Exim Version: 4.43 + exiscan
OS: Debian Sarge
Config files: http://www.lubemobile.com.au/ras/exim4
At
http://www.lubemobile.com.au/ras/exim4 you will
find a file called "lost". In there is a list of 102
recipients that didn't receive an email sent via exim.
This list has been extracted from the log files you can
find on the same web page. The program that extracted
them is also there.
By lost, I mean that in mainlog you can see the message
come in. You can also see the recipients it is destined
to. Later on you will see a "Completed" line for the
message, but the recipients listed in "lost" were never
sent the message. You can tell by noting the absence of
"... => recipient" or ".... -> recipient" lines.
All the messages that were lost got an LMTP 4.x.x error
while they were being passed to the virus scanner. All
the messages bar that got an LMTP 4.x.x error, bar one,
had a recipient dropped. A couple had more than one
recipient dropped.
Although the source of the LMTP error is probably not
relevant, it is caused by some issue with the Kaspersky
anti virus scanner we are using. It had been working
well, but at about the end of January Kaspersky released
major update, which according to the their representatives
here in Australia overloaded their virus pattern update
servers. Thereafter the update server has been slow
and unreliable. During the update process the anti
virus daemon is disabled, and this is the source of the
LMTP errors. What has changed is that because of the
issues Kaspersky is having, daemon is being disabled
far more often than it was before.
