On Fri, Feb 06, 2009 at 05:41:33PM -0800, Chris St Denis wrote: > Noel Jones wrote: >> Victor Duchovni wrote: >>> On Fri, Feb 06, 2009 at 01:30:01PM -0800, Chris St Denis wrote: >>> >>>>>> Anyway, on to the problems. How do I deal with log entries like this. >>>>>> A queue ID is created, but nothing ever happens to it. There is no >>>>>> reject >>>>> There was one valid recipient, but the mail transaction was not >>>>> completed. This could be a header_checks rule, or a network failure >>>>> or the client crashing. Any logfile processor will have to deal >>>>> sessions that do not go from start to end. >>>>> >>>>> Wietse >>>>> >>>> Thanks, but those particular causes doesn't seem to explain it. >>>> >>>> This system does not have any header checks (the server it's receiving >>>> the mail from does all the spam/etc. filtering) and if it was a network >>>> failure or client crashing there should be an additional error message >>>> like /^timeout after ([A-Z-]+) (.*)$/ or ^/lost connection after >>>> ([A-Z-]+).*from (.*)$/ >>> >>> Only if the connection was lost. The client may have been doing address >>> validation or a dictionary attack, ... and so can just "QUIT" after >>> "RCPT TO". Presto-magic, no errors. No message implies connection loss >>> only after "DATA", not after "RCPT TO". >>> >> >> also you grepped for only "smtpd" processes. There is likely further >> information about this transaction logged by cleanup and qmgr, all with >> the same QUEUEID. >> > No, I did a second grep for the queue ID (it's in the original post). That > was the only process with it. > > There is a policy server however. Could a reject from a policy server cause > this or would it generate a "reject:" line?
Policy service lookups are just fancy access tables, they behave in much the same way as "check_mumble_access"... Queue-ids logged with "smtpd[pid]: queue-id: client=..." can and will simply disappear with no further logging from cleanup, qmgr, ... This happens when the remote client aborts the transaction after "RCPT TO" and before "DATA". -- Viktor. Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the "Reply-To" header. To unsubscribe from the postfix-users list, visit http://www.postfix.org/lists.html or click the link below: <mailto:majord...@postfix.org?body=unsubscribe%20postfix-users> If my response solves your problem, the best way to thank me is to not send an "it worked, thanks" follow-up. If you must respond, please put "It worked, thanks" in the "Subject" so I can delete these quickly.