<<<No Message Collected>>> NOW FIXED!

[Jeff A. Earickson]

Hi,

This blurb got me to staring at my sendmail PrivacyOption settings.
I changed from "goaway,restrictqrun" to
"goaway,restrictqrun,restrictmailq,noetrn,noreceipts" as a
result (I've been trying to kill DSNs, hence the noreciepts too).
I also realized that the default for sendmail 8.12.6 is a weak
"authwarnings", so I sent in a bug report to sendmail requesting
that they boost their default to at least "goaway" and maybe to
"goaway,restrictqrun,restrictmailq,noetrn".  Their website also
needs an FAQ on what the different options do.  Good work on
the topic below!

-----------------------------------
Jeff A. Earickson, Ph.D
Senior UNIX Sysadmin and Email Guru
Information Technology Services
Colby College, 4214 Mayflower Hill,
Waterville ME, 04901-8842
phone: 207-872-3659 (fax = 3076)
-----------------------------------

On Wed, 18 Dec 2002, Spicer, Kevin wrote:

> Date: Wed, 18 Dec 2002 12:46:52 -0000
> From: "Spicer, Kevin" <Kevin.Spicer at BMRB.CO.UK>
> Reply-To: MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK>
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: <<<No Message Collected>>> NOW FIXED!
>
> I have finally tracked down the source of this error & the fix is working fine.  Even if you haven't seen this error yourself you probably want to read this.
>
> The problem is caused by a connecting smtp server issuing at ETRN command (our exchange server was doing this, although I'm told its not the default behavior for exchange).  The ETRN command causes the queue only sendmail process to attempt to deliver all the mail for the specified domain direct from mqueue.in.  This is a feature of sendmail, and is turned on by default!  This results in one of four behaviours (depending on when sendmail / mailscanner 'see' a message) as follows (I posted this bit previously)...
>
> >>  1) Mailscanner sees the mail quickly and processes it normally.
>
> >>  2) Sendmail sees the mail quickly and delivers it without being scanned.
>
> >>  3) Both see it around the same time, mailscanner trys to process and sendmail trys to
> >>  deliver, but mailscanner picks up the body before sendmail causing sendmail to replace
> >>  the body with '<<<No Message Collected>>>' and log an error.  The outgoing sendmail
> >>  also attempts to deliver the message (after scanning) but it is silently discarded by
> >>  the Exchange server which incoming mail is forwarded to [guessing a bit on the exact
> >>  behaviour of exchange, but sendmail seems to manage to deliver it twice].
>
> >>  4) Both see it around the same time, mailscanner trys to process and sendmail trys to
> >>  deliver, but sendmail gets the body first causing mailscanner to log an error to the
> >>  console when it trys to cat the file.
>
> On low loads 1 is the normal, as the load increases  you start to see more of 2,3 and 4
>
> I fixed this by adding noetrn to confPRIVACY_FLAGS in sendmail.mc and rebuilding sendmail.cf, however Julian has pointed out that it can also be disabled by adding
>
> -OPrivacy_Options=noetrn
>
> to the incoming sendmail command in the init script.
>
> Because sendmail isn't fussy about who issues the ETRN command it is possible that a third party could issue an ETRN command to your sendmail, specifying your domain and cause mail to be delivered without being scanned.  I'd therefore suggest that everyone disables ETRN as detailed above.
>
> I understand from Julian that he has added this to the news section on the site and has updated the init script on the next version.
>
> Thanks to everyone who posted helpful suggestions.
>
>
>
> BMRB International
> http://www.bmrb.co.uk +44 (0)20 8566 5000
> ________________________________________________________
>
> This message (and any attachment) is intended only for the recipient and may contain confidential and/or privileged material. If you have received this in error, please contact the sender and delete this message immediately. Disclosure, copying or other action taken in respect of this email or in reliance on it is prohibited. BMRB International Limited accepts no liability in relation to any personal emails, or content of any email which does not directly relate to our business.
>