Sometimes it happens that a user receives a message and this is duplicated many times in the INBOX.
Example: one of our users received a single e-mail message (from the LOGs it is only one) and in the imbox it has the same message repeated over 6000 times.
I had to delete duplicates from the webmail otherwise his POP3 was blocked ...
These are the LOG for that message.
SMTP:
[2020.01.09] 12:35:27.156 [136.143.188.50][22153859] rsp: 220 mail3.sersis.com [2020.01.09] 12:35:27.156 [136.143.188.50][22153859] connected at 09/01/2020 12:35:27 [2020.01.09] 12:35:27.156 [136.143.188.50][22153859] Country code: US [2020.01.09] 12:35:27.313 [136.143.188.50][22153859] cmd: EHLO sender4-of-o50.zoho.com [2020.01.09] 12:35:27.313 [136.143.188.50][22153859] rsp: 250-mail3.sersis.com Hello [136.143.188.50]250-SIZE250-AUTH LOGIN CRAM-MD5 NTLM250-VRFY250-8BITMIME250-DSN250 OK [2020.01.09] 12:35:27.500 [136.143.188.50][22153859] cmd: MAIL FROM: [2020.01.09] 12:35:27.500 [136.143.188.50][22153859] senderEmail(1): posta@imapcasa.it parsed using: [2020.01.09] 12:35:33.876 [136.143.188.50][22153859] rsp: 250 OK Sender ok [2020.01.09] 12:35:33.876 [136.143.188.50][22153859] Sender accepted. Weight: 0. Block threshold: 50. [2020.01.09] 12:35:34.032 [136.143.188.50][22153859] cmd: RCPT TO: [2020.01.09] 12:35:34.283 [136.143.188.50][22153859] rsp: 250 OK Recipient ok [2020.01.09] 12:35:34.454 [136.143.188.50][22153859] cmd: DATA [2020.01.09] 12:35:34.454 [136.143.188.50][22153859] Performing PTR host name lookup for 136.143.188.50 [2020.01.09] 12:35:34.470 [136.143.188.50][22153859] PTR host name for 136.143.188.50 resolved as sender4-of-o50.zoho.com [2020.01.09] 12:35:34.470 [136.143.188.50][22153859] rsp: 354 Start mail input; end with . [2020.01.09] 12:35:34.626 [136.143.188.50][22153859] senderEmail(2): posta@imapcasa.it parsed using: "Roberta - IMAP CASA SRL" [2020.01.09] T12:35:34.626 [136.143.188.50][22153859] Sender accepted. Weight: 0. Block threshold: 50. [2020.01.09] 12:35:34.876 [136.143.188.50][22153859] rsp: 250 OK [2020.01.09] 12:35:34.876 [136.143.188.50][22153859] Received message size: 3563 bytes [2020.01.09] 12:35:34.876 [136.143.188.50][22153859] Successfully wrote to the HDR file. (s:\SmarterMail\Spool\SubSpool2\5252044.hdr) [2020.01.09] 12:35:34.876 [136.143.188.50][22153859] Data transfer succeeded, writing mail to 5252044.eml (MessageID: <00a101d5c6e1$25633ea0$7029bbe0$@imapcasa.it>) [2020.01.09] 12:35:35.032 [136.143.188.50][22153859] cmd: QUIT [2020.01.09] 12:35:35.032 [136.143.188.50][22153859] rsp: 221 Service closing transmission channel [2020.01.09] 12:35:35.032 [136.143.188.50][22153859] disconnected at 09/01/2020 12:35:35
DELIVERY:
[2020.01.09] 12:35:37.112 [52044] Delivery started for posta@imapcasa.it at 12:35:37 [2020.01.09] 12:35:43.132 [52044] Added to SpamCheckQueue (0 queued; 1/30 processing) [2020.01.09] 12:35:43.132 [52044] [SpamCheckQueue] Begin Processing. [2020.01.09] 12:35:43.162 [52044] Starting Spam Checks. [2020.01.09] 12:35:43.162 [52044] [HoneyPot] Message passed through the honeypot. [2020.01.09] 12:35:44.397 [52044] Spam check results: [REVERSE DNS LOOKUP: 0,Passed], [NULL SENDER: 0,passed], [_HONEYPOT: 0,passed], [_CYREN: 0,Unknown], [_MESSAGESNIFFER: 0,code:0], [_INTERNALSPAMASSASSIN: 0:0], [_SPF: 0,Pass], [_DKIM: 5,None], [BACKSCATTER: 0,passed], [CBL: 0,passed], [DNS REAL-TIME BLACKHOLE LIST: 0,passed], [HOSTKARMA - BLACKLIST: 0,passed], [HOSTKARMA - BROWNLIST: 0,passed], [MAILSPIKE L3: 0,passed], [MAILSPIKE L4: 0,passed], [MAILSPIKE L5: 0,passed], [MCAFEE: 0,passed], [SEM - BLACK: 0,passed], [SORBS - ABUSE: 0,passed], [SORBS - DYNAMIC IP: 0,passed], [SORBS - NO SERVER: 0,passed], [SORBS - NOMAIL: 0,passed], [SORBS - PROXY: 0,passed], [SORBS - RECENT: 0,passed], [SORBS - SOCKS: 0,passed], [SPAMCOP: 0,passed], [SPAMHAUS - CSS: 0,passed], [SPAMHAUS - PBL: 0,passed], [SPAMHAUS - SBL: 0,passed], [SPAMRATS: 0,passed], [SURRIEL: 0,passed], [TRUNCATE: 0,passed], [UCEPROTECT LEVEL 1: 0,passed], [UCEPROTECT LEVEL 2: 0,passed], [UCEPROTECT LEVEL 3: 0,passed], [SURBL: 0,passed], [SEM-URI: 0,passed], [URIBL BLACK: 0,passed], [URIBL GREY: 0,passed], [URIBL RED: 0,passed] [2020.01.09] 12:35:44.397 [52044] Spam Checks completed. [2020.01.09] 12:35:44.397 [52044] Removed from SpamCheckQueue (0 queued or processing) [2020.01.09] 12:35:46.135 [52044] Added to LocalDeliveryQueue (0 queued; 1/50 processing) [2020.01.09] 12:35:46.135 [52044] [LocalDeliveryQueue] Begin Processing. [2020.01.09] 12:35:46.135 [52044] Starting local delivery to info@plattnersrl.com [2020.01.09] 12:35:46.135 [52044] Delivery for posta@imapcasa.it to info@plattnersrl.com has completed (Delivered) Filter: None [2020.01.09] 12:35:46.135 [52044] End delivery to info@plattnersrl.com (MessageID: <00a101d5c6e1$25633ea0$7029bbe0$@imapcasa.it>) [2020.01.09] 12:35:46.135 [52044] Removed from LocalDeliveryQueue (0 queued or processing) [2020.01.09] 12:35:49.145 [52044] Removing Spool message: Killed: False, Failed: False, Finished: True [2020.01.09] 12:35:49.145 [52044] Delivery finished for posta@imapcasa.it at 12:35:49 [id:5252044]