Can anyone explain to me why there are two similar entries of "from" and "to" in maillog every time an email is sent?

2013-01-29 12:12:42 sendmail 2770 r0T4CfFe002770: from=user, size=265, class=0, nrcpts=1, msgid=<[email protected]>, relay=root@localhost

2013-01-29 12:12:43 sendmail 2771 r0T4CgIp002771: from=<[email protected]>, size=572, class=0, nrcpts=1, msgid=<[email protected]>, proto=ESMTP, daemon=MTA, relay=localhost6.localdomain6 []

2013-01-29 12:12:43 sendmail 2770 r0T4CfFe002770: [email protected], ctladdr=user (500/500), delay=00:00:02, xdelay=00:00:01, mailer=relay, pri=30265, relay=[] [], dsn=2.0.0, stat=Sent (r0T4CgIp002771 Message accepted for delivery)

2013-01-29 12:12:48 sendmail 2773 r0T4CgIp002771: to=<[email protected]>, ctladdr= (500/500), delay=00:00:05, xdelay=00:00:05, mailer=esmtp, pri=120572, relay=verifier.port25.com. [], dsn=2.0.0, stat=Sent (message received)

Is there something wrong with my mail setting or is this the normal behaviour?

2 Answers 2


Usually, every mail an MTA (Mail Transfer agent) handles involve at least two distinct operations: It receives it from an external SMTP server or a MUA (Mail User Agent, like Thunderbird etc.) and it sents it, either to another SMTP server (relay) or an MDA (Mail delivery agent) that actually stores it and makes it available to MUAs, e.g. an IMAP server.

Since these are two operations, having two log file entries is entirely normal.


One is your mailer logging receipt of the mail from your local client and the other is it logging that it sent it to the destination. What you're seeing is quite normal.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .