ConfigServer Community Forum

Hi,
I have this issue, I am searching an email that I received this morning in MailControl, I searched by subject, IP and From Address and MailControl doesn't show the info, but if I do the search with the same info using "Search System Logs" inside ConfigServer Firewall the info is there.

Any idea why is this happening?

Example:
SEARCH SYSTEM LOGS

Log: /var/log/exim_mainlog
Text: 103.230.34.252
2017-01-11 09:37:17 SMTP connection from [103.230.34.252]:59621 (TCP/IP connection count = 32)
2017-01-11 09:37:37 H=smtp99252.rs-apn4.com [103.230.34.252]:59621 Warning: Sender rate 1.0 / 1h
2017-01-11 09:37:59 1cRKyM-001sL0-Hh <= sent@edmtsp.com H=smtp99252.rs-apn4.com [103.230.34.252]:59621 P=esmtp S=74833 id=WINDOWS-YV93HWT4256c54b3fc445e2b415b5f1ac307b0b@WINDOWS-YV93HWT T="2016 Top Sellers! Do You Have One? Best Time To Own It!" for xxxx@yyyyy.zzz
2017-01-11 09:37:59 SMTP connection from smtp99252.rs-apn4.com [103.230.34.252]:59621 closed by QUIT

MailControl
Displaying search results for:
[clientip] contains "103.230.34.252"

(Nothing)
or
Displaying search results for:
[headers] contains "103.230.34.252"

(Nothing)

Regards,
Sergio

Try searching for the Mail ID: 1cRKyM-001sL0-Hh
If that doesn't find anything then it's not in the database. You should then search /var/log/maillog for that ID looking for messages or errors about how it was handled.

ForumAdmin wrote: ↑13 Jan 2017, 18:15 Try searching for the Mail ID: 1cRKyM-001sL0-Hh
If that doesn't find anything then it's not in the database. You should then search /var/log/maillog for that ID looking for messages or errors about how it was handled.

MailControl:
Search on ID didn't work either:
Message ID [1cRKyM-001sL0-Hh] not found

Search System Logs
/var/log/maillog:
Jan 11 09:38:57 server2 MailScanner: Content Checks: Detected and have disarmed web bug tags in HTML message in 1cRKyM-001sL0-Hh from sent@edmtsp.com

It seems that MailControl didn't found it while the info is in maillog.

Just to clarify this a bit, the message actually was received but when I wanted to check all the headers in MailControl to find more info to proceed to block the IP, I didn't found anything.

That is odd. Which database driver are you using? If it is the MySQL Asynchronous one, I would strongly recommend switching to the MySQL synchronous one as that should be more stable.

Sorry for the delay.

My server has CloudLINUX and MySQL is managed by Governor, so, I can't tell what type is it.

The database driver I was referring to is the setting in MailControl Settings. Since this post we have released a new version of MSFE aimed at addressing issues with mail missing from the d/b.