The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Why maillog is double logged

Discussion in 'E-mail Discussions' started by docenta, May 12, 2006.

  1. docenta

    docenta Well-Known Member

    Joined:
    May 9, 2006
    Messages:
    64
    Likes Received:
    0
    Trophy Points:
    6
    All entries in maillog have doubled.


    May 9 14:42:00 crystal cpanelpop[16033]: Login host=87.126.136.216 ip=127.0.0.1 user=stantchevm@bobimx.com realuser=stantchevm@bobimx.com
    May 9 14:42:00 crystal cpanelpop[16033]: Login host=87.126.136.216 ip=127.0.0.1 user=stantchevm@bobimx.com realuser=stantchevm@bobimx.com
    May 9 14:42:00 crystal cpanelpop[16033]: Session Closed host=87.126.136.216 ip=127.0.0.1 user=stantchevm@bobimx.com realuser=stantchevm@bobimx.com totalxfer=197
    May 9 14:42:00 crystal cpanelpop[16033]: Session Closed host=87.126.136.216 ip=127.0.0.1 user=stantchevm@bobimx.com realuser=stantchevm@bobimx.com totalxfer=197


    my syslog.conf seems like :


    # Log all kernel messages to the console.
    # Logging much else clutters up the screen.
    #kern.* /dev/console

    # Log anything (except mail) of level info or higher.
    # Don't log private authentication messages!
    *.info;mail.none;authpriv.none;cron.none -/var/log/messages

    # The authpriv file has restricted access.
    authpriv.* -/var/log/secure

    # Log all the mail messages in one place.
    local0.notice;local0.debug;mail.*;mail.none;mail.i nfo;local0.info /var/log/maillog

    # Log cron stuff
    cron.* -/var/log/cron

    # Everybody gets emergency messages
    *.emerg *

    # Save news errors of level crit and higher in a special file.
    uucp,news.crit -/var/log/spooler

    # Save boot messages also to boot.log
    local7.* -/var/log/boot.log
    local0.notice;local0.debug;mail.*;mail.none;mail.i nfo;local0.info /var/log/maillog





    What can cause this double logging in maillog ?




    Thanks.
     
  2. sparek-3

    sparek-3 Well-Known Member

    Joined:
    Aug 10, 2002
    Messages:
    1,384
    Likes Received:
    23
    Trophy Points:
    38
    cPanel Access Level:
    Root Administrator
    Notice the two instances of /var/log/maillog in your syslog.conf. You can remove one of these and restart syslogd and that should clear up the issue

    /scripts/restartsrv_syslogd

    As to why the syslog.conf has multiple entries for this? I'm not really sure, but I have seen this happen before.
     
  3. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    The extra line happens if you run:

    /scripts/fixrelayd
     
  4. docenta

    docenta Well-Known Member

    Joined:
    May 9, 2006
    Messages:
    64
    Likes Received:
    0
    Trophy Points:
    6
    thanks

    yes I saw the extra line :)
    now all is OK.


    Thanks.
     
  5. nsdesign

    nsdesign Active Member

    Joined:
    Jul 22, 2002
    Messages:
    32
    Likes Received:
    0
    Trophy Points:
    6

    Thanks for this - explains why our customers email bandwidth quotas are massive - we had a few duplicate entries in there...

    Would this also explain why the email account "diskspace quotas" are showing wrongly? Since upgrading to maildir from mbox, we've had a few (although not all) customers report that their mailbox quotas are being reported as much higher than they actually are.... Is this related?

    Thanks
    Gary
     
  6. Vatoloco

    Vatoloco Well-Known Member

    Joined:
    Jun 21, 2004
    Messages:
    100
    Likes Received:
    0
    Trophy Points:
    16
    Good to know. I just noticed my maillog was duplicating every entry 13 times. I guess I know how many times I've ran fixrelayd now. :)
     
Loading...

Share This Page