My logfiles have this (where the real domain is replaced with mydomain.org):
May 2 16:05:32 tripacerdriver mimedefang.pl[5146]: MDLOG,j42L5V6p008516, virus,Worm.Sober.P,209.198.171.148,<[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>,Your email was blocked May 2 16:05:32 tripacerdriver mimedefang.pl[5146]: MDLOG,j42L5V6p008516, virus,Worm.Sober.P,209.198.171.148,<[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>,Your email was blocked
So filter_begin is definately called twice, once for each recipient,
one valid and one invalid. This pattern is repeated, with varying
numbers of recipients, all through my logs. I believe there is always at least one valid recipient, but I don't really have tools
to say that for certain.
Actually, a single call to md_graphdefang_log writes one line per recipient, configurable via the second parameter to md_graphdefang_log_enable (see man mimedfang-filter).
filter_begin is only called once per message regardless of how many recipients there are. Since those lines show the same sendmail ID and the same time, it's just a duplicate log item, not an indication that the message is being scanned twice.
-- Kelson Vibber SpeedGate Communications <www.speed.net> _______________________________________________ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [email protected] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
