Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Why maillog is double logged

Discussion in 'E-mail Discussion' started by docenta, May 12, 2006.

  1. docenta

    docenta Well-Known Member

    Joined:
    May 9, 2006
    Messages:
    64
    Likes Received:
    0
    Trophy Points:
    156
    All entries in maillog have doubled.


    May 9 14:42:00 crystal cpanelpop[16033]: Login host=87.126.136.216 ip=127.0.0.1 user=stantchevm@bobimx.com realuser=stantchevm@bobimx.com
    May 9 14:42:00 crystal cpanelpop[16033]: Login host=87.126.136.216 ip=127.0.0.1 user=stantchevm@bobimx.com realuser=stantchevm@bobimx.com
    May 9 14:42:00 crystal cpanelpop[16033]: Session Closed host=87.126.136.216 ip=127.0.0.1 user=stantchevm@bobimx.com realuser=stantchevm@bobimx.com totalxfer=197
    May 9 14:42:00 crystal cpanelpop[16033]: Session Closed host=87.126.136.216 ip=127.0.0.1 user=stantchevm@bobimx.com realuser=stantchevm@bobimx.com totalxfer=197


    my syslog.conf seems like :


    # Log all kernel messages to the console.
    # Logging much else clutters up the screen.
    #kern.* /dev/console

    # Log anything (except mail) of level info or higher.
    # Don't log private authentication messages!
    *.info;mail.none;authpriv.none;cron.none -/var/log/messages

    # The authpriv file has restricted access.
    authpriv.* -/var/log/secure

    # Log all the mail messages in one place.
    local0.notice;local0.debug;mail.*;mail.none;mail.i nfo;local0.info /var/log/maillog

    # Log cron stuff
    cron.* -/var/log/cron

    # Everybody gets emergency messages
    *.emerg *

    # Save news errors of level crit and higher in a special file.
    uucp,news.crit -/var/log/spooler

    # Save boot messages also to boot.log
    local7.* -/var/log/boot.log
    local0.notice;local0.debug;mail.*;mail.none;mail.i nfo;local0.info /var/log/maillog





    What can cause this double logging in maillog ?




    Thanks.
     
  2. sparek-3

    sparek-3 Well-Known Member

    Joined:
    Aug 10, 2002
    Messages:
    1,799
    Likes Received:
    131
    Trophy Points:
    343
    cPanel Access Level:
    Root Administrator
    Notice the two instances of /var/log/maillog in your syslog.conf. You can remove one of these and restart syslogd and that should clear up the issue

    /scripts/restartsrv_syslogd

    As to why the syslog.conf has multiple entries for this? I'm not really sure, but I have seen this happen before.
     
  3. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,460
    Likes Received:
    22
    Trophy Points:
    463
    Location:
    Go on, have a guess
    The extra line happens if you run:

    /scripts/fixrelayd
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. docenta

    docenta Well-Known Member

    Joined:
    May 9, 2006
    Messages:
    64
    Likes Received:
    0
    Trophy Points:
    156
    thanks

    yes I saw the extra line :)
    now all is OK.


    Thanks.
     
  5. nsdesign

    nsdesign Active Member

    Joined:
    Jul 22, 2002
    Messages:
    32
    Likes Received:
    0
    Trophy Points:
    156

    Thanks for this - explains why our customers email bandwidth quotas are massive - we had a few duplicate entries in there...

    Would this also explain why the email account "diskspace quotas" are showing wrongly? Since upgrading to maildir from mbox, we've had a few (although not all) customers report that their mailbox quotas are being reported as much higher than they actually are.... Is this related?

    Thanks
    Gary
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. Vatoloco

    Vatoloco Well-Known Member

    Joined:
    Jun 21, 2004
    Messages:
    99
    Likes Received:
    0
    Trophy Points:
    166
    Good to know. I just noticed my maillog was duplicating every entry 13 times. I guess I know how many times I've ran fixrelayd now. :)
     
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice