Jump to content
EduGeek EdSec 2026 is Go! 27th Oct in Derby! Join us for a day of EdTech security focused talks, networking, and an evening social ×

Recommended Posts

Posted

Encountering occasional weirdness with Zimbra using web access. The following message arrived at 03:09 but did not appear on my screen until 11am. Other messages arrived as expected in the meantime. Can anyone explain this for me?

 

Carol

 

Message (internal information replaced in CAPS)

 

Return-Path: MY EMAIL ADDRESS

Received: from zimbra.OUR.DOMAIN (LHLO zimbra.OUR.DOMAIN)

([sERVER_IP][sERVER_IP].[sERVER_IP].[sERVER_IP].[sERVER_IP][sERVER_IP]3) by zimbra.OUR.DOMAIN with LMTP; Thu, 4 Feb 2[sERVER_IP][sERVER_IP][sERVER_IP]

[sERVER_IP]3:[sERVER_IP]9:[sERVER_IP]4 +[sERVER_IP][sERVER_IP][sERVER_IP][sERVER_IP] (GMT)

Received: from localhost (localhost.OUR.DOMAIN [[sERVER_IP]27.[sERVER_IP].[sERVER_IP].[sERVER_IP]])

by zimbra.OUR.DOMAIN (Postfix) with ESMTP id A[sERVER_IP]BE48[sERVER_IP]E3CB

for ; Thu, 4 Feb 2[sERVER_IP][sERVER_IP][sERVER_IP] [sERVER_IP]3:[sERVER_IP]9:[sERVER_IP]4 +[sERVER_IP][sERVER_IP][sERVER_IP][sERVER_IP] (GMT)

X-Virus-Scanned: amavisd-new at zimbra.wolsinghamschool.net

X-Spam-Flag: NO

X-Spam-Score: -2.[sERVER_IP][sERVER_IP]4

X-Spam-Level:

X-Spam-Status: No, score=-2.[sERVER_IP][sERVER_IP]4 tagged_above=-[sERVER_IP][sERVER_IP] required=6.6

tests=[ALL_TRUSTED=-[sERVER_IP].8, AWL=-[sERVER_IP].9[sERVER_IP]3, BAYES_[sERVER_IP][sERVER_IP]=-2.599,

FH_DATE_PAST_2[sERVER_IP]XX=3.[sERVER_IP]88] autolearn=no

Received: from zimbra.OUR.DOMAIN ([[sERVER_IP]27.[sERVER_IP].[sERVER_IP].[sERVER_IP]])

by localhost (zimbra.OUR.DOMAIN [[sERVER_IP]27.[sERVER_IP].[sERVER_IP].[sERVER_IP]]) (amavisd-new, port [sERVER_IP][sERVER_IP][sERVER_IP]24)

with ESMTP id OY8qoY5-nil3 for ;

Thu, 4 Feb 2[sERVER_IP][sERVER_IP][sERVER_IP] [sERVER_IP]3:[sERVER_IP]9:[sERVER_IP]4 +[sERVER_IP][sERVER_IP][sERVER_IP][sERVER_IP] (GMT)

Received: from Moodleserver[sERVER_IP].local (moodle.wolsinghamschool.net [[sERVER_IP][sERVER_IP].[sERVER_IP].[sERVER_IP].4[sERVER_IP]])

by zimbra.OUR.DOMAIN (Postfix) with ESMTP id [sERVER_IP]947D8[sERVER_IP]E3[sERVER_IP]F

for ; Thu, 4 Feb 2[sERVER_IP][sERVER_IP][sERVER_IP] [sERVER_IP]3:[sERVER_IP]9:[sERVER_IP]4 +[sERVER_IP][sERVER_IP][sERVER_IP][sERVER_IP] (GMT)

Received: by Moodleserver[sERVER_IP].local (Postfix, from userid 33)

id E7942[sERVER_IP]C34[sERVER_IP]C9; Thu, 4 Feb 2[sERVER_IP][sERVER_IP][sERVER_IP] [sERVER_IP]3:[sERVER_IP]8:49 +[sERVER_IP][sERVER_IP][sERVER_IP][sERVER_IP] (GMT)

To: MY EMAIL ADDRESS

Subject: WolsiWeb: [ERROR] Scheduled backup status

Date: Thu, 4 Feb 2[sERVER_IP][sERVER_IP][sERVER_IP] [sERVER_IP]3:[sERVER_IP]8:49 +[sERVER_IP][sERVER_IP][sERVER_IP][sERVER_IP]

From: "Carol Booth"

Message-ID:

X-Priority: [sERVER_IP]

X-Mailer: PHPMailer [version Moodle 2[sERVER_IP][sERVER_IP]7[sERVER_IP][sERVER_IP][sERVER_IP]57[sERVER_IP]]

MIME-Version: [sERVER_IP].[sERVER_IP]

Content-Transfer-Encoding: 8bit

Content-Type: text/plain; charset="UTF-8"

Posted

It looks like the times and dates have been replaced with [sERVER_IP] as well :)

 

You will be able to find more info in the file /var/log/mail.log (or mail.log.0, ..log.1 for further back in time). Filter it for all the message IDs in the email like this (example):

 

cat /var/log/mail.log | grep -e A0BE480E3CB -e 0947D80E30F -e ..........

 

To find the message IDs, look for the lines that say by hostname.example.com (Postfix) with ESMTP id B0A83BE276.

  • Thanks 1

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...