On 01/12/2008, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> Ronald MacDonald wrote:
...
> > However, in one of those "crap, what do I do now" moments, I'm
> > confuzzled as to how to get Postfix to realise that the mail *should*
> > be checked, since it's coming in from outside the network.
> >
> > Any ideas as to what might be the best way to fix this?
> >
>
> Thank you for the postconf -n output. Please also provide logs of such
> email bypassing your content filter. We can't help you trace the email and
> find the configuration error without them.
Of course! I'm sorry.
Here's the mail.log entry
Nov 30 10:51:07 de003221 postfix-policyd: rcpt=91039,
throttle=clear(a), host=83.7.120.131, [EMAIL PROTECTED],
[EMAIL PROTECTED], size=1668/10240000, quota=1668/250000000,
count=1/512(136), rcpt=1/3600(136), threshold=0%|0%|0%
Nov 30 10:51:07 de003221 postfix/cleanup[29357]: 77B106C1F5:
message-id=<[EMAIL PROTECTED]>
Nov 30 10:51:07 de003221 postfix/qmgr[14572]: 77B106C1F5:
from=<[EMAIL PROTECTED]>, size=1995, nrcpt=1 (queue active)
Nov 30 10:51:07 de003221 amavis[28871]: (28871-10) ESMTP::10024
/var/lib/amavis/amavis-20081130T103252-28871: <[EMAIL PROTECTED]> ->
<[EMAIL PROTECTED]> Received: SIZE=1995 from m
ail.rmacd.com ([127.0.0.1]) by localhost ( [127.0.0.1]) (amavisd-maia,
port 10024) with ESMTP id 28871-10 for <[EMAIL PROTECTED]>; Sun, 30 Nov
2008 10:51:07 +0000 (GMT)
Nov 30 10:51:07 de003221 amavis[28871]: (28871-10) Checking:
[83.7.120.131] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>
Nov 30 10:51:07 de003221 amavis[28871]: (28871-10) Maia: [check_mail]
WARNING: Size limit (104857600) > max_allowed_packet (16776192);
effective size limit is 16775168 bytes
Nov 30 10:51:07 de003221 amavis[28871]: (28871-10) p001 1
Content-Type: text/html, size: 1472 B, name:
Nov 30 10:51:07 de003221 postfix/smtpd[29247]: disconnect from
abie131.neoplus.adsl.tpnet.pl[83.7.120.131]
Nov 30 10:51:07 de003221 amavis[28871]: (28871-10) wbl: whitelisted
sender <[EMAIL PROTECTED]>
Nov 30 10:51:07 de003221 amavis[28871]: (28871-10) FWD via SMTP:
[127.0.0.1]:10025 <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>
Nov 30 10:51:07 de003221 postfix/smtpd[29382]: connect from localhost[127.0.0.1]
Nov 30 10:51:07 de003221 postfix/smtpd[29382]: D27FB6B6AD:
client=localhost[127.0.0.1]
Nov 30 10:51:07 de003221 postfix/cleanup[29365]: D27FB6B6AD:
message-id=<[EMAIL PROTECTED]>
Nov 30 10:51:07 de003221 postfix/qmgr[14572]: D27FB6B6AD:
from=<[EMAIL PROTECTED]>, size=2411, nrcpt=1 (queue active)
Nov 30 10:51:07 de003221 amavis[28871]: (28871-10) Passed CLEAN,
[83.7.120.131] [83.7.120.131] <[EMAIL PROTECTED]> ->
<[EMAIL PROTECTED]>, Message-ID: <[EMAIL PROTECTED]
ail.rmacd.com>, Hits: -, 718 ms
Nov 30 10:51:07 de003221 postfix/smtpd[29382]: disconnect from
localhost[127.0.0.1]
Nov 30 10:51:08 de003221 authdaemond: received userid lookup request:
[EMAIL PROTECTED]
Nov 30 10:51:08 de003221 authdaemond: authmysql: trying this module
Nov 30 10:51:08 de003221 authdaemond: SQL query: [SQL QUERY]
Nov 30 10:51:08 de003221 authdaemond: Authenticated
Nov 30 10:51:08 de003221 amavis[28871]: (28871-10) TIMING [total 762
ms] - SMTP EHLO: 5 (1%), SMTP pre-MAIL: 2 (0%), lookup_sql: 5 (1%),
SMTP pre-DATA-flush: 3 (0%), SMTP DATA: 33 (4%), body_hash: 1 (0%), ma
ia_connect: 35 (5%), maia_read_system_config: 1 (0%),
maia_get_mysql_size_limit: 1 (0%), lookup_sql: 4 (1%), mime_decode: 13
(2%), get-file-type1: 237 (31%), parts_decode: 0 (0%), AV-scan-1: 14
(2%), spam-wb
-list: 30 (4%), update_cache: 1 (0%), maia_autocreate_users: 3 (0%),
maia_store_mail: 48 (6%), maia_set_mail_status: 48 (6%),
deal_with_mail_size: 1 (0%), maia_record_tests: 3 (0%),
maia_set_mail_status: 6 (
1%), fwd-connect: 87 (11%), fwd-mail-from: 5 (1%), fwd-rcpt-to: 4
(1%), write-header: 5 (1%), fwd-data: 1 (0%), fwd-data-end: 97 (13%),
fwd-rundown: 1 (0%), main_log_entry: 26 (3%), update_snmp: 3 (0%),
maia
_delete_mail: 35 (5%), maia_cleanup: 0 (0%), maia_disconnect: 0 (0%),
unlink-1-files: 2 (0%), rundown: 1 (0%)
Nov 30 10:51:08 de003221 amavis[28871]: (28871-10) Requesting process
rundown after 10 tasks (and 10 sessions)
Nov 30 10:51:08 de003221 postfix/smtp[29358]: 77B106C1F5:
to=<[EMAIL PROTECTED]>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.9,
delays=1.2/0/0.01/0.76, dsn=2.6.0, status=sent (250 2.6.0 Ok, id=2
8871-10, from MTA: 250 2.0.0 Ok: queued as D27FB6B6AD)
Nov 30 10:51:08 de003221 postfix/qmgr[14572]: 77B106C1F5: removed
Nov 30 10:51:08 de003221 amavis[28871]: (28871-10) extra modules
loaded: Mail/SpamAssassin/Locales.pm,
Mail/SpamAssassin/Plugin/Bayes.pm,
Mail/SpamAssassin/Plugin/BodyEval.pm, Mail/SpamAssassin/Plugin/Check.
pm, Mail/SpamAssassin/Plugin/DNSEval.pm,
Mail/SpamAssassin/Plugin/HTMLEval.pm,
Mail/SpamAssassin/Plugin/HTTPSMismatch.pm,
Mail/SpamAssassin/Plugin/HeaderEval.pm,
Mail/SpamAssassin/Plugin/ImageInfo.pm, Mail/S
pamAssassin/Plugin/MIMEEval.pm, Mail/SpamAssassin/Plugin/RelayEval.pm,
Mail/SpamAssassin/Plugin/URIDetail.pm,
Mail/SpamAssassin/Plugin/URIEval.pm,
Mail/SpamAssassin/Plugin/VBounce.pm, Mail/SpamAssassin/Plugi
n/WLBLEval.pm
Nov 30 10:51:08 de003221 postfix/pipe[29383]: D27FB6B6AD:
to=<[EMAIL PROTECTED]>, relay=maildrop, delay=0.59,
delays=0.09/0.05/0/0.45, dsn=2.0.0, status=sent (delivered via
maildrop service)
Nov 30 10:51:08 de003221 postfix/qmgr[14572]: D27FB6B6AD: removed
And the corresponding mail headers.
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: from localhost (localhost [127.0.0.1])
by mail.rmacd.com (Postfix) with ESMTP id D27FB6B6AD
for <[EMAIL PROTECTED]>; Sun, 30 Nov 2008 10:51:07 +0000 (GMT)
Received: from mail.rmacd.com ([127.0.0.1])
by localhost ( [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 28871-10
for <[EMAIL PROTECTED]>; Sun, 30 Nov 2008 10:51:07 +0000 (GMT)
Received: from abie131.neoplus.adsl.tpnet.pl
(abie131.neoplus.adsl.tpnet.pl [83.7.120.131])
by mail.rmacd.com (Postfix) with SMTP id 77B106C1F5
for <[EMAIL PROTECTED]>; Sun, 30 Nov 2008 10:51:06 +0000 (GMT)
To: <[EMAIL PROTECTED]>
Subject: Weiner to explode now!
From: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Message-Id: <[EMAIL PROTECTED]>
Date: Sun, 30 Nov 2008 10:51:06 +0000 (GMT)
X-Virus-Scanned: RMacD.com
Hmm!
--Ronald.
--
Ronald MacDonald
http://www.rmacd.com/
0777 235 1655
