"Found invalid qf" message running amok

[Mariano Absatz]

Hi Jeff,

this message _did_ come in thru sendmail?

I just looked at the code and the reason of that error is that one or more of 
these 3 conditions are true:

1) the qf lacks a "S" line (sender)
2) the qf lacks a "R" line (recipient)
3) the qf lacks a "$_" line which should have the originating address in it 
in a format [NNN.NNN.NNN.NNN] or "someone at localhost". Anyway, if the "$_" 
line IS in there, MailScanner won't fail there.

El 13 Mar 2003 a las 10:48, Jeff A. Earickson escribió:

> Julian,
> 
>    Every once in a while our mail server gets malformed spam that
> causes a blizzard of "Batch: Found invalid qf queue file" messages
> in my syslog.  This message comes from line 329 of
> lib/MailScanner/Sendmail.pm (version 4.13-3).  I can send you the
> qf files if you want to look at them, but the messages are always
> from well-known spam sites with uuencoded message bodies.  They have
> IP numbers of 0.0.0.0 in the qf files, which probably triggers the
> syslog message.  I have to yank the miscreants out of mqueue.in to
> restore order.
> 
> Can't MailScanner just note the problem in syslog once, then either
> nuke the qf/df files in mqueue.in,  or maybe move them to /tmp?
> 
> --- Jeff A. Earickson


--
Mariano Absatz
El Baby
----------------------------------------------------------
Hello, I must be going.
      -- Groucho Marx