Hi, A client of us has a peculiar problem with his mail-account. He gets messages from another account of his mail-domain sent to his inbox. This mails seem to be stuck somehow - apparently the get resent to him every day or so, copied multiple times.. So for example he gets mails from [email protected] to [email protected] in his account2 inbox. The mails are also in his "Sent" Folder multiple times (also on the server), and reappear when he deletes them in his Outlook Account. No other customer on our server has this problem, so I'm assuming it could be a problem of his mail-client (outlook 2010), but I'm not entirely sure, and the customer is getting rather angry about this issue... Here is an excerpt of the mail-log, with 2 instances of the mail being sent, if that provides any clues.. Code: Jul 16 21:31:41 server1 postfix/qmgr[29474]: 78157213400B: from=<[email protected]>, size=2769754, nrcpt=1 (queue active) Jul 16 21:31:41 server1 amavis[5627]: (05627-08) Passed CLEAN, [1.2.3.4] [1.2.3.4] <[email protected]> -> <[email protected]>, Message-ID: <[email protected]>, mail_id: hSL8MnF1erqX, Hits: -2.899, size: 2769266, queued_as: 78157213400B, 2363 ms Jul 16 21:31:41 server1 postfix/smtp[5611]: 702A61FBE249: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=38, delays=36/0/0/2.4, dsn=2.0.0, status=sent (250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 78157213400B) Jul 16 21:31:41 server1 postfix/qmgr[29474]: 702A61FBE249: removed Jul 16 21:31:41 server1 postfix/smtpd[3152]: disconnect from 88-117-50-159.adsl.highway.telekom.at[1.2.3.4] Jul 16 21:31:42 server1 postfix/pipe[14380]: 78157213400B: to=<[email protected]>, relay=maildrop, delay=2.3, delays=0.99/0.01/0/1.3, dsn=2.0.0, status=sent (delivered via maildrop service) Jul 16 21:31:42 server1 postfix/qmgr[29474]: 78157213400B: removed Jul 16 21:31:43 server1 pop3d: Connection, ip=[::ffff:90.146.13.50] Jul 16 21:31:43 server1 authdaemond: received auth request, service=pop3, authtype=login -- Jul 16 21:34:43 server1 postfix/cleanup[7900]: B569B1FBE249: message-id=<[email protected]> Jul 16 21:34:45 server1 postfix/qmgr[29474]: B569B1FBE249: from=<[email protected]>, size=52495, nrcpt=1 (queue active) Jul 16 21:34:46 server1 postfix/smtpd[5616]: connect from localhost[127.0.0.1] Jul 16 21:34:46 server1 postfix/smtpd[5616]: D9C56213400B: client=localhost[127.0.0.1] Jul 16 21:34:46 server1 postfix/cleanup[2350]: D9C56213400B: message-id=<[email protected]> Jul 16 21:34:47 server1 postfix/smtpd[5616]: disconnect from localhost[127.0.0.1] Jul 16 21:34:47 server1 postfix/qmgr[29474]: D9C56213400B: from=<[email protected]>, size=52983, nrcpt=1 (queue active) Jul 16 21:34:47 server1 amavis[22168]: (22168-17) Passed CLEAN, [1.2.3.4] [1.2.3.4] <[email protected]> -> <[email protected]>, Message-ID: <[email protected]>, mail_id: V9AXUqHiS1ke, Hits: -2.774, size: 52494, queued_as: D9C56213400B, 2146 ms Jul 16 21:34:47 server1 postfix/smtp[14738]: B569B1FBE249: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=3.5, delays=1.3/0/0/2.1, dsn=2.0.0, status=sent (250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as D9C56213400B) Jul 16 21:34:47 server1 postfix/qmgr[29474]: B569B1FBE249: removed Jul 16 21:34:47 server1 postfix/pipe[16739]: D9C56213400B: to=<[email protected]>, relay=maildrop, delay=0.55, delays=0.26/0.01/0/0.28, dsn=2.0.0, status=sent (delivered via maildrop service) Jul 16 21:34:47 server1 postfix/qmgr[29474]: D9C56213400B: removed Did anyone ever have a similar problem, or have any ideas regarding this problem? Could it be a mail that is "stuck" on the server somehow and get's resent? Any help would be appreciated!
Never had such a problem yet. Check the mailqueue with "postqueue -p", if the mail is not listed there, then it is not stuck on the server. Then check his mail filter rules, mabye he has some strange rules that duplicate the email.
There are no messages in the postqueue, and no mailfilters configured. So I guess it must be a problem with his outlook, resending the mail randomly or somehting..
What kind of message is this? is it a message that he or somone else has written "by hand" and sent with a mail client, or is it a message send from some kind of technical system like a monitoring system, a website, a contact form of a website, a shop etc. ?
Ok, there seems to be a different problem too, which i can document a bit more precisely: The customer sent a mail with outlook to two recipients. Shortly after, the mail appeared ~30 times in her "gesendete elemente" folder. I analyzed the mail-log, and the mail was actually sent only once: Code: Jul 16 09:50:04 server1 postfix/qmgr[29474]: 975692134009: from=<[email protected]>, size=4396351, nrcpt=2 (queue active) Jul 16 09:50:04 server1 amavis[18591]: (18591-10) Passed CLEAN, [1.2.3.4] [1.2.3.4] <[email protected]> -> <[email protected]>,<[email protected]>, Message-ID: <[email protected]>, mail_id: iGk-iygtf964, Hits: -2.899, size: 4395935, queued_as: 975692134009, 3241 ms Jul 16 09:50:04 server1 postfix/smtp[31332]: 2FF4E2134002: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=116, delays=112/0/0/3.2, dsn=2.0.0, status=sent (250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 975692134009) Jul 16 09:50:04 server1 postfix/smtp[31332]: 2FF4E2134002: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=116, delays=112/0/0/3.2, dsn=2.0.0, status=sent (250 2.0.0 from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 975692134009) Jul 16 09:50:04 server1 postfix/qmgr[29474]: 2FF4E2134002: removed Jul 16 09:50:05 server1 postfix/smtp[31336]: 975692134009: to=<[email protected]>, relay=some.relay.com[12.32.12.2]:25, delay=1.6, delays=0.93/0.01/0.25/0.46, dsn=5.0.0, status=bounced (host mxgw1.regionalmedien.at[213.33.101.131] said: 550 cuda_nsu [email protected] unknown user account (in reply to RCPT TO command)) Jul 16 09:50:04 server1 postfix/qmgr[29474]: 2FF4E2134002: removed Note that one recipient is invalid (mail bounces). I searched in the "gesendete elemente" folder on the server, if the mail is really duplicated, by searching for a string that is contained in the mail, and found this: grep -H -r "Vom Stapplerfahrer zum Jungunternehmer" /var/vmail/customer-account/ Code: /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405604970.M575149P27012V0000000000000902I000000000021E024_0.server1,S=3130307:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405584757.M205354P31296V0000000000000902I00000000001E6020_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405586752.M95719P24083V0000000000000902I00000000001E6022_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405605070.M505737P28600V0000000000000902I000000000021E026_1.server1,S=4343524:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405590558.M873377P7023V0000000000000902I000000000021E016_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405588357.M149762P11669V0000000000000902I000000000021E011_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405591033.M887361P13108V0000000000000902I000000000021E017_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405581780.M552937P26328V0000000000000902I0000000002198234_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405497003.M673192P32108V0000000000000902I000000000219822C_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405597358.M423356P28864V0000000000000902I000000000021E01B_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405504464.M445849P28557V0000000000000902I00000000001E601A_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405499815.M254135P2687V0000000000000902I00000000001E600C_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405590115.M893945P1482V0000000000000902I000000000021E014_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405604558.M681691P22723V0000000000000902I000000000021E023_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405498022.M830721P12478V0000000000000902I00000000001E6006_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405581275.M890615P19893V0000000000000902I000000000219821F_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405598301.M790085P7898V0000000000000902I000000000021E01E_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405508065.M275288P8916V0000000000000902I000000000021E002_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405602759.M157675P32232V0000000000000902I000000000021E022_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405518864.M693253P16324V0000000000000902I000000000021E008_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405589374.M522438P24402V0000000000000902I000000000021E012_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405513464.M966898P11796V0000000000000902I000000000021E006_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405499680.M101658P1113V0000000000000902I00000000001E600D_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405497794.M582188P9365V0000000000000902I00000000001E6004_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405530246.M558778P32702V0000000000000902I000000000021E00F_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405499867.M612303P3253V0000000000000902I00000000001E600F_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405582958.M410698P8707V0000000000000902I00000000001E601D_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405600958.M638636P9492V0000000000000902I000000000021E020_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405581157.M441272P18406V0000000000000902I000000000219821E_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405597426.M51342P29495V0000000000000902I000000000021E01C_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405498531.M297564P18998V0000000000000902I00000000001E6009_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405584606.M678919P29553V0000000000000902I00000000001E601F_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405601531.M912069P16730V0000000000000902I000000000021E021_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405509864.M456847P31413V0000000000000902I000000000021E004_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405586804.M34090P24845V0000000000000902I000000000021E010_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405595558.M711650P5778V0000000000000902I000000000021E01A_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405582118.M6589P30450V0000000000000902I00000000001E601C_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405525524.M634464P4297V0000000000000902I000000000021E00E_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405579611.M270209P31714V0000000000000902I0000000002198055_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405593757.M643765P15278V0000000000000902I000000000021E019_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405589658.M951775P27947V0000000000000902I000000000021E013_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405502674.M260486P5794V0000000000000902I00000000001E6012_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405524294.M259211P20642V0000000000000902I000000000021E00D_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405597782.M401668P1793V0000000000000902I000000000021E01D_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405590533.M98526P6857V0000000000000902I000000000021E015_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405599162.M863167P18949V0000000000000902I000000000021E01F_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405524265.M918943P20154V0000000000000902I000000000021E00C_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405515266.M428726P2652V0000000000000902I000000000021E007_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405501455.M940050P23323V0000000000000902I00000000001E6011_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405511682.M311603P21943V0000000000000902I000000000021E005_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405523922.M730306P16104V0000000000000902I000000000021E00B_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405520666.M529626P6434V0000000000000902I000000000021E00A_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405497458.M886142P5381V0000000000000902I000000000219822D_0.server1,S=4352811:2,RS:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405586557.M791475P21515V0000000000000902I00000000001E6021_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405606185.M929348P10848V0000000000000902I000000000021E028_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405500862.M991180P15630V0000000000000902I00000000001E6010_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405591957.M871469P24971V0000000000000902I000000000021E018_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405497484.M893854P5489V0000000000000902I000000000219822E_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405506265.M705361P18594V0000000000000902I00000000001E601B_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405507515.M592039P2312V0000000000000902I000000000021E001_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405581608.M673019P24207V0000000000000902I0000000002198233_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405499653.M679954P618V0000000000000902I00000000001E600B_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405498564.M60580P19288V0000000000000902I00000000001E600A_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405606359.M190815P13119V0000000000000902I000000000021E029_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer /var/vmail/customer-account/office/.Gesendete Elemente/cur/1405500770.M500995P14731V0000000000000902I00000000001E600E_0.server1,S=4352811:2,S:Vom Stapplerfahrer zum Jungunternehmer So the sent mail really gets duplicated. The question is: is this a problem with outlook (imap sync or something?), or can this duplication occur on the server some way? Is there any way I can debug this further? Some logs on the server or something?
You can debug it for the ISPCong debug instruction as follows: http://www.faqforge.com/linux/debugging-ispconfig-3-server-actions-in-case-of-a-failure/ Follow the instructions and post the output
If the duplication would happen in postfix, then you would see the deliveries in the log file e.g. 30 times the same delivery in log). So there are just 2 places left were this might happen: a) the mail rewrite rules of this mailbox (sieve or maildrop script) or the mail client. Reagrding mailfilter rules, please check the filter files n the shell to be 100% sure that they are not causing this. If you use dovecot, then the filter file is "/var/vmail/domain.tld/user/.sieve" if it is courier, then the files are in /var/vmail/mailfilters/domain.tld/user/ directory.
Hi Till! Thanks for the answer. However, it turns out we weren't causing this anyway. The problem was a locally installed antivirus program with an outlook plugin. The plugin checked the mail, detected that it was spam, and blocked outlook from sending the mail. Outlook reacted in the only sane way - it tried to resend the mail again and again. So yeah - as expected it was a client side problem, not a server problem. We found the problem after some gooling - it is described here (among other places), for anyone interested: http://ask-leo.com/why_is_outlook_express_sending_multiple_copies_of_my_email.html The fun story: the client who had the problem consulted 3 different "computer experts", which all confidently claimed that the problem was 100% on the server. The client even wanted us to compensate him for the costs he had paying the computer experts, because they had "proven" that we were causing the problem...
