| Incomming Mails are disapearing [message #145024] |
Mon, 11 February 2019 20:02  |
richard-noth
Messages: 2
Registered: February 2019
|
|
|
|
Hi,
we do have some wired problem with reciving mails from a specific mail domains.
So get some data:
[10/Feb/2019 01:11:41] Recv: Queue-ID: 5c5f6c3d-00003d73, Service: SMTP, From: <abc@abc.com>, To: <me@mymailserver.com>, Size: 2710, Sender-Host: mo4-p00-ob.smtp.rzone.de, SSL: yes, Subject: Something, Msg-Id: <AA1FDCEE-5218-42B6-A939-F8A8D460B710<_at_>abc.com>
... Okay, so i did recive the mails. Lets see the debug output:
10/Feb/2019 01:11:43][22775] {qproc} Queue ID 5c5f6c3d-00003d73: Footer inserting is disabled because sender domain vonlany.de cannot be found.
[10/Feb/2019 01:11:43][22775] {qproc} Queue ID 5c5f6c3d-00003d73: Message is going to be rewritten.
[10/Feb/2019 01:11:43][22775] {qproc} Queue ID 5c5f6c3d-00003d73: Inserting footer is disabled.
[10/Feb/2019 01:11:43][22775] {qproc} Queue ID 5c5f6c3d-00003d73: Failed to encode X-Footer header for domain .
[10/Feb/2019 01:11:43][22775] {qproc} Queue ID 5c5f6c3d-00003d73: Rewriting finished.
Thats it. All other logfiles are empty and do not mention the mail again.
Kerio on Debian, so i did some grep and search with 0 results. The mail is just gone, i cant find it.
=======
Some words to kerio tech support: after one week of messages, debug logfies and description i got from L2 the suggestion if i can contact the mailprovider from the sender domain to whitelist my mailserver. I ... don't see how that can help - so guys - any idea ?
|
|
|
|
|
|
| Re: Incomming Mails are disapearing [message #145031 is a reply to message #145029] |
Tue, 12 February 2019 17:26  |
richard-noth
Messages: 2
Registered: February 2019
|
|
|
|
Hi, thanks for the info, smtps seams to be okay:
- [12/Feb/2019 16:51:41][10101] {smtps} Message accepted for delivery
---------
I finaly found the message after diging through the logfile:
- [12/Feb/2019 16:51:43] Message rejected as malware spam, From: some@sender.com, To: me<_at_>myself.com, Sender IP: 12.354.255.21, Subject: Test, Message size: 1599
Well the message is pretty empty and there is no konfiguration to bonce messages with malware (only replace that file).
Kerio seams to accept the message and then reject / delete the message as "malware spam". Thats pretty scary, i thought kerio only bonces mails during smtp communication.
Accepting a mail and after that deleting the message is a no go.
If i disable bounce (setting bounce to 10) we will have hundrets of spam messages delivered to our users. Pretty scary.
|
|
|
|
|
|
|
|
Members
Search
Help
Register
Login
Home
