1. Check your MailEnable logs, and see if MESpamC is invoked on all messages.
This is from the activity log
This would tell me what MAI ID's to look for in the debug log08/03/06 11:36:14 [F940E0DFBFC94052B9BDF2CEBAA4393D.MAI] from (SMTP) [SMTP:jesper@nlphuset.dk]->[SF:nlphuset.dk/jesper] Mapped Literal
08/03/06 11:36:14 [9444CAA3F27C4FAEBF58B42923E26782.MAI] from (SMTP) [SMTP:jesper@oneopenwindow.com]->[SF:oneopenwindow.com/jesper] Mapped Literal
08/03/06 11:36:19 [5D3EBCA04D3D4F28BE8F5823B68B293F.MAI] from (SMTP) [SMTP:jesper@oneopenwindow.dk]->[SF:oneopenwindow.dk/jesper] Mapped Literal
From the debug log:
This would then tell me that three of the msg's get processed08/03/06 11:36:14 Processing file 5D3EBCA04D3D4F28BE8F5823B68B293F.MAI from queue SMTP
08/03/06 11:36:14 Pre Pickup Event executing: CMD /C "C:\Program Files (x86)\MESpamC\MESpamC.CMD" 5D3EBCA04D3D4F28BE8F5823B68B293F.MAI SMTP
08/03/06 11:36:14 Processing file 9444CAA3F27C4FAEBF58B42923E26782.MAI from queue SMTP
08/03/06 11:36:14 Pre Pickup Event executing: CMD /C "C:\Program Files (x86)\MESpamC\MESpamC.CMD" 9444CAA3F27C4FAEBF58B42923E26782.MAI SMTP
08/03/06 11:36:14 Processing file F940E0DFBFC94052B9BDF2CEBAA4393D.MAI from queue SMTP
08/03/06 11:36:14 Pre Pickup Event executing: CMD /C "C:\Program Files (x86)\MESpamC\MESpamC.CMD" F940E0DFBFC94052B9BDF2CEBAA4393D.MAI SMTP
08/03/06 11:36:14 ME-MTA-ROUTE [F940E0DFBFC94052B9BDF2CEBAA4393D.MAI] from [SMTP] Connector queued to [SF] Connector as [3824F8CABB4C4A60AD3BBA497C561F7B.MAI]
08/03/06 11:36:14 ME-MTA-ROUTE [9444CAA3F27C4FAEBF58B42923E26782.MAI] from [SMTP] Connector queued to [SF] Connector as [50946DC06CC043BAB75A813D31CED152.MAI]
08/03/06 11:36:19 ME-MTA-ROUTE [5D3EBCA04D3D4F28BE8F5823B68B293F.MAI] from [SMTP] Connector queued to [SF] Connector as [58C1FC780F15479BBDFEAE75F2039090.MAI]
Adding the following line:
To the common headerX-Spam-Checker-Version: SpamAssassin 3.1.3 (2006-06-01) on server2
X-Spam-Level:
X-Spam-Status: No, score=0.6 required=5.0 tests=AWL,HTML_MESSAGE,
MANY_EXCLAMATIONS,SPF_HELO_PASS,SUSPICIOUS_RECIPS autolearn=no
version=3.1.3
There is actually 5 receivers, but logicly enough, the mail server sorts out the clones before processing with the MTA.Received: from mail2world.com ([66.28.189.197]) by oneopenwindow.dk with MailEnable ESMTP; Thu, 03 Aug 2006 11:36:12 +0200
Received: from mail pickup service by mail2world.com with Microsoft SMTPSVC;
Thu, 3 Aug 2006 02:21:40 -0700
auth-sender: muzzysalta@icqmail.com
Return-Path: <muzzysalta@icqmail.com>
Received: from 10.1.201.114 unverified ([10.1.201.114]) by mwde08la.mail2world.com with Mail2World SMTP Server,
Thu 03 Aug 2006 02:21:38 -07:00
Received: from [212.242.209.7] by icqmail.com with HTTP; 8/3/2006 2:21:38 AM PST
thread-index: Aca23jj8/5nvieZYQeyAbVmuLzh53g==
Thread-Topic: So tasty! Very Tasty!
From: "Muzzy First" <muzzysalta@icqmail.com>
To: <jesper@oneopenwindow.dk>,
<jesper@oneopenwindow.com>,
<jesper@oneopenwindow.dk>,
<jesper@nlphuset.dk>,
<jesper@oneopenwindow.com>
Subject: So tasty! Very Tasty!
Date: Thu, 3 Aug 2006 02:21:38 -0700
Message-ID: <058401c6b6de$38ff05b0$72c9010a@mail2world.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0585_01C6B6A3.8CA02DB0"
X-Mailer: Microsoft CDO for Exchange 2000
Importance: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807
Content-Class: urn:content-classes:message
Priority: normal
X-Spam: [FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF,0,41]"\Miscellaneous\Extreme"
<0>
X-OriginalArrivalTime: 03 Aug 2006 09:21:40.0081 (UTC) FILETIME=[3A200610:01C6B6DE]
Received-SPF: none (oneopenwindow.dk: icqmail.com does not designate permitted sender hosts)
This is a multi-part message in MIME format.
------=_NextPart_000_0585_01C6B6A3.8CA02DB0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Do You Think I Am Tasty?
Lets look at the SpamAssassin server.
Since I cant trust that if the MAI ID is 34563545 on the mailenable server then it wouldnt be the same on the SpamAssassin server.
But it wasnt hard since I knew that the sending server was mail2world.com
Alright... So this is what happens:Thu Aug 3 11:51:58 2006 [5276] info: spamd: connection from ws221.ltsp [81.19.251.221] at port 4223
Thu Aug 3 11:51:58 2006 [5276] info: spamd: processing message <058401c6b6de$38ff05b0$72c9010a@mail2world.com> for (unknown):107
Thu Aug 3 11:52:03 2006 [5276] info: spamd: clean message (0.6/5.0) for (unknown):107 in 5.0 seconds, 2669 bytes.
Thu Aug 3 11:52:03 2006 [5276] info: spamd: result: . 0 - AWL,HTML_MESSAGE,MANY_EXCLAMATIONS,SPF_HELO_PASS,SUSPICIOUS_RECIPS scantime=5.0,size=2669,user=(unknown),uid=107,required_score=5.0,rhost=ws221.ltsp,raddr=81.19.251.221,rport=4223, mid=<058401c6b6de$38ff05b0$72c9010a@mail2world.com>,autolearn=no
Thu Aug 3 11:52:03 2006 [23825] info: prefork: child states: II
1. Mail gets sent
2. Mail received by mail enable
3. Mail Enable processes by sending the 3 msg's through the MTA
4. MESpamC should send 3 msg's to SpamD
5. SpamD receives and proceses 1 msg.
6. SpamD sends back
7. Mail Enable releases all 3 msg's and delivers them?