Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » De-duplication
  •  
pamcct

Messages: 50

Karma: 0
Send a private message to this user
I have a client who is getting duplicate emails. I look in the logs and can see the message being received twice. That means our spam service is resending the emails. Why? Because htye're not receiving a 250 OK message back from the Kerio server.

1) I don't know why that's not happening and
2) how do I de-duplicate messages? These folks get hundreds of emails a day, they don't need them twice.

All I could find in the Kerio forums was related to POP3 which we are not using.

Anyone have some guidance? Thanks!
  •  
freakinvibe

Messages: 1507
Karma: 58
Send a private message to this user
How is your setup?

Internet ==> Anti-Spam appliance ==> Kerio Connect ?

Which Anti-Spam product are you using?

Sometimes SMTP proxies/firewalls can interfere with the SMTP traffic and cause timeouts and other stuff.

Also, the debug log would help.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
pamcct

Messages: 50

Karma: 0
Send a private message to this user
It's a spam service, not a spam appliance. It's been working for years and I control the network. But you gave me an idea that I have to check later. Barracuda just changed IPs, so I need to check that in Kerio itself. Although, if that were the issue nothing would be coming through instead of SMTP happening twice. Will get back with that answer shortly.
  •  
pamcct

Messages: 50

Karma: 0
Send a private message to this user
SMTP access was already allowed for the IP ranges of the Barracuda service. So that doesn't change things. This is the debug log for the time around one of the duplicated receipts:

{koff} PROPFIND /koff/networking%40domain.com/ received from remote host='192.168.250.219', user-agent='Kerio Outlook Connector (Offline Edition) 9.2.2.2831 T1'
{koff} KoffURI::resolveFolderGuid(): oldPath=/koff/networking@domain.com/, newPath=/koff/networking<_at_> domain.com/__keriomapi__STORE/__keriomapi__STORE_ROOT/__keri omapi__IPM_ROOT/
{koff} PropertyRequestReader: found property "EmailAddress" from namespace "koff:"
{koff} PropertyRequestReader: found property "UserFullname" from namespace "koff:"
{koff} PropertyRequestReader: found property "serverVersion" from namespace "koff:"
{koff} PropertyRequestReader: found property "UpgradePolicy" from namespace "koff:"
{koff} PropertyRequestReader: found property "DowngradePolicy" from namespace "koff:"
{folder} List folders: pattern=~networking@domain.com /__keriomapi__STORE/__keriomapi__STORE_ROOT/__keriomapi__IPM _ROOT, user=no, subscribed=networking<_at_>domain.com, load_info=yes
{folder} List folders: finished in 0.00 s
{koff} (B)PROPFIND: User 'networking@domain.com' is listing properties of folder: '~networking<_at_> domain.com/__keriomapi__STORE/__keriomapi__STORE_ROOT/__keri omapi__IPM_ROOT'
{folder} Connecting to opened folder ~networking<_at_> domain.com/__keriomapi__STORE/__keriomapi__STORE_ROOT/__keri omapi__IPM_ROOT, refcount=1.
{folder} Closing folder ~networking<_at_> domain.com/__keriomapi__STORE/__keriomapi__STORE_ROOT/__keri omapi__IPM_ROOT, refcount=1
{folder} Connecting to opened folder ~networking<_at_> domain.com/__keriomapi__STORE/__keriomapi__STORE_ROOT/__keri omapi__IPM_ROOT, refcount=1.
{folder} Closing folder ~networking<_at_> domain.com/__keriomapi__STORE/__keriomapi__STORE_ROOT/__keri omapi__IPM_ROOT, refcount=1
{smtps} Sent reply to MAIL: 250 2.1.0 Sender <notify<_at_>ringcentral.com> ok
{smtps} Command RCPT TO: <tc<_at_>domain.com>
{smtps} Sent reply to RCPT: 250 2.1.5 Recipient <tc<_at_>domain.com> ok (local)
{smtps} Command DATA
{smtps} 149342 bytes received in command DATA
{smtps} Message accepted for delivery
{smtps} Command QUIT
{smtps} SMTP server session end
[123161315942400] {smtps} Task 82547 handler END

And the mail log for the same session (the two sender-host IP's are Barracuda's service):

Jun/2017 12:34:55] Recv: Queue-ID: 59495cbf-0000ccdf, Service: SMTP, From: <notify@ringcentral.com>, To: <tc@domain.com>, Size: 149563, Sender-Host: 64.235.153.11, SSL: yes, Subject: New Voice Message from (847) 446-8529 on 06/20/2017 at 09:19 AM, Msg-Id: <1497968362849-bdfba29c-99af59e2-a324d96c<_at_>ringcentral.com >

Jun/2017 12:51:33] Recv: Queue-ID: 5949605e-0000cce8, Service: SMTP, From: <notify@ringcentral.com>, To: <tc@domain.com>, Size: 149567, Sender-Host: 64.235.154.104, SSL: yes, Subject: New Voice Message from (847) 446-8529 on 06/20/2017 at 09:19 AM, Msg-Id: <1497968362849-bdfba29c-99af59e2-a324d96c<_at_>ringcentral.com >
[20/
  •  
freakinvibe

Messages: 1507
Karma: 58
Send a private message to this user
It seems like the Barracuda cloud service sends it and then sends it again 30 minutes later.

The debug log seems to be from the second sending. Can you send the debug log from the first try as well (Jun/2017 12:34:55)?

Do you have any Spam related stuff switched on on Kerio? Like Graylisting or Spam Repellent?


Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
pamcct

Messages: 50

Karma: 0
Send a private message to this user
That was the only thing at the time of the message receipt in the mail log. IOW, there's only one entry for each two sends. Barracuda's saying that they're not receiving the 250 OK messages so they're sending it again.
  •  
Brian Carmichael (Kerio)

Messages: 710
Karma: 70
Send a private message to this user
Are you using the spam repellent feature in Kerio Connect? If so, make sure the delay is less than 15 seconds, or disable it.

Brian Carmichael
Senior Technical Marketing Engineer | Kerio
Stay Connected Anytime, Anywhere. Discover Kerio Cloud!
  •  
pamcct

Messages: 50

Karma: 0
Send a private message to this user
My bad - here's the debug from the second sending:

20/Jun/2017 12:51:31][123161362657280] {smtps} Command EHLO mail14.ess.barracuda.com
[20/Jun/2017 12:51:31][123161362657280] {smtps} Sent reply to EHLO: 250 mx.domain.com ...
[20/Jun/2017 12:51:31][123161362657280] {smtps} Command STARTTLS
[20/Jun/2017 12:51:33][123161356828672] {smtps} 149344 bytes received in command DATA
[20/Jun/2017 12:51:33][123161356828672] {smtps} Message accepted for delivery
[20/Jun/2017 12:51:34][123161356828672] {smtps} Command QUIT
[20/Jun/2017 12:51:34][123161356828672] {smtps} SMTP server session end
[20/Jun/2017 12:51:34][123161356828672] {smtps} Task 82563 handler END
  •  
pamcct

Messages: 50

Karma: 0
Send a private message to this user
Brian, it's set to 25 seconds as it has been for YEARS. I'll disable it but I don't understand why this would suddenly kick in.
  •  
freakinvibe

Messages: 1507
Karma: 58
Send a private message to this user
Maybe the IP address you changed was on the Kerio White List before. The IP address you now use is maybe not on that list.

Anyway, I would switch off all the IP based anti-spam functions (Spam Repellent, Blacklists, Graylist etc.) as they serve absolutely no purpose if you have a cloud-based relay in front of your Kerio.

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
MarcelS

Messages: 6
Karma: 0
Send a private message to this user
It seems to me the topic starter didn't get an answer for:

2) how do I de-duplicate messages? These folks get hundreds of emails a day, they don't need them twice.

I am curious to find out the answer too Wink

Kind regards,
Marcel
Previous Topic: No calendar/contacts on IOS
Next Topic: Kerio Connect refuses to start after important kernel update
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Sat Jul 29 13:42:12 CEST 2017

Total time taken to generate the page: 0.00511 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.