FW: MailScanner 4.52.2 destroys exim 4.61 spool files

[Martin Hepworth]

Jules

A reminder about the ACL changes in exim 4.61 - obviously most people are
still running versions before this so the code needs to work for 4.61 and
versions previous.

--
Martin Hepworth 
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of joerg.pichel at sdm.de
> Sent: 20 April 2006 11:17
> To: mailscanner at lists.mailscanner.info
> Subject: MailScanner 4.52.2 destroys exim 4.61 spool files
> 
> 
> We use exim together with MailScanner (4.52.2). Exim receives messages at
> TCP-25 and stores it into the in-spool. Mailscanner processes this in-
> spool queue und delivers back to exim (out-spool).
> 
> I recently upgraded from exim 4.60 to exim 4.61 which extends the spool
> file format of the *-H files. The problem is, that the spool files in the
> out-spool are no longer readable neither bei exim (4.61 says: "Format
> error in spool file") nor bei MailScanner ("Found invalid queue files")
> itself. I assume that MailScanner can't deal with the new format of the *-
> H files from exim 4.61.
> 
> 
> Example:
> 
> Head of the original H-file with correct format:
> ###################################
> 1FWVj8-0004N0-Gl-H
> root 0 0
> <cfij at retirement-for-professionals.com>
> 1145526330 0
> -helo_name buf202.internetdsl.tpnet.pl
> -host_address 83.18.161.202.3963
> -host_name buf202.internetdsl.tpnet.pl
> -interface_address 192.76.162.230.25
> -received_protocol smtp
> -aclc 1 143
> X-sdm-Check-DNSbl-Warning: 83.18.161.202 is listed in dnsbl.sorbs.net
> (Exploitable Server See: http://www.sorbs.net/lookup.shtml?83.18.161.202)
> -aclm 0 0
> 
> -aclm 1 143
> X-sdm-Check-DNSbl-Warning: 83.18.161.202 is listed in dnsbl.sorbs.net
> (Exploitable Server See: http://www.sorbs.net/lookup.shtml?83.18.161.202)
> -aclm 2 2
> 30
> -body_linecount 505
> -deliver_firsttime
> XX
> 1
> someone at sdm.de
> 
> 179P Received: by world2.sdm.de (MTA) via smtp for <someone at sdm.de> ...
> <snipp>
> ###################################
> 
> 
> Head of the crunched H-file in the out-spool after beeing processed by
> MailScanner:
> ###################################
> 1FWVj8-0004N0-Gl-H
> root 0 0
> <cfij at retirement-for-professionals.com>
> 1145526330 0
> -host_address 83.18.161.202.3963
> -aclc 1 143
> -helo_name buf202.internetdsl.tpnet.pl
> -host_name buf202.internetdsl.tpnet.pl
> -interface_address 192.76.162.230.25
> -received_protocol smtp
> NN 83.18.161.202
> -aclm 0 0
> 
> 179P Received: by world2.sdm.de (MTA) via smtp for <someone at sdm.de> ...
> <snipp>
> ###################################
> 
> 
> Joerg Pichel
> 
> --
> Joerg.Pichel at sdm.de
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website!


**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.	

**********************************************************************