grep won't show you everything that's in the log regarding a particular message. You need to look at all the messages adjacent to the one grep found. If you have qmailtoaster-plus installed (highly recommended), you can # qmlog -lc <IP> smtp That will put you into the log(s) at the point where it finds <IP>. You can then browse around from there and see what else is happening.
All of the messages for a given (successful) email receipt will look something like this: 01-25 11:14:38 tcpserver: status: 1/100 01-25 11:14:38 tcpserver: pid 8223 from sender.i.p.address 01-25 11:14:38 tcpserver: ok 8223 qmhost:qmt.i.p.address:25 :sender.i.p.address::34313 01-25 11:14:39 CHKUSER accepted sender: from <[EMAIL PROTECTED]::> remote <mta134.sender.domain.com:unknown:sender.i.p.address> rcpt <> : sender accepted 01-25 11:14:39 CHKUSER accepted rcpt: from <[EMAIL PROTECTED]::> remote <mta134.sender.domain.com:unknown:sender.i.p.address> rcpt <[EMAIL PROTECTED]> : found existing recipient 01-25 11:14:49 simscan:[8223]:CLEAN (-2.30/8.00):10.3207s:Email Subject:sender.i.p.address:[EMAIL PROTECTED]:[EMAIL PROTECTED]: 01-25 11:14:49 tcpserver: end 8223 status 0 01-25 11:14:49 tcpserver: status: 0/100 I'm guessing that the delivery from exchange to qmail is unsuccessful. Do you see a tcpserver: end 16219 status 256 ? What are the rest of the log messages for the email in question? P.S. I take it your toaster's queue is empty? Raymond Webster wrote: > This is what I found when greping for IP instead of domain name. I did find > four other instances of these exact lines at different times. Should there > be more communication with the outside server? If so is it safe to say the > delay message is from their side? > > 2008-01-24 16:34:50.326813500 tcpserver: pid 16219 from xxx.x.xx.xxx > 2008-01-24 16:34:50.326816500 tcpserver: ok 16219 > qmail.ncbi.com:192.168.2.2:25 :xxx.x.xx.xxx::55690 > 2008-01-24 16:34:50.871532500 CHKUSER accepted sender: from > <[EMAIL PROTECTED]::> remote > <EXHUB016-1.exch016.domain2.net:unknown:xxx.x.xx.xxx> rcpt <> : sender > accepted > > -----Original Message----- > From: Eric "Shubes" [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 11:37 AM > To: [email protected] > Subject: Re: [qmailtoaster] Delayed delivery > > Raymond Webster wrote: >> I have one outside client that cannot send mail to the toaster. He is >> sending from an Exchange2007 server. He gets a delayed delivery >> message to the email addresses he attempts so send within our domain. >> >> I have found this in the smtp log; >> >> CHKUSER accepted sender: from <[EMAIL PROTECTED] <mailto:[EMAIL >> PROTECTED]>::> >> remote <EXHUB016-1.exch016.domain.net:unknown:IPAddress> rcpt <> : >> sender accepted >> >> Why would this make his server report a delayed delivery? > > This message is normal, and is a good thing. > > Can you tell if the delayed delivery message is initiated by the qmail or > change server? > > Is the message stuck in qmail queue? (I doubt it, but it's worth a try) # > qmailctl queue > > What are the rest of the messages in the smtp queue which correspond to the > one you've shown us? There should be more/others. > > -- > -Eric 'shubes' > -- -Eric 'shubes' --------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
