Spam Filter ISP Forums : New release seems to duplicate messages https://www.logsat.com/spamfilter/forums/ Sun, 08 Mar 2026 03:13:34 +0000 Wed, 05 Sep 2007 13:11:43 +0000 http://blogs.law.harvard.edu/tech/rss Web Wiz Forums 11.04 360 https://www.logsat.com/spamfilter/forums/RSS_post_feed.asp?TID=6205 <![CDATA[Spam Filter ISP Forums]]> https://www.logsat.com/spamfilter/forums/forum_images/web_wiz_forums.png https://www.logsat.com/spamfilter/forums/ <![CDATA[New release seems to duplicate messages : finally got a good upload to the...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6205&PID=10870&title=new-release-seems-to-duplicate-messages#10870 Author: Terry
Subject: 6205
Posted: 05 September 2007 at 1:11pm

finally got a good upload to the ftp site...the file starting with 20070903 is the complete and good one]]> Wed, 05 Sep 2007 13:11:43 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6205&PID=10870&title=new-release-seems-to-duplicate-messages#10870 <![CDATA[New release seems to duplicate messages : I started a new post since I think...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6205&PID=10860&title=new-release-seems-to-duplicate-messages#10860 Author: Terry
Subject: 6205
Posted: 04 September 2007 at 4:41pm

I started a new post since I think we are seeing a better example of the behavior...if you want to close this one I am okay with that]]> Tue, 04 Sep 2007 16:41:41 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6205&PID=10860&title=new-release-seems-to-duplicate-messages#10860 <![CDATA[New release seems to duplicate messages : Sevo, We have still not received...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6205&PID=10846&title=new-release-seems-to-duplicate-messages#10846 Author: LogSat
Subject: 6205
Posted: 29 August 2007 at 10:01pm

Sevo,

We have still not received Terry's files, so were not able to yet determine what the problem is, or if the duplicates were sent immediately or hourly.
In regards to your question, there are no changes we are aware of in the way
emails are being forwarded. If you can zip and email us a few hours worth of SpamFilter's logfile, along with the to/from email addresses involved, we'll be happy to take a look.
]]> Wed, 29 Aug 2007 22:01:36 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6205&PID=10846&title=new-release-seems-to-duplicate-messages#10846 <![CDATA[New release seems to duplicate messages : hi, i also experience similar...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6205&PID=10844&title=new-release-seems-to-duplicate-messages#10844 Author: sevo
Subject: 6205
Posted: 29 August 2007 at 5:15pm

hi, i also experience similar behaviour (the same message being delivered multiple times). However - when looking at the log-files i see that the remote mail servers "reconnect" every other hour.
Has anything changed in the way logsat commicates to the remote server about multi-recipient messages?]]> Wed, 29 Aug 2007 17:15:16 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6205&PID=10844&title=new-release-seems-to-duplicate-messages#10844 <![CDATA[New release seems to duplicate messages : having problems with the upload...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6205&PID=10843&title=new-release-seems-to-duplicate-messages#10843 Author: Terry
Subject: 6205
Posted: 29 August 2007 at 9:28am

having problems with the upload ...I hope to get it to you today but the ftp site keeps dropping me...]]> Wed, 29 Aug 2007 09:28:44 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6205&PID=10843&title=new-release-seems-to-duplicate-messages#10843 <![CDATA[New release seems to duplicate messages : you are going to have to email...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6205&PID=10831&title=new-release-seems-to-duplicate-messages#10831 Author: Terry
Subject: 6205
Posted: 28 August 2007 at 10:45am

you are going to have to email me the userid and password for the ftp site....]]> Tue, 28 Aug 2007 10:45:47 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6205&PID=10831&title=new-release-seems-to-duplicate-messages#10831 <![CDATA[New release seems to duplicate messages : Roberto, I am also getting reports...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6205&PID=10826&title=new-release-seems-to-duplicate-messages#10826 Author: jerbo128
Subject: 6205
Posted: 27 August 2007 at 7:42pm

Roberto,
I am also getting reports of this problem.  We are working on locating it in the logs. 
Running SFE 707. 
Users deliver an email from the quarantine, and then get a second copy a few minutes later.
Jerbo128
]]> Mon, 27 Aug 2007 19:42:42 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6205&PID=10826&title=new-release-seems-to-duplicate-messages#10826 <![CDATA[New release seems to duplicate messages : Terry,From this post it is not...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6205&PID=10825&title=new-release-seems-to-duplicate-messages#10825 Author: LogSat
Subject: 6205
Posted: 27 August 2007 at 7:07pm

Terry,

From this post it is not clear which ones are the emails that were sent in duplicates. To make matter more confusing, in build 707 there is a minor bug in the logging, which causes some entries to be logged as being whitelisted, while in reality the emails are being correctly stopped. The best way to proceed is for you to zip and place on our ftp site the entire logfile for the day, so we can see what happened. Please also indicate which one was the email that was being duplicated.
]]> Mon, 27 Aug 2007 19:07:22 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6205&PID=10825&title=new-release-seems-to-duplicate-messages#10825 <![CDATA[New release seems to duplicate messages : I have applied version 707 and...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6205&PID=10823&title=new-release-seems-to-duplicate-messages#10823 Author: Terry
Subject: 6205
Posted: 27 August 2007 at 4:37pm

I have applied version 707 and we still have a problem...when the user received this message...he got 169 copies of it in his inbox....
I know this is a message that is split for some that whitelist and I think that is what is driving this problem...
 
08/24/07 12:41:52:932 -- (7160) Resolving 199.236.181.164 - mail.anchorenv.commail1.anchorenv.comducati.anchorenv.comblade03.anchorenv.com
08/24/07 12:41:53:073 -- (7640) Start virus scan
08/24/07 12:41:53:166 -- (7640) Starting quarantine procedures
08/24/07 12:41:53:166 -- (7640) Created thread (7784) to add email to quarantine
08/24/07 12:41:53:166 -- (7640) Starting bayesian procedures
08/24/07 12:41:53:198 -- (7784) EMail from uotwila@herspace.com to griffd@portptld.com was received and quarantined. Size: 4 KB, 4096 bytes
08/24/07 12:41:53:291 -- (7160) - SPF analysis for anchorenv.com done: - none
08/24/07 12:41:53:291 -- (7160) Mail from: jpisano@anchorenv.com
08/24/07 12:41:53:385 -- (7160) - MAPS search done...
08/24/07 12:41:53:385 -- (7160) RCPT TO: andrea.seger@portofportland.com accepted
08/24/07 12:41:53:385 -- (7160) Bypassed all rules for: andrea.seger@portofportland.com from jpisano@anchorenv.com ( AutoWhiteList Force Delivery)
08/24/07 12:41:53:557 -- (476) Connection from: 190.51.169.232  -  Originating country : Argentina
08/24/07 12:41:53:698 -- (7640) Blacklist cache - Added 83.152.217.35 to limbo
08/24/07 12:41:53:698 -- (7640) Disconnect
08/24/07 12:41:53:713 -- (7160) Mail from: jpisano@anchorenv.com
08/24/07 12:41:53:713 -- (7160) RCPT TO: david.ashton@portofportland.com accepted
08/24/07 12:41:53:713 -- (7160) Bypassed all rules for: david.ashton@portofportland.com from jpisano@anchorenv.com ( AutoWhiteList Force Delivery)
08/24/07 12:41:53:807 -- (476) No Data Received
08/24/07 12:41:53:807 -- (476) Disconnect
08/24/07 12:41:54:151 -- (7160) Mail from: jpisano@anchorenv.com
08/24/07 12:41:54:151 -- (7160) RCPT TO: jim.mckenna@portofportland.com accepted
08/24/07 12:41:54:151 -- (7160) Bypassed all rules for: jim.mckenna@portofportland.com from jpisano@anchorenv.com ( AutoWhiteList Force Delivery)
08/24/07 12:41:54:385 -- (7160) Mail from: jpisano@anchorenv.com
08/24/07 12:41:54:385 -- (7160) RCPT TO: krista.koehl@portofportland.com accepted
08/24/07 12:41:54:385 -- (7160) Bypassed all rules for: krista.koehl@portofportland.com from jpisano@anchorenv.com ( AutoWhiteList Force Delivery)
08/24/07 12:41:54:666 -- (4252) Start virus scan
08/24/07 12:41:54:666 -- (4252) Starting bayesian procedures
08/24/07 12:41:54:776 -- (7160) Mail from: jpisano@anchorenv.com
08/24/07 12:41:54:776 -- (7160) RCPT TO: sheila.david@portofportland.com accepted
08/24/07 12:41:54:776 -- (7160) Bypassed all rules for: sheila.david@portofportland.com from jpisano@anchorenv.com ( AutoWhiteList Force Delivery)
08/24/07 12:41:55:885 -- (7160) Found Keywords: [Subject:anal]
08/24/07 12:41:55:885 -- (7160) EMail from jpisano@anchorenv.com to andrea.seger@portofportland.com, david.ashton@portofportland.com, jim.mckenna@portofportland.com, krista.koehl@portofportland.com, sheila.david@portofportland.com matches content filter rules - rejected.
08/24/07 12:41:55:916 -- (7160) Start virus scan
08/24/07 12:41:55:948 -- (7160) Starting queueing procedures
08/24/07 12:41:55:948 -- (7160) Info - some recipients were in the WhitelistedEmailsTO list. Email will be split so they receive it while the others will not
08/24/07 12:41:55:948 -- (7160) EMail from jpisano@anchorenv.com to "andrea.seger@portofportland.com, david.ashton@portofportland.com, jim.mckenna@portofportland.com, sheila.david@portofportland.com" was queued. Size: 14 KB, 14336 bytes
08/24/07 12:41:55:948 -- (7160) Starting quarantine procedures
08/24/07 12:41:55:948 -- (6268) Sending email from jpisano@anchorenv.com to andrea.seger@portofportland.com, david.ashton@portofportland.com, jim.mckenna@portofportland.com, sheila.david@portofportland.com --
08/24/07 12:41:55:963 -- (7160) Created thread (3240) to add email to quarantine
08/24/07 12:41:55:963 -- (7160) Starting bayesian procedures
08/24/07 12:41:56:041 -- (3240) EMail from jpisano@anchorenv.com to krista.koehl@portofportland.com was received and quarantined. Size: 17 KB, 17408 bytes
08/24/07 12:41:56:088 -- (6268) EMail from jpisano@anchorenv.com to andrea.seger@portofportland.com, david.ashton@portofportland.com, jim.mckenna@portofportland.com, sheila.david@portofportland.com --  was forwarded to portexfe.pop.portptld.com:25
]]> Mon, 27 Aug 2007 16:37:52 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6205&PID=10823&title=new-release-seems-to-duplicate-messages#10823 <![CDATA[New release seems to duplicate messages : Based on what I see in the quarantine...]]> https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6205&PID=10769&title=new-release-seems-to-duplicate-messages#10769 Author: Terry
Subject: 6205
Posted: 20 August 2007 at 8:47pm

Based on what I see in the quarantine and logs I am thinking that the sender may be getting back a return code that makes them retry to send the message.  They are coming in 5 minutes or so apart.  I will download the newer release tonight and try to fix the issue you addressed there...

]]> Mon, 20 Aug 2007 20:47:31 +0000 https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6205&PID=10769&title=new-release-seems-to-duplicate-messages#10769