Re: [exim] Exim gets constantly the same mail, sent from our…

Top Page
Delete this message
Reply to this message
Author: Bob Johnson
Date:  
To: exim-users
CC: gagabay
Subject: Re: [exim] Exim gets constantly the same mail, sent from our customer (gagabay)
> From: gagabay <mwi78@???>
> To: exim-users@???
>
> Renaud Allard wrote:
> > Could you please post some logs from this email.
> > I already got someone telling me the exact same thing, and indeed, the
> > MUA sent it only once but their MTA sent the very same mail every 4
> > seconds. The logs will more than probably tell you the truth.
>
> here are a part of my logfile, showing 2 times the same E-Mail. As you can
> see, the e-mail ID is the same.
>
> 2007-03-22 06:52:28 1HUFqV-0003h0-Uc <= abc@??? H=mr02.abc.de
> [80.64.190.3] P=esmtp S=31425519
> id=65CF84D36522DB4EBFDB3BA63C5FCAD80111EC23@??? T="HWG - Pl\303\244ne"
> 2007-03-22 06:52:55 1HUFqV-0003h0-Uc => /var/opt/vmail/domain/info/Maildir
> <info@???> R=virtual_domains T=virtual_delivery
> 2007-03-22 06:52:55 1HUFqV-0003h0-Uc Completed
> 2007-03-22 07:02:04 1HUG11-0000TR-Sq <= abc@??? H=mr02.abc.de
> [80.64.190.3] P=esmtp S=31425519
> id=65CF84D36522DB4EBFDB3BA63C5FCAD80111EC23@??? T="HWG - Pl\303\244ne"
> 2007-03-22 07:02:17 1HUG11-0000TR-Sq =>
> /var/opt/vmail/domain.de/info/Maildir <info@???> R=virtual_domains
> T=virtual_delivery
> 2007-03-22 07:02:17 1HUG11-0000TR-Sq Completed


I have had a similar problem. In my case, the remote system connects and
starts to deliver a message. My system in turn runs SpamAssassin (among
other tests) before accepting the message for delivery. In the problem
cases, this takes an unusally long time (e.g. > 60 sec instead of < 5 sec).
After 60 seconds of waiting, the sending system times out, sends a QUIT, and
disconnects. Exim does not notice this, finishes testing the message, finds
it clean, and accepts it. After Exim sends the ack to the sending system
(which is no longer there), it notices the QUIT and disconnects. My Exim
thinks it has received and acknowledged the message, while the sending system
thinks the message was never delivered and delivers it again later. Our users
sometimes receive a message from the particular server that does this to us
two or three times, but a few have been delivered as many as 90 times and
only stopped when I contacted the admins of the sending system and asked them
to remove the message from their queue.

I think the sending system should have a timeout longer than 60 seconds, but
even so, this is a bug in Exim. At the moment I can't find a log entry that
illustrates it, though.

- Bob