Submitted by jahlewis on Wed, 09/09/2009 - 22:19
For one of our virtual servers, messages being sent to the account are not arriving.
Searching via the virtual server admin mail log search is saying the messages we sent to the jjc-dar account were "thrown away". They did not arrive in the inbox. Any ideas?
Date Time Sender Target User Destination
2009-09-09 08:41:48 spool@avenue.org jjc-dar@jjc-dar.avenue.org jjc-dar Throw away
2009-09-09 17:15:43 spool@avenue.org jjc-dar@jjc-dar.avenue.org jjc-dar Throw away
2009-09-09 17:18:50 tigerchat@comcast.net jjc-dar@jjc-dar.avenue.org jjc-dar Throw away
2009-09-09 18:32:06 spool716@yahoo.com jjc-dar@jjc-dar.avenue.org jjc-dar Throw away
2009-09-09 18:33:26 montave09@gmail.com jjc-dar@jjc-dar.avenue.org jjc-dar Throw away
here are the relevant entris in /var/log/maillog
Sep 8 13:30:03 kermit postgrey[2799]: action=pass, reason=client AWL, client_name=qmta01.westchester.pa.mail.comcast.net, client_address=76.96.62.16, sender=tigerchat@comcast.net, recipient=jjc-dar@jjc-dar.avenue.org
Sep 9 17:18:34 kermit postgrey[2946]: action=pass, reason=recipient whitelist, client_name=qmta09.westchester.pa.mail.comcast.net, client_address=76.96.62.96, sender=tigerchat@comcast.net, recipient=jjc-dar@jjc-dar.avenue.org
Sep 9 18:29:42 kermit postgrey[2946]: action=pass, reason=recipient whitelist, client_name=n3a.bullet.mail.ac4.yahoo.com, client_address=76.13.13.66, sender=spool716@yahoo.com, recipient=jjc-dar@avenue.org
Sep 9 18:31:49 kermit postgrey[2946]: action=pass, reason=recipient whitelist, client_name=n7a.bullet.mail.ac4.yahoo.com, client_address=76.13.13.70, sender=spool716@yahoo.com, recipient=jjc-dar@jjc-dar.avenue.org
Sep 9 18:27:37 kermit postgrey[2946]: action=pass, reason=recipient whitelist, client_name=mail-fx0-f210.google.com, client_address=209.85.220.210, sender=montave09@gmail.com, recipient=jjc-dar@avenue.org
Sep 9 18:33:10 kermit postgrey[2946]: action=pass, reason=recipient whitelist, client_name=mail-bw0-f227.google.com, client_address=209.85.218.227, sender=montave09@gmail.com, recipient=jjc-dar@jjc-dar.avenue.org
The relevant entries and some others from/var/log/procmail.log
Time:1252530062 From:blockheadl68@sanfordcontracting.com To:jjc-dar@avenue.org User:jjc-dar Size:35547 Dest:/home/jjc-dar/Maildir/.virus/new/1252530062.22532_0.kermit Mode:Virus
Time:1252530527 From:spool@avenue.org To:acctmgrs@avenue.org User:jjc-dar Size:2859 Dest:/dev/null Mode:None
Time:1252530892 From:spool@avenue.org To:jjc-dar@avenue.org User:jjc-dar Size:978 Dest:/dev/null Mode:None
Time:1252530943 From:spool@avenue.org To:jjc-dar@jjc-dar.avenue.org User:jjc-dar Size:992 Dest:/dev/null Mode:None
Time:1252531130 From:tigerchat@comcast.net To:jjc-dar@jjc-dar.avenue.org User:jjc-dar Size:1545 Dest:/dev/null Mode:None
Subject: Re: jjc-dar mail
Time:1252532092 From:E-Cards@hallmark.com To:jjc-dar@avenue.org User:jjc-dar Size:6192 Dest:/dev/null Mode:Spam
Time:1252535273 From:montave09@gmail.com To:jjc-dar@avenue.org User:jjc-dar Size:2169 Dest:/dev/null Mode:None
Time:1252535398 From:spool716@yahoo.com To:jjc-dar@avenue.org User:jjc-dar Size:3015 Dest:/dev/null Mode:None
Time:1252535526 From:spool716@yahoo.com To:jjc-dar@jjc-dar.avenue.org User:jjc-dar Size:3051 Dest:/dev/null Mode:None
Time:1252535606 From:montave09@gmail.com To:jjc-dar@jjc-dar.avenue.org User:jjc-dar Size:2278 Dest:/dev/null Mode:None
Time:1252543972 From:citicards@info.citibank.com To:jjc-dar@avenue.org User:jjc-dar Size:3385 Dest:/dev/null Mode:SpamStatus:
Closed (fixed)
Comments
Submitted by andreychek on Wed, 09/09/2009 - 22:24 Comment #1
Sounds like they're all being marked as spam for some reason.
If you choose your domain in Virtualmin, then go into Services -> Spam and Virus Delivery, what are the following options set to:
Destination for spam emails
Delete spam if score is above
Submitted by jahlewis on Fri, 09/11/2009 - 06:06 Comment #2
Destination for Spam emails: ~/Maildir/.spam/
Delete spam if score is above: 12
Submitted by jahlewis on Fri, 09/11/2009 - 08:36 Comment #3
OK, I think we found the problem here.
A filter had been created in usermin to throw away everything away that arrived in the inbox
Usermin -> Account Information -> Account Functions -> create rules to filter...
Always was set to "throw away", we deleted that filter, and all is well.
Not sure how that got changed (probably the user), but sorry for the bother.
A reminder that it would be great to have the webmin actions log export to syslog, or to get a "report" emailed regularily, but even in the webmin actions log, we can't see what users are doing in usermin. is there a way to view user's usermin actions, or settings changes?
you can close this issue. Thanks jamie
Submitted by andreychek on Fri, 09/11/2009 - 09:28 Comment #4
Glad to hear it's working!
I'll assign this to Jamie to see if he has a comment regarding your points at the end there.
However, I will offer that there is a separate directory for Usermin -- you can view the Usermin log in /var/usermin/.
Submitted by JamieCameron on Fri, 09/11/2009 - 12:01 Comment #5
Currently, the only place to check Usermin actions is in the web format log at /var/usermin/miniserv.log . You would be able to see the filter creation in there ..
Webmin/Virtualmin have more extensive logging that can be viewed in the Webmin Actions Log module.
Submitted by Issues on Fri, 09/25/2009 - 20:18 Comment #6
Automatically closed -- issue fixed for 2 weeks with no activity.