efa-project.org

EFA Version 4.0.2
I need help, please,
EFA system crash yesterday and I use system restore function in eFa-Configure and it back to work
But I found many mails stock in Milter Inbound,
Can anyone teach me how to release it or fix it, thanks a lot I see this in maillog
-----
Apr 18 17:34:07 mailgw MailScanner[12210]: New Batch: Found invalid queue files: 493NtY3Plpz2xF4 493NvK1rCtz2xF7 493Nz924Ctz2xFC 493Nzg3GXcz2xFG 493Nzx2QZNz2xFH 493P4K2ytKz44JX 493P4d0nhdz44Jd 493P6B5nSzz44Jp 493P6F3hrcz44Jx 493P6F3jrNz44K0 493P6F3klfz44K1 493P6k5dqrz44K1 493P8d4FXvz44K4 493P8h0Nbxz44K7 493P8h0PXRz44K9 493P8l2qh0z44KH 493P8l2pbjz44KG 493P8l2sHQz44KM 493P8l2rTdz44KJ 493P8l59Wgz44KW 493PJP4y1Pz44KM 493PJX0pwnz44Kf 493PJX0qtyz4C5r 493PJX0rs0z4C5x 493PKl0qj1z4C5r .......
Apr 18 17:34:09 mailgw MailScanner[12225]: New Batch: Found 273 messages waiting

----

How did your system crash? Invalid queue files suggests that these files are corrupted or missing information.

Can you share the contents of one of the files? Please redact any sensitive info.

Located in /var/spool/mailscanner/milterin

The situation of crash was mails add and stock in Milter Inbound and not send it out
It seem begin after I modified file 'header_checks in' /etc/postfix , but it was no back to work after header_checks change back. There should be something else I guess.
I download one of the file in milterin and try to add here and got 'Invalid file extension:' error.
I post its content below, domain name was changed to 'mydomain'
-----------------------------------------------------------------------------
X-mydomain-MailScanner-Relay-Reject:
O<ld@mydomain.de>
S<mariezykwwhg@drkhedri.com>
X-Spam-Status: No
X-mydomain-MailScanner-eFa-Watermark: 1587704028.70967@dwVZyEdiFHag4YDDZVdJBg
X-mydomain-MailScanner-eFa-From: mariezykwwhg@drkhedri.com
X-mydomain-MailScanner-eFa-SpamScore: s
X-mydomain-MailScanner-eFa: Found to be clean
X-mydomain-MailScanner-eFa-ID: 493Nyw3X9LzMrqxj
X-mydomain-MailScanner-eFa-Information: Please contact mis@mydomain.com.tw for more information
Received: from balance.drkhedri.com (balance.yobaat.com [217.112.142.170])
(no client certificate requested)
by mailgw.mydomain.com.tw (MailScanner Milter) with SMTP id 493Nyw3X9LzMrqxj
for <ld@mydomain.de>; 五, 17 4月 2020 12:53:46 +0800 (CST)
DMARC-Filter: OpenDMARC Filter v1.3.2 mailgw.mydomain.com.tw 493Nyw3X9LzMrqxj
Authentication-Results: mailgw.mydomain.com.tw; dmarc=pass (p=none dis=none) header.from=drkhedri.com
Authentication-Results: mailgw.mydomain.com.tw; spf=pass smtp.mailfrom=mariezykwwhg@drkhedri.com
DKIM-Filter: OpenDKIM Filter v2.11.0 mailgw.mydomain.com.tw 493Nyw3X9LzMrqxj
Authentication-Results: mailgw.mydomain.com.tw;
dkim=pass (1024-bit key) header.d=drkhedri.com header.i=mariezykwwhg@drkhedri.com header.b="PnnW2kas"
DMARC-Filter: OpenDMARC Filter v1.3.2 mailgw.mydomain.com.tw 493Nyw3X9LzMrqxj
Authentication-Results: mailgw.mydomain.com.tw; dmarc=pass (p=none dis=none) header.from=drkhedri.com
Authentication-Results: mailgw.mydomain.com.tw; spf=pass smtp.mailfrom=mariezykwwhg@drkhedri.com
DKIM-Filter: OpenDKIM Filter v2.11.0 mailgw.mydomain.com.tw 493Nyw3X9LzMrqxj
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=dkim; d=drkhedri.com;
h=Date:Message-ID:From:Subject:List-Unsubscribe:MIME-Version:To:Content-Type:Content-Transfer-Encoding; i=mariezykwwhg@drkhedri.com;
bh=9ZfmgOFPlD4t9iLeR2mEkKm3Czs=;
b=PnnW2kasHcg+sk6LDTB6HPOvvE1HriZH9hAkzBnSJX3JQO6NAv8Unr3Nstgd294xhOhOPngCvZjT
gbQhM0hnFa/kYHSBQ3DOkUUewQUX/Am+FnVcuAsN2iIk/Ro23vDVn4azbuBDqQNUl1H6x2EApym2
Fa9a2VbCGp30OoIYydA=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=dkim; d=drkhedri.com;
b=fYiGwE1OE5Q3QJE0UmiMhfxTjZDOmO11EIuOMPrcEjnbg5oHuodyCfQWcr2KT54zsz1vqZw/54/z
CUSPlSWF/W95A6+9F9Dulqv5ZMQfvBaQJ6XUVEbtFNAhIFAZhAgwJv2EzPrXLKDb/xJKrWknK8Lo
c+5wX33TmRYLenKLe/0=;
Date: Fri, 17 Apr 2020 06:53:40 +0200
Message-ID: <45701608327917948@recddd.drkhedri.com>
From: =?UTF-8?Q?Marie?= <mariezykwwhg@drkhedri.com>
Subject: =?UTF-8?Q?Wollen_Sie_ein_Paket_Rasensamen_+_N=C3=A4hrl=C3=B6sung_umsonst=3F_Rasens=C3=A4maschine,_mit_einem_tollen_Angebot?=
List-Unsubscribe: <http://drkhedri.com/ub.php?b=2h75399500 ... rjaz3xsb0b>
MIME-Version: 1.0
X-Report-Abuse: <http://drkhedri.com/aa.php?a=2h75399500 ... rjaz3xsb0b>
To: <ld@mydomain.de>
Content-Type: multipart/alternative; boundary=b1_phd2z6rjupjjrb5t4rvv-O4hrOgl; charset="UTF-8"
Content-Transfer-Encoding: 8bit

--b1_phd2z6rjupjjrb5t4rvv-O4hrOgl
Content-Type: text/plain; format=flowed; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable


=0D
Die N=C3=A4hrl=C3=B6sung und die Samen bekommen Sie als Bonus zur Rasens=C3=
=A4maschine - begrasen Sie schnell!:=0D
=0D
http://jt4.drkhedri.com=0D
=0D
=0D
=0D
Abmelden:=0D
http://drkhedri.com/ub.php?z=3D2h753995 ... z3xsb0b=0D
=0D
Rasens=C3=A4maschine mit einer besonderen Formel, sie gibt einen blendenden=
Rasen=


--b1_phd2z6rjupjjrb5t4rvv-O4hrOgl
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable


<!DOCTYPE html><head><meta name=3D"charset" content=3D"utf-8"><meta charset=
=3D"utf-8"><title></title></head><body>=0D
<table align=3D"center" border=3D"0" cellpadding=3D"0" cellspacing=3D"0" st=
yle=3D"width:650px;margin:0 auto;"><tbody><tr><td>M=C3=B6chten Sie einen sc=
h=C3=B6nen Rasen? Rasens=C3=A4maschine mit fantastisch gr=C3=BCnender Wirku=
ng.<br></td></tr><tr><td>
<p style=3D"line-height:22px;font-size:14px;"><a href=3D"http://jt4.drkhedr=
i.com/dtn:2h7539950082dxqwfn0c5majd5rjaz3xsb0b"><img alt=3D"Wie k=C3=B6nnen=
Sie einen traumsch=C3=B6nen Rasen haben? Begrasungsmaschine jetzt mit grat=
is Samen" style=3D"font:auto Arial, Helvetica, sans-serif oblique boldbold;=
border-bottom:dotted 3px #cc0000; font-variant:inherit; font-family:; " sr=
c=3D"http://ra1.drkhedri.com/00.jpg" /></a>=0D
<br><a style=3D"white-space:normal; padding-left:auto; " href=3D"http://jt4=
.drkhedri.com/tzm:2h7539950082dxqwfn0c5majd5rjaz3xsb0b">W=C3=BCnschen Sie s=
ich einen sch=C3=B6nen Rasen? Rasens=C3=A4maschine mit Bonusn=C3=A4hrl=C3=
=B6sung und Bonussamen</a>=0D
<br></p></td></tr></tbody></table><br>Sie werden traumsch=C3=B6nen Rasen ha=
ben: Rasens=C3=A4ger=C3=A4t mit einer genialen Formel=C2=A0<br><div style=
=3D"text-align:center;"><a style=3D"font-size:12px; background-color:#fffff=
f; border-right-width:2px; " href=3D"http://drkhedri.com/ub.php?j87=3D2h753=
9950082dxqwfn0c5majd5rjaz3xsb0b">Abmelden hier</a></div>=0D
<img src=3D"http://drkhedri.com/ob.php?z=3D2h753995 ... jd5rjaz3x=
sb0b" alt=3D"Sch=C3=B6ner Garten, blitzschnell? Nagelneue Rasens=C3=A4masch=
ine f=C3=BCr einen gesunden Rasen">=0D
Begrasungsger=C3=A4t zum Hausgebrauch, zum Grundst=C3=BCck: herrlicher Rase=
n =C3=BCberall, leicht!</body></html>=

--b1_phd2z6rjupjjrb5t4rvv-O4hrOgl--
--------------------------------------------------------------

Execute this as root (sudo su -)
Replace mydomain with your domain.

It works, mails which stock in milterin released, thank you very much
May I please ask what the command do 'sed -i "/^X-mydomain-MailScanner-Relay-Reject:/d" *'
Thank a lot

Well, it turns out you uncovered a bug with your system crash. That command removed that line from every queue file, which was erroneously placed before the pre-header. What should have happened is all those emails should have been quarantined from a relay rejection.

Hi
looks like i have a similar issue . Since today ...

After restart this disappeared. But why did it happen ?


I didnt have the faulty line in my mails.

Yours



------
Mail Queue Viewer

Milter Inbound:
total 1556
-rw-------. 1 postfix root 29443 Aug 3 08:59 4BKpf56Crbz54HRH
-rw-------. 1 postfix root 4877 Aug 3 09:34 4BKqR024m1z54Ht8
-rw-------. 1 postfix root 314180 Aug 3 09:48 4BKqkZ6TGyz54Ht8
-rw-------. 1 postfix root 276194 Aug 3 09:50 4BKqnJ1LjVz54Ht8
-rw-------. 1 postfix root 4875 Aug 3 09:56 4BKqvf3SZnz54HtD
-rw-------. 1 postfix root 52262 Aug 3 10:10 4BKrCh0mHXz54Ht8
-rw-------. 1 postfix root 82742 Aug 3 10:50 4BKs5y57HCz54Ht8
-rw-------. 1 postfix root 104705 Aug 3 10:54 4BKsBK55fzz54Ht8
-rw-------. 1 postfix root 50579 Aug 3 11:08 4BKsVn1tg6z54Ht8
-rw-------. 1 postfix root 6327 Aug 3 11:14 4BKsdy5dkHz54Ht8
-rw-------. 1 postfix root 117231 Aug 3 11:16 4BKshp1Htgz54Ht8
-rw-------. 1 postfix root 87513 Aug 3 12:02 4BKtjJ0dxwz54Ht8
-rw-------. 1 postfix root 56231 Aug 3 13:03 4BKw473hB8z54Ht8
-rw-------. 1 postfix root 78231 Aug 3 13:15 4BKwL146wDz54Ht8
-rw-------. 1 postfix root 27977 Aug 3 13:59 4BKxJT0hXNz54Ht8
-rw-------. 1 postfix root 14951 Aug 3 14:49 4BKyQH57P3z54Ht8
-rw-------. 1 postfix root 34863 Aug 3 15:14 4BKyz94JT9z54Ht8
-rw-------. 1 postfix root 12092 Aug 3 15:45 4BKzg64KdXz54Ht8
-rw-------. 1 postfix root 46751 Aug 3 16:27 4BL0Zs0Vvxz54Ht8
-rw-------. 1 postfix root 4320 Aug 3 17:49 4BL2PJ35yYz54Ht8
-rw-------. 1 postfix root 12822 Aug 3 20:31 4BL60Y6wthz54Ht8
-rw-------. 1 postfix root 69049 Aug 3 21:17 4BL71D1Yqtz54Ht8
-rw-------. 1 postfix root 49776 Aug 3 21:33 4BL7N06zJxz54HtD
-rw-------. 1 postfix root 3215 Aug 3 22:02 4BL81h0DC1z54Ht8
---

sample

----

[root@efa4 milterin]# more 4BL81h0DC1z54Ht8
O<bbb@sss.de>
S<sss@gmx.de>
Received: from mout.gmx.net (mout.gmx.net [212.227.17.22])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(no client certificate requested)
by efa4.sss.de (MailScanner Milter) with SMTP id 4BL81h0DC1z54Ht8
for <bbb@sss.de>; Mon, 3 Aug 2020 22:02:32 +0200 (CEST)
X-Greylist: from auto-whitelisted by SQLgrey-1.8.0
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gmx.net;
s=badeba3b8450; t=1596484950;
bh=M8xsy95DsaIakwQ/CUjErUJBHlSjk+1LrEYBWBkuNoY=;
h=X-UI-Sender-Class:To:From:Subject:Date;
b=YfGM8NiPj3Ejora1sHIi5xlYThVYx5/OP/7jZZaDl4gzo21MpDgejilQIr5aT7wgl
k3AjZWyELbExqk9QCpNlfHSRFTGy9nOEkJIm5cUO+t4XTvEiZ6IWijQzIp9zDXA55b
++8gZxalIrWRV3PD+VcePg4w++tqUpTllDJIMJkE=
X-UI-Sender-Class: 01bb95c1-4bf8-414a-932a-4f6e2808ef9c
Received: from Blob.local ([88.134.72.18]) by mail.gmx.com (mrgmx105
[212.227.17.168]) with ESMTPSA (Nemesis) id 1MvsEx-1kvTTV0mGd-00st9j for
<bbb@sss.de>; Mon, 03 Aug 2020 22:02:30 +0200
To: =?UTF-8?Q?Bob Marley?= <bbb@sss.de>
From: Ich <sss@gmx.de>
Subject: test nach zertifikat
Message-ID: <df200109-2ba2-1191-7069-902a7bdf96e1@gmx.de>
Date: Mon, 3 Aug 2020 22:02:27 +0200
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:68.0)
Gecko/20100101 Thunderbird/68.11.0
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Content-Language: de-DE
X-Provags-ID: V03:K1:dE6go6Bz4jz5/JIYzW7V4mu49h+24es6CtcW4LCgR2iRs/B89nF
DqawFg3fLkajSUk2bnIHC9Djkow3rIgsWiWK548rHVmTPGsrkYlotjCNWJ+SUfXIZxEy9Au
D9cJprRvJWQtkI2A04wK41uqF5bcWWfPcdZIU+HfKfDHfwCoqYmWjgmQKzAC79bYvnHT2ud
Y8Nkd9ZiJj98J6wR4PFSw==
X-Spam-Flag: NO
X-UI-Out-Filterresults: notjunk:1;V03:K0:hmgAMNwSB30=:TXYkSPuWJ5TPXEM70pD6yC
vJFxEwIwF3HHb1fCv7zeLfId9MzO4U6WXEfdtxo1dcHE1P8MTWpcTdtU9Su3djofcF9pW7YHq
WII+SJ4QMTVeE5Xzmla08rOHLYYeJujSIbrpiNuFwffNyN1fBru8ndePJferwntFipduPecaE
6jGbzL8eQuDBdpBGtvaKRkn5ZyQv/hPAYwxsguYcO4gunGPH+3wB12vOh+uAkurDUcq1uTaZY
aXjGXuTAVfJM543I5GlpNEzGcxzmurW1XmOUX8okf7iuEFesQCo0lTjYt3Kv2llo7zeHAgL6q
xhg7e8lZoosCf0QKJQ6bbY7yAXm1pjrUw6tJ6uMX+HMgjzc6EiWhU08AB8iu0czSZpKSoWMRR
Top/itqBzmpjrMYaB9W036yQuyDSQa3Kb1id1kREjNv9YrbwG3zVwR27Tes1oEkgG4e7Vmx4U
cI9eIys8NrVjUg7qpKUY/HQshN85ZrBDFo/fLw59KqURN7boIFzLzjx96YlmkJYGmuieuxFiF
IrLKa17khZn80cmqffbUiyqXbA34IpE43GfrbmMLp+HjbW7oy6uQCG+2gH+Jduz87CRExqKCm
I/MROM+Ov45H5iFeb8nk+jEhLI6QHwro6UAVUr08/gCXViZmsGQmrWmIH5Sa4Btb3rl3yGwDW
eQL5rg+Tg2rZ1o+0idFBjPCs2DvIuz2jzdgRAP4FZj/ojue/nX6R1LgGxnmoTFZ9kALwtlasb
1dcs469VCwjT97GcFEoak7YaCR3Y5MOmwF4xMWJvf5g8+aarLHQEAUQtSm0bJ+9koXkxfslq5
LpGsvz2j63zQBOVOPfBX+Ir5SoytGT19GFiumiqPhk6CRzXYnZhoJKZTR5V8Hv7IOIIUAPQ8Y
oGAqMkj0T7MHiodZ9wBsCph2EG6VSNWnzV+TVKfszZ3MHICGXdriKgElirE0GpZ63/MXnfQSH
Hev+nx/DrrQi3YAJzrJiwWibJaJJXd6bRVDdHAmtTNZTV1hGk+7pdQxoE3T1TNmAZBlfongUH
sg8HCBWx+WcQnezVThlkVqrvzc2H9WRG2ye3RqWA5dPViLhqxRwlWeDuOuniDUTwOp7Adx8VE
Quyw6q/yKZxUFHx6M1CJFyBs4QOBYv30Ipld1/wEGahP+7nu7KHGJmLw2u0I60LWGO714QkNn
jqmh6IGt6x6pVvqXb/dg6q34u/NkxUE5g09RnqWZ4ydIbLTvF0PW/zJm3s2gPi9XCDMjD5R8e
TeLD5V8hTD9X4NF6YoCAGOywrsdbum5Z2+eRNHwO11OmjRB6nCp4pkp/i4oWfNpcA0Iv6JhX5
k/XS1WpxwnQpB2yMjSoNT1y1M5zMbJR3eXGEvPwqgpKwwL2dX9c=

sss