1 最后由 easthero (2010-11-17 14:38:28) 编辑

主题: 带附件的邮件没收到不知道是否被当成病毒干掉了 请帮我看一下这段日志

A发给B一封带附件的邮件,rar格式加密码 B说没收到

  我查了一下iredapd.log中有记录,mail.log没有记录

在www收到的logwatch中有以下类似的记录

--------------------- amavis Begin ------------------------

1094 messages checked and passed.
1 spam messages were found.

**Unmatched Entries**
   (!)Decoding of p003 (Zip archive data, at least v2.0 to extract) failed, leaving it unpacked: Compress::Raw::Zlib defines neither package nor VERSION--version check failed at (eval 104) line 467.: 4 Time(s)
   Found decoder for    .F    at /usr/bin/unfreeze: 1 Time(s)
   Found decoder for    .tar  at /bin/cpio: 1 Time(s)
   Found decoder for    .deb  at /usr/bin/ar: 1 Time(s)
   SQL::Quarantine      NOT loaded: 1 Time(s)
   Internal decoder for .uue : 1 Time(s)
   Passed UNCHECKED, LOCAL [221.181.95.222] [231.181.95.222] <a@foobar.com> -> <b@foobar.com>, Message-ID: <000901cb84a2$1c73f180$555bd480$@com>, mail_id: 77Wo31pnEfm8, Hits: -5.814, size: 1608276, queued_as: D189D220057, 978 ms: 1 Time(s)
   INFO: unfolded 1 illegal all-whitespace continuation lines: 1 Time(s)
   Found decoder for    .cab  at /usr/bin/cabextract: 1 Time(s)
   Found decoder for    .lha  at /usr/bin/lha: 1 Time(s)
   Found decoder for    .gz   at /usr/bin/gzip -d: 1 Time(s)
   Found decoder for    .exe  at /usr/bin/unrar; /usr/bin/lha; /usr/bin/arj: 1 Time(s)
   Found decoder for    .rar  at /usr/bin/unrar: 1 Time(s)
   Internal decoder for .hqx : 1 Time(s)
   Found decoder for    .Z    at /usr/bin/uncompress: 1 Time(s)
   Found decoder for    .lzo  at /usr/bin/lzop -d: 1 Time(s)
   Internal decoder for .asc : 1 Time(s)
   (!)Decoding of p002 (Zip archive data, at least v2.0 to extract) failed, leaving it unpacked: Compress::Raw::Zlib defines neither package nor VERSION--version check failed at (eval 104) line 467.: 1 Time(s)
   Internal decoder for .zip : 1 Time(s)
   Internal decoder for .tnef: 1 Time(s)
   Creating db in /var/amavis/db/; BerkeleyDB 0.36, libdb 4.3: 1 Time(s)
   Found decoder for    .arc  at /usr/bin/nomarch: 1 Time(s)
   Found decoder for    .zoo  at /usr/bin/zoo: 1 Time(s)
   AM.PDP-in proto code loaded: 1 Time(s)
   Local-out proto code loaded: 1 Time(s)
   Using primary internal av scanner code for ClamAV-clamd: 1 Time(s)
   Found decoder for    .rpm  at /usr/bin/rpm2cpio: 1 Time(s)
   starting.  /usr/sbin/amavisd at localhost.localdomain amavisd-new-2.6.4 (20090625), Unicode aware, LANG="en_US.UTF-8": 1 Time(s)
   Found decoder for    .cpio at /bin/cpio: 1 Time(s)
   Passed UNCHECKED, LOCAL [125.215.44.61] [155.215.44.61] <b@foobar.com> -> <a@foobar.com>, Message-ID: <000301cb8489$8169ed60$843dc820$@com>, mail_id: Ih7fD0rhKOHZ, Hits: -6.759, size: 32410, queued_as: 21C56220057, 8694 ms: 1 Time(s)
   No decoder for       .7z   tried: 7zr, 7za, 7z: 1 Time(s)
   Internal decoder for .ync : 1 Time(s)
   Internal decoder for .mail: 1 Time(s)
   Found decoder for    .arj  at /usr/bin/arj: 1 Time(s)
   No decoder for       .tnef tried: tnef: 1 Time(s)
   Found decoder for    .bz2  at /usr/bin/bzip2 -d: 1 Time(s)

---------------------- amavis End -------------------------

这封邮件到哪去了? /var/log/clamav也没有看到相关日志

回复: 带附件的邮件没收到不知道是否被当成病毒干掉了 请帮我看一下这段日志

检查 postfix 日志,以收件人、发件人地址进行过滤,看这封邮件相关的信息。

回复: 带附件的邮件没收到不知道是否被当成病毒干掉了 请帮我看一下这段日志

确认了一下,收件人收到了邮件

不过延时好几个小时才收到

可能是队列太长的问题