Hi Marc....
First off, to both you Marc, and the rest of the users on the mailing list,
I cincerly apologize for the very long email and the quotes from the various
bits and pieces of log files I have to date... I just deceided to get this
posted and out in the open as soon as possible, because of the fact that
these problems I have been experiancing lately with exim are quite serious
for me, aswell as my organization.
You are right there... I just confirmed and yes, it is 3.03... the RPM
version packaged for RedHat 6.1 (glib6)...
As far as the logs go... What I have with me at the moment that I can supply
you with is the email that the cycle log (exim_stats) script generated... I
will however, be able to supply you with the complete exim and system
log(s), once I have been able to dig it out from the other logs on the
server itself... (24 hours or so if I don't forget about it)
Here is what was sed...
QUOTE:
Exim statistics from 1999-11-26 04:02:44 to 1999-11-27 04:02:37
Grand total summary
-------------------
At least one address
TOTAL Volume Messages Hosts Delayed Failed
Received 18MB 201 58 3 1.5% 5 2.5%
Delivered 35MB 331 41
Deliveries by transport
-----------------------
Volume Messages
address_pipe 342KB 55
procmail 15MB 221
remote_smtp 20MB 55
Messages received per hour (each dot is 1 message)
--------------------------------------------------
00-01 6 ......
01-02 4 ....
02-03 2 ..
03-04 7 .......
04-05 10 ..........
05-06 2 ..
06-07 3 ...
07-08 2 ..
08-09 6 ......
09-10 10 ..........
10-11 5 .....
11-12 11 ...........
12-13 14 ..............
13-14 12 ............
14-15 16 ................
15-16 5 .....
16-17 11 ...........
17-18 7 .......
18-19 4 ....
19-20 6 ......
20-21 4 ....
21-22 7 .......
22-23 27 ...........................
23-24 20 ....................
Deliveries per hour (each dot is 1 delivery)
--------------------------------------------
00-01 10 ..........
01-02 8 ........
02-03 6 ......
03-04 11 ...........
04-05 26 ..........................
05-06 6 ......
06-07 7 .......
07-08 6 ......
08-09 9 .........
09-10 15 ...............
10-11 10 ..........
11-12 15 ...............
12-13 18 ..................
13-14 15 ...............
14-15 20 ....................
15-16 9 .........
16-17 18 ..................
17-18 10 ..........
18-19 8 ........
19-20 10 ..........
20-21 8 ........
21-22 11 ...........
22-23 23 .......................
23-24 52 ....................................................
Time spent on the queue: all messages
-------------------------------------
Under 1m 192 95.5% 95.5%
5m 2 1.0% 96.5%
3h 7 3.5% 100.0%
Time spent on the queue: messages with at least one remote delivery
-------------------------------------------------------------------
Under 1m 24 77.4% 77.4%
5m 2 6.5% 83.9%
3h 5 16.1% 100.0%
Relayed messages
----------------
(Taken out to protect my users)
Total: 53 (plus 0 unshown)
Top 50 sending hosts by message count
-------------------------------------
59 489752 local
21 3177874 dial03.beachfront.co.za
19 968718 beachfront.co.za
6 3283192 terrapin.ru.ac.za
6 791098 cbs53-03-240.wc.saix.net
5 1870803 cgi.icon.co.za
5 102003 mercury.is.co.za
5 10443 exim-colo-01.whoc.theplanet.co.uk
4 144737 ftp.alternet.co.za
4 15183 lbmail10.listbot.com
4 12579 lbmail11.listbot.com
3 1038733 rio.hixnet.co.za
3 10968 dial01.beachfront.co.za
3 8048 lbmail1.listbot.com
2 1682153 (ndsxch99.naspers.com)
2 283345 smtp03.mweb.co.za
2 191913 dial04.beachfront.co.za
2 132268 (mail.travelnet.co.za)
2 53117 smtp.intekom.com
2 17882 (jhb.duxbury.co.za)
2 12810 lbmail4.listbot.com
2 9646 lbmail12.listbot.com
2 7583 backend.jobsite.co.uk
2 4023 id231.net-shopper.co.uk
1 2481376 ndsxch02.naspers.com
1 744722 law2-f7.hotmail.com
1 416664 law2-f123.hotmail.com
1 275673 f18.law7.hotmail.com
1 173691 f144.law7.hotmail.com
1 145452 gfw.siemens.co.za
1 107732 komati.megaweb.co.za
1 49323 mail.sli.co.za
1 41627 law2-f21.hotmail.com
1 35911 xfg.egroups.com
1 18688 lyris.lockergnome.com
1 17049 (telenet2.expressdns.net)
1 4392 law2-f230.hotmail.com
1 4369 law2-f216.hotmail.com
1 4234 mailgate.gfifax.com
1 3883 mail.osi.co.za
1 3879 lbmail5.listbot.com
1 3601 lbmail3.listbot.com
1 3402 wodc7-1.corprelay.mail.uu.net
1 3214 (sxy.com)
1 2795 sys3.abc-web.com
1 2736 lbmail8.listbot.com
1 2703 eureka.abc-web.com
1 2536 fwljia0z02.galileosa.co.za
1 2433 p180.austria.eu.net
1 2431 daniel.hosting.flyingcroc.net
Top 50 sending hosts by volume
------------------------------
6 3283192 terrapin.ru.ac.za
21 3177874 dial03.beachfront.co.za
1 2481376 ndsxch02.naspers.com
5 1870803 cgi.icon.co.za
2 1682153 (ndsxch99.naspers.com)
3 1038733 rio.hixnet.co.za
19 968718 beachfront.co.za
6 791098 cbs53-03-240.wc.saix.net
1 744722 law2-f7.hotmail.com
59 489752 local
1 416664 law2-f123.hotmail.com
2 283345 smtp03.mweb.co.za
1 275673 f18.law7.hotmail.com
2 191913 dial04.beachfront.co.za
1 173691 f144.law7.hotmail.com
1 145452 gfw.siemens.co.za
4 144737 ftp.alternet.co.za
2 132268 (mail.travelnet.co.za)
1 107732 komati.megaweb.co.za
5 102003 mercury.is.co.za
2 53117 smtp.intekom.com
1 49323 mail.sli.co.za
1 41627 law2-f21.hotmail.com
1 35911 xfg.egroups.com
1 18688 lyris.lockergnome.com
2 17882 (jhb.duxbury.co.za)
1 17049 (telenet2.expressdns.net)
4 15183 lbmail10.listbot.com
2 12810 lbmail4.listbot.com
4 12579 lbmail11.listbot.com
3 10968 dial01.beachfront.co.za
5 10443 exim-colo-01.whoc.theplanet.co.uk
2 9646 lbmail12.listbot.com
3 8048 lbmail1.listbot.com
2 7583 backend.jobsite.co.uk
1 4392 law2-f230.hotmail.com
1 4369 law2-f216.hotmail.com
1 4234 mailgate.gfifax.com
2 4023 id231.net-shopper.co.uk
1 3883 mail.osi.co.za
1 3879 lbmail5.listbot.com
1 3601 lbmail3.listbot.com
1 3402 wodc7-1.corprelay.mail.uu.net
1 3214 (sxy.com)
1 2795 sys3.abc-web.com
1 2736 lbmail8.listbot.com
1 2703 eureka.abc-web.com
1 2536 fwljia0z02.galileosa.co.za
1 2433 p180.austria.eu.net
1 2431 daniel.hosting.flyingcroc.net
Top 50 local senders by message count
-------------------------------------
33 341127 exim
26 148625 root
Top 50 local senders by volume
------------------------------
33 341127 exim
26 148625 root
Top 50 destinations by message count
------------------------------------
276 15671800 local
3 1638372 mx01.icon.co.za
2 1636661 ilink.nis.za
2 1636661 komati.megaweb.co.za
2 1636661 lia.lia.net
2 1636661 lion.kingsley.co.za
2 1636661 mail1.qdata.net
2 1636661 mx01.duxbury.co.za
2 1636661 ndsxch02.naspers.com
2 1636661 netlunx.netline.co.za
2 1636661 pop.ibi.co.za
2 1636661 rio.hixnet.co.za
2 1480283 mail.netscope.co.za
2 19962 cpt-mailhost2.mweb.co.za
2 13470 web.beachfront.co.za
1 1035333 hippo.ru.ac.za
1 601328 buffalo.ru.ac.za
1 27368 mail.intekom.com
1 9921 za.mx.aol.com
1 8634 realforum.real.com
1 7146 zimsun.co.zw
1 5609 bigfish-online.com
1 4413 ns1.netralink.com
1 4278 teledata.teledata.mz
1 4072 studio.kwhy.com
1 3999 fwljia0z02.galileosa.co.za
1 3722 posix.co.za
1 3717 mx1.iti.co.za
1 3461 mx01.iafrica.com
1 3229 mailspool.harare.iafrica.com
1 3209 rucus.ru.ac.za
1 2781 diana.ingenia.es
1 2581 mail.indigo.ie
1 2175 external-mail-router.uu.net
1 2015 mx1.mail.yahoo.com
1 2008 mailhost.icon.co.zw
1 1446 anabell3.hetzner.de
1 1413 vger.rutgers.edu
1 1156 gauntlet.sabc.co.za
1 1154 mail.gordano.com
1 736 mailrecv.gohip.com
Top 50 destinations by volume
-----------------------------
276 15671800 local
3 1638372 mx01.icon.co.za
2 1636661 ilink.nis.za
2 1636661 komati.megaweb.co.za
2 1636661 lia.lia.net
2 1636661 lion.kingsley.co.za
2 1636661 mail1.qdata.net
2 1636661 mx01.duxbury.co.za
2 1636661 ndsxch02.naspers.com
2 1636661 netlunx.netline.co.za
2 1636661 pop.ibi.co.za
2 1636661 rio.hixnet.co.za
2 1480283 mail.netscope.co.za
1 1035333 hippo.ru.ac.za
1 601328 buffalo.ru.ac.za
1 27368 mail.intekom.com
2 19962 cpt-mailhost2.mweb.co.za
2 13470 web.beachfront.co.za
1 9921 za.mx.aol.com
1 8634 realforum.real.com
1 7146 zimsun.co.zw
1 5609 bigfish-online.com
1 4413 ns1.netralink.com
1 4278 teledata.teledata.mz
1 4072 studio.kwhy.com
1 3999 fwljia0z02.galileosa.co.za
1 3722 posix.co.za
1 3717 mx1.iti.co.za
1 3461 mx01.iafrica.com
1 3229 mailspool.harare.iafrica.com
1 3209 rucus.ru.ac.za
1 2781 diana.ingenia.es
1 2581 mail.indigo.ie
1 2175 external-mail-router.uu.net
1 2015 mx1.mail.yahoo.com
1 2008 mailhost.icon.co.zw
1 1446 anabell3.hetzner.de
1 1413 vger.rutgers.edu
1 1156 gauntlet.sabc.co.za
1 1154 mail.gordano.com
1 736 mailrecv.gohip.com
Top 50 local destinations by message count
------------------------------------------
54 6354946 xxx
34 223538 xxx
32 349102 xxx
30 448307 xxx
27 148625 |/usr/majordomo/wrapper resend -l syschk syschk-list
(syschk@???) <root@???>
26 148625 |/usr/majordomo/wrapper archive2.pl -f
/usr/majordomo/archive/syschk/syschk -D -a (syschk-archive@???)
<root@???>
20 111413 xxx
15 4700344 xxx
7 794981 xxx
7 15852 xxx
5 1870803 xxx
4 3111 xxx
3 8712 xxx
2 192244 xxx
2 68919 xxx
1 107326 xxx
1 49323 xxx
1 26557 |/usr/majordomo/wrapper archive2.pl -f
/usr/majordomo/archive/syschk/syschk -D -a (syschk-archive@???)
<info@???>
1 26557 |/usr/majordomo/wrapper resend -l syschk syschk-list
(syschk@???) <info@???>
1 17049 xxx
1 2431 xxx
1 2027 xxx
1 1008 xxx
List of errors
--------------
1 xxx@???: unrouteable mail domain
"mail2.beachfront.vo.za"
1 contact@??? R=lookuphost T=remote_smtp: SMTP
error from remote mailer after RCPT TO: <contact@???>:
host alcazar.co.za [196.15.167.158]: 550 unknown user
<contact@???>
1 jmason@???: unknown local-part "jmason"
in domain "erinvale.co.za"
1 ps@???: unknown local-part "ps" in domain
"partsource.co.za"
1 webmaster@??? R=lookuphost T=remote_smtp:
SMTP error from remote mailer after RCPT TO:
<webmaster@???>:
host alcazar.co.za [196.15.167.158]: 550 unknown user
<webmaster@???>
1 webmaster@???: unrouteable mail domain
"rave-networks.com"
Errors encountered: 6
---------------------
As you can see, there is no errors reported by the script (as far as the re
writing of the TO field goes), I can only but guess that the script didn't
for some reason pick up the errors, or... that Exim crashed?? The
exim_stats for the next 24 hours period... go and compare it against the
previous log... *g*
QUOTE:
Exim statistics from 1999-11-28 04:02:33 to 1999-11-28 04:02:38
Grand total summary
-------------------
At least one address
TOTAL Volume Messages Hosts Delayed Failed
Received 2872 4 1 0 0.0% 0 0.0%
Delivered 9868 12 1
Deliveries by transport
-----------------------
Volume Messages
address_pipe 1620 4
procmail 8248 8
Messages received per hour (each dot is 1 message)
--------------------------------------------------
00-01 0
01-02 0
02-03 0
03-04 0
04-05 4 ....
05-06 0
06-07 0
07-08 0
08-09 0
09-10 0
10-11 0
11-12 0
12-13 0
13-14 0
14-15 0
15-16 0
16-17 0
17-18 0
18-19 0
19-20 0
20-21 0
21-22 0
22-23 0
23-24 0
Deliveries per hour (each dot is 1 delivery)
--------------------------------------------
00-01 0
01-02 0
02-03 0
03-04 0
04-05 12 ............
05-06 0
06-07 0
07-08 0
08-09 0
09-10 0
10-11 0
11-12 0
12-13 0
13-14 0
14-15 0
15-16 0
16-17 0
17-18 0
18-19 0
19-20 0
20-21 0
21-22 0
22-23 0
23-24 0
Time spent on the queue: all messages
-------------------------------------
Under 1m 4 100.0% 100.0%
Time spent on the queue: messages with at least one remote delivery
-------------------------------------------------------------------
No relayed messages
-------------------
Top 50 sending hosts by message count
-------------------------------------
4 2872 local
Top 50 sending hosts by volume
------------------------------
4 2872 local
Top 50 local senders by message count
-------------------------------------
2 2062 exim
2 810 root
Top 50 local senders by volume
------------------------------
2 2062 exim
2 810 root
Top 50 destinations by message count
------------------------------------
12 9868 local
Top 50 destinations by volume
-----------------------------
12 9868 local
Top 50 local destinations by message count
------------------------------------------
2 2062 xxx
2 2062 xxx
2 2062 xxx
2 2062 xxx
2 810 |/usr/majordomo/wrapper archive2.pl -f
/usr/majordomo/archive/syschk/syschk -D -a (syschk-archive@???)
<root@???>
2 810 |/usr/majordomo/wrapper resend -l syschk syschk-list
(syschk@???) <root@???>
Errors encountered: 0
---------------------
We down from 35MB avarage, to like less than 1MB in emails for the entire
day? Those 12 messages all coming from an internal mailing list aswell... I
think this is weird.... Unfortunately now, I do realize that I will have to
go dig seriously into my log files now... But what happens *IF* Exim crashed
here? Exim physically does not need run to be able to send mail to user
accounts from and to the same system does it ? I mean the entire message
just basically gets "echo'ed" into the user's mailbox. Thus being able to
send the odd 12 messages the next day from our administrating mailing list.
I will check the logs seriously (especially exim's logs, aswell as my daemon
logs (which monitors starts, stops, and restarts) for activity regarding to
exim. If exim crashed... I think we have a serious problem here.
Also possibly, can I take the liberty to perhaps ask someone to try and
duplicate this problem for me? As stated in the originial email, +- 3MB
attachment (2.5MB file, and a 500Kb file binary), to about 30 destinations??
It might not be neccessary, but wont it in some way help pin point out a
serious problem here?
Once again, appologies for the long email....
Best Regards
Chris Knipe
----- Original Message -----
From: Marc Haber <Marc.Haber-lists@???>
To: <exim-users@???>
Sent: Sunday, November 28, 1999 10:59 PM
Subject: Re: [Exim] Some strange behaviour?
On Sat, 27 Nov 1999 01:36:34 +0200, you wrote:
>We are running Exim 3.3 (I am talking under correction) on RedHat Linux 6.1
>in a small sized organization (25 - 30 people using the mail and other
>services).
you mean 3.03? There is not yet a version 3.3.
>First and foremost, I have noticed this only once. I sent an email using
>Outlook Express 5. The TO: field in outlook gets separated by means of
>semicolons, and I am sure Exim supports and understands this. However, when
>I sent an message, with about an 2MB attachment to the email, with about 20
>destinations, the email addresses got messed up somewhere along the line.
>
>I unfortunately do not have the bounce message anymore, but basically,
email
>addresses got rewritten to stuff like say info@???;
info@???
>got changed to info@domain1; .cominfo@??? etc... Any information
>on how and why this might be happening would be appreciated. Up to date
>though, this type of behavior has only happened to me once in the 2 years,
>and doesn't really prove to be a really big problem to me, but I however
>would appreciate as to why this might be happening.
What do the logs say about that message?
Greetings
Marc
--
-------------------------------------- !! No courtesy copies, please
!! -----
Marc Haber | " Questions are the | Mailadresse im Header
Karlsruhe, Germany | Beginning of Wisdom " | Fon: *49 721 966 32 15
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fax: *49 721 966 31 29
--
## List details at
http://www.exim.org/mailman/listinfo/exim-users Exim
details at
http://www.exim.org/ ##
