1

Topic: Strange amavis

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0,9,7
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====


another strange situation.
User sends a email with atachment  to two recipients. One is BLOCKED/DISCARD, the second copy  PASS

Jan 12 13:02:10 mail postfix/cleanup[17409]: 49C7540BA05B: message-id=<13ec01d38b9d$cb304160$6190c420$@mydom.com>
Jan 12 13:02:10 mail postfix/qmgr[23171]: 49C7540BA05B: from=<saaa@mydom.com>, size=29464, nrcpt=1 (queue active)
Jan 12 13:02:10 mail amavis[17545]: (17545-05) Blocked BANNED (.image,.pcx,file_usÂługa_skÂładu grudzieĂą_2017.xlsx) {NoBounceInternal}, ORIGINATING/MYNETS LOCAL [192.168.1.1]:56196 <saaa@mydom.com> -> , Queue-ID: 49C7540BA05B, Message-ID: <13ec01d38b9d$cb304160$6190c420$@mydom.com>, mail_id: F74Vi1ehjjSI, Hits: -, size: 29464, 201 ms
Jan 12 13:02:10 mail postfix/smtp-amavis/smtp[16695]: 49C7540BA05B: to=<zacr@mydom.com>, relay=127.0.0.1[127.0.0.1]:10026, delay=0.33, delays=0.11/0/0/0.21, dsn=2.5.0, status=sent (250 2.5.0 Ok, id=17545-05, DISCARD(bounce.suppressed))
Jan 12 13:02:10 mail postfix/qmgr[23171]: 49C7540BA05B: removed
Jan 12 13:02:11 mail postfix/10025/smtpd[15406]: connect from localhost[127.0.0.1]
Jan 12 13:02:11 mail postfix/10025/smtpd[15406]: 277CA40BA05B: client=localhost[127.0.0.1]
Jan 12 13:02:11 mail postfix/cleanup[16525]: 277CA40BA05B: message-id=<13e601d38b9d$cb1147b0$6133d710$@mydom.com>
Jan 12 13:02:11 mail postfix/qmgr[23171]: 277CA40BA05B: from=<saaa@mydom.com>, size=21856, nrcpt=1 (queue active)
Jan 12 13:02:11 mail postfix/10025/smtpd[15406]: disconnect from localhost[127.0.0.1]
Jan 12 13:02:11 mail amavis[17415]: (17415-03) Passed CLEAN {RelayedInternal}, ORIGINATING/MYNETS LOCAL [192.168.1.1]:56196 <saaa@mydom.com> -> <krak@mydom.com>, Queue-ID: 199A44093848, Message-ID: <13e601d38b9d$cb1147b0$6133d710$@mydom.com>, mail_id: ZzvNCZuPzW07, Hits: 0.216, size: 20795, queued_as: 277CA40BA05B, dkim_new=dkim:mydom.com, 964 ms, Tests: [ALL_TRUSTED=-1,HTML_MESSAGE=0.001,MIME_HTML_MOSTLY=0.001,TVD_RCVD_SINGLE=1.213,TVD_SPACE_RATIO=0.001]
Jan 12 13:02:11 mail postfix/smtp-amavis/smtp[17239]: 199A44093848: to=<krak@mydom.com>, relay=127.0.0.1[127.0.0.1]:10026, delay=1.1, delays=0.15/0/0/0.97, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 277CA40BA05B)
Jan 12 13:02:11 mail postfix/qmgr[23171]: 199A44093848: removed
Jan 12 13:02:11 mail postfix/pipe[17750]: 277CA40BA05B: to=<krak@mydom.com>, relay=dovecot, delay=0.12, delays=0.01/0.01/0/0.11, dsn=2.0.0, status=sent (delivered via dovecot service)
J

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: Strange amavis

*) Do you have per-user spam policy for the passed recipient?
*) Please turn on debug mode in Amavisd and try again, extract related log and paste here for troubleshooting. FYI:
https://docs.iredmail.org/debug.amavisd.html