Mystery Missing Mail

[mattgalloway]

I've been using Scalix for about a year at home just for my family. I love it but sometimes email disappears I can never track it down. I'm sure there's a log or something somewhere but I'm still a little lost on exactly how everything works in Scalix.

Most recently I forwarded some email home to myself from work. When I got home I was surprised to find the mail never showed up. I logged into my work email web interface from home and sent another email - same thing - email never showed up.

I checked spam filters - nothing. I seem to be receiving email from other sources during the same time.

If I look in maillog I see this:

Code: Select all

Jul 15 12:40:51 mail sendmail[15394]: m6FHeUvr015394: from=<matt.galloway@myworkemail.com>, size=57498, class=0, nrcpts=1, msgid=<CE63D73A16F0D541AA6A1465BB8937161A91A2E6@TLRUSMNEAGMBX24.ERF.THOMSON.COM>, proto=ESMTP, relay=root@localhost
Jul 15 12:40:52 mail sendmail[15396]: m6FHepub015396: from=<matt.galloway@myworkemail.com>, size=57691, class=0, nrcpts=1, msgid=<CE63D73A16F0D541AA6A1465BB8937161A91A2E6@TLRUSMNEAGMBX24.ERF.THOMSON.COM>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
Jul 15 12:40:52 mail spamd[23375]: spamd: connection from localhost.localdomain [127.0.0.1] at port 47900
Jul 15 12:40:52 mail spamd[23375]: spamd: setuid to sa-milt succeeded
Jul 15 12:40:52 mail spamd[23375]: spamd: processing message <CE63D73A16F0D541AA6A1465BB8937161A91A2E6@TLRUSMNEAGMBX24.ERF.THOMSON.COM> for sa-milt:101
Jul 15 12:40:55 mail spamd[23375]: spamd: clean message (-1.2/5.0) for sa-milt:101 in 3.5 seconds, 59671 bytes.
Jul 15 12:40:55 mail spamd[23375]: spamd: result: . -1 - AWL,BAYES_00,HTML_MESSAGE,NO_REAL_NAME,SPF_HELO_PASS,SPF_PASS scantime=3.5,size=59671,user=sa-milt,uid=101,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47900,mid=<CE63D73A16F0D541AA6A1465BB8937161A91A2E6@TLRUSMNEAGMBX24.ERF.THOMSON.COM>,bayes=0,autolearn=no
Jul 15 12:40:55 mail spamd[2639]: prefork: child states: II
Jul 15 12:40:55 mail sendmail[15396]: m6FHepub015396: Milter add: header: X-Spam-Status: No, score=-1.2 required=5.0 tests=AWL,BAYES_00,HTML_MESSAGE,\n\tNO_REAL_NAME,SPF_HELO_PASS,SPF_PASS autolearn=no version=3.1.9
Jul 15 12:40:55 mail sendmail[15396]: m6FHepub015396: Milter add: header: X-Spam-Checker-Version: SpamAssassin 3.1.9 (2007-02-13) on\n\tmail.gallowayfore.com
Jul 15 12:40:55 mail sendmail[15394]: m6FHeUvr015394: to=<matt@thebasement.com>, delay=00:00:24, xdelay=00:00:04, mailer=relay, pri=87498, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (m6FHepub015396 Message accepted for delivery)
Jul 15 12:40:56 mail sendmail[15405]: m6FHepub015396: to=<matt@thebasement.com>, delay=00:00:04, xdelay=00:00:00, mailer=scalix_mime, pri=177691, relay=mail, dsn=2.0.0, stat=Sent (Ok)


I restarted scalix (and then scalix-tomcat & apache) and retested and it worked.

From mail log after restart:

Code: Select all

Jul 16 01:50:07 mail sendmail[24041]: m6G6o4Vs024041: from=<matt.galloway@myworkemail.com>, size=1484, class=0, nrcpts=1, msgid=<CE63D73A16F0D541AA6A1465BB89371611FD1E67@TLRUSMNEAGMBX24.ERF.THOMSON.COM>, proto=ESMTP, relay=root@localhost
Jul 16 01:50:07 mail sendmail[24042]: m6G6o7Bf024042: from=<matt.galloway@myworkemail.com>, size=1677, class=0, nrcpts=1, msgid=<CE63D73A16F0D541AA6A1465BB89371611FD1E67@TLRUSMNEAGMBX24.ERF.THOMSON.COM>, proto=ESMTP, daemon=MTA, relay=localhost.localdomain [127.0.0.1]
Jul 16 01:50:07 mail spamd[15878]: spamd: connection from localhost.localdomain [127.0.0.1] at port 58122
Jul 16 01:50:07 mail spamd[15878]: spamd: setuid to sa-milt succeeded
Jul 16 01:50:07 mail spamd[15878]: spamd: processing message <CE63D73A16F0D541AA6A1465BB89371611FD1E67@TLRUSMNEAGMBX24.ERF.THOMSON.COM> for sa-milt:101
Jul 16 01:50:10 mail spamd[15878]: spamd: clean message (-1.4/5.0) for sa-milt:101 in 3.3 seconds, 2024 bytes.
Jul 16 01:50:10 mail spamd[15878]: spamd: result: . -1 - AWL,BAYES_00,NO_REAL_NAME,SPF_HELO_PASS,SPF_PASS scantime=3.3,size=2024,user=sa-milt,uid=101,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=58122,mid=<CE63D73A16F0D541AA6A1465BB89371611FD1E67@TLRUSMNEAGMBX24.ERF.THOMSON.COM>,bayes=0.0025711673656863,autolearn=no
Jul 16 01:50:10 mail sendmail[24042]: m6G6o7Bf024042: Milter add: header: X-Spam-Status: No, score=-1.4 required=5.0 tests=AWL,BAYES_00,NO_REAL_NAME,\n\tSPF_HELO_PASS,SPF_PASS autolearn=no version=3.1.9
Jul 16 01:50:10 mail sendmail[24042]: m6G6o7Bf024042: Milter add: header: X-Spam-Checker-Version: SpamAssassin 3.1.9 (2007-02-13) on\n\tmail.gallowayfore.com
Jul 16 01:50:10 mail sendmail[24041]: m6G6o4Vs024041: to=<matt@thebasement.com>, delay=00:00:05, xdelay=00:00:03, mailer=relay, pri=31484, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (m6G6o7Bf024042 Message accepted for delivery)
Jul 16 01:50:10 mail spamd[2639]: prefork: child states: II
Jul 16 01:50:11 mail sendmail[24050]: m6G6o7Bf024042: to=<matt@thebasement.com>, delay=00:00:04, xdelay=00:00:01, mailer=scalix_mime, pri=121677, relay=mail, dsn=2.0.0, stat=Sent (Ok)


These both look like the mail was "delivered" - but the first one never shows up (either through IMAP or SWA).

So my questions are these?

1.) Where does the mail go next?
2.) What logs should I be looking at beyond maillog?
3.)Any ideas on how to prevent this in the future?
4.)Is there any way to recover my MIA email?

I'm currently using Scalix 11.1.0.50 and I have SpamAssassin and ClamAV configured.

Any help or direction would be greatly appreciated.

Thanks,

Matt Galloway
Tulsa, Oklahoma

[mikethebike]

Matt,

have alook at the queues for starters

omstat -s
omqstat -t

that will show any messages that may be in queues, and also show the throughput of queues (always a handy check to see if things are working).
Make sure to check the error and smerr queues as they may be there (omstat -q error, omstat -q smerr to see details of messages in those queues)

Have a look in ~scalix/logs/fatal and ~scalix/logs.audit.log to see if the messages hit the service router and then local delivery

In each of these, check the record "delivered-count", this will show how many recipients the mail system thinks its delivered to.


Mick

[mikevl]

Hi

You also need the look at the error queues. Smapassassin can ruptue sometimes causing messages to end up on these queues.

omstat -q error
omstat -q smerr

You can get the other queues from man scalix-server.

Mike