<div dir="ltr">On Tue, Sep 16, 2014 at 11:15 PM, Bron Gondwana <span dir="ltr"><<a href="mailto:brong@fastmail.fm" target="_blank">brong@fastmail.fm</a>></span> wrote:<br><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><u></u>
<div><div><div class="h5"><div>On Wed, Sep 17, 2014, at 08:24 AM, Stephen Ingram wrote:<br></div>
<blockquote type="cite"><div dir="ltr"><div>On Tue, Sep 16, 2014 at 3:02 PM, Bron Gondwana <span dir="ltr"><<a href="mailto:brong@fastmail.fm" target="_blank">brong@fastmail.fm</a>></span> wrote:<br></div>
<div><div><blockquote style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div><u></u><br></div>
<div><div>Dumb question - but I don't suppose anything happened to your clock recently?<br></div>
<div> </div>
<div>More non-dumb question, what version of Cyrus?<br></div>
</div>
</blockquote><div> </div>
<div>Sorry, I should have included the version. I'm using 2.4.16 rpms from Invoca Systems. Nothing has happened with the clock. This is the only mailbox that seems to have the problem too, user.ken.Trash. We are running a murder configuration with 2 backends and 2 front ends. Not may users accounts, just large mailboxes. Maybe there is some setting on the mupdate master or somewhere else that is set for 14 days?<br></div>
</div>
</div>
</div>
</blockquote><div> </div>
</div></div><div>I don't think so. Do you have any entries in the syslog showing the deletes? I'm pretty sure 'auditlog: 1' works in imapd.conf in 2.4.16, so you should be able to add that to see more logging.</div></div></blockquote><div><br></div><div>I finally got a chance to put in auditlog and I see several entries like this everyday:</div><div><br></div><div>Oct 1 09:45:41 imap1 imap[7357]: auditlog: expunge sessionid=<imap1.4test.net-7357-1412174740-1> mailbox=<user.ken.Trash> uniqueid=<5f184bff4ee3c346> uid=<170665> guid=<5bbe70214bd4c7979f72977adda664afaa8ebe24></div><div><br></div><div>and then:</div><div><br></div><div>Oct 1 09:45:41 imap1 imap[7357]: Expunged 19 messages from user.ken.Trash<br></div><div><br></div><div>at then end. The system is now removing everything down to 7 days when "info user.ken.Trash" yields:</div><div><br></div><div><div>{user.ken.Trash}:</div><div> duplicatedeliver: false</div><div> expire: 30</div><div> lastpop: </div><div> lastupdate: 2-Oct-2014 10:39:17 -0500</div><div> partition: default</div><div> pop3newuidl: true</div><div> sharedseen: false</div><div> size: 7749319</div></div><div><br></div><div>I did check the client as Alexei had suggested too as I thought the 14 days (and now 7) were a little coincidental, but there was nothing there causing the issue. Now after turning on auditlog, it does show the system removing these mails. Is this expire 30 number stored somewhere that has become corrupt or changed? This is just baffling to me as it seems to only affect this mailbox.</div><div><br></div><div>Steve</div></div><br></div></div>