Can someone tell me why this incoming email didn't get delivered?

OS type and version CentOS Linux 7.9.2009
Virtualmin version 7.5

Thank you

Feb 16 16:20:44 www postfix/smtpd[715]: connect from[]
Feb 16 16:20:56 www postgrey[658]: action=pass, reason=client whitelist,, client_address=,,
Feb 16 16:20:56 www postfix/smtpd[715]: 34CBFB0C:[]
Feb 16 16:20:56 www postfix/cleanup[4055]: 34CBFB0C: message-id=<OS3P301MB04569CF1F14CA3A97553DA43CFA09@OS3P301MB0456.JPNP301.PROD.OUTLOOK.COM>
Feb 16 16:20:56 www postfix/cleanup[4055]: 34CBFB0C: discard: header x-microsoft-antispam-message-info:? tiZJ4lXXpg1d2m1uFoxpF0VSZjcguS04AQ53z4KHnnlOURWytzMKkX+dKecsuxPtBsJmHDo48bsjXIBiKrfYXXyHTvPXoYLMh6RXAygARI4AueXj/IRlPNbzajj/1qgchQA1VD3In2EHKg2h8S+hhEc9JpI7fblcuxyJ from[]; from=<> to=<> proto=ESMTP helo=<>
Feb 16 16:20:57 www postfix/smtpd[715]: disconnect from[]

Have you checked the spam box?

It never made it to procmail, as far as I can tell, so it can’t be in spam.

Are you using RBLs in Postfix? Any other rules that would reject mail?

I’ve never seen cleanup discard a message. I just checked our maillog for the past week and see nothing like that.

I’m not sure how cleanup would even do that, it doesn’t seem like that’s it’s job. Postfix manual - cleanup(8)

Maybe it just means it discarded a bogus/weird header?

found this, it may help.

1 Like

I am using RBLs but I am also using header_checks which I suspected originally and is probably the cause. I will have to go through it carefully again to see what the offending string is.

1 Like

Yes, definitely header checks. It even says so (header ...) I just didn’t understand how to read it since I’ve never seen cleanup discard a message…I didn’t even know that’s where it happened with header/body checks, as I usually don’t use any filtering in Postfix. I do all my spam processing, except postgrey, outside of Postfix so it can always be a weight.

Is there a log or way to log the header checks to know what the match is?

Your guess is as good as mine. I’ve never used that feature of postfix. I guess since you do use it, your guess might even be better than mine!

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.