Subject "unsubscribe". Probleme? Mail an [EMAIL PROTECTED] (engl)

Antwort per Email an