Incorrect logging

Martin Hepworth maxsec at gmail.com
Thu May 17 20:40:19 IST 2012


Sounds like postfix could be mangling the data incoming as it should be
getting this simple info from your example correctly

One thing to check is to run mailscanner in debug mode against a sample
message in the holding queue (su to postfix furst) and see if you get any
clues there

Theres lots of people running ms and postfix together so its not the
combination thats unhappy

Martin

On Thursday, 17 May 2012, Marek Šimon wrote:

> I descented into Postfix.pm, line 387. MailScanner recognises the Original
> recipient and stops recognizing other recipients when it finds it. But in
> my postfix there is no original recipient, the original recipient record is
> empty. But Mailscanner consider this empty record as valid and there is the
> whole problem. So I add an 'if test' which skips empty records.
> Marek
>
>
> ------------------------------
> *Od: *"Marek Šimon" <marek.simon at casablanca.cz <javascript:_e({}, 'cvml',
> 'marek.simon at casablanca.cz');>>
> *Komu: *"MailScanner discussion" <mailscanner at lists.mailscanner.info<javascript:_e({}, 'cvml', 'mailscanner at lists.mailscanner.info');>
> >
> *Odeslané: *Čtvrtek, 17. Květen 2012 9:26:58
> *Předmět: *Re: Incorrect logging
>
> Hi
> I am refering to envelope address. I send the message by pushing it via nc
> to the mail server, the message is like this:
>         echo 'ehlo clienthostname'
>         echo 'mail from:<marek.simon at casablanca.cz <javascript:_e({},
> 'cvml', 'marek.simon at casablanca.cz');>>'
>         echo 'rcpt to:<pletiplot at xyz.cz <javascript:_e({}, 'cvml',
> 'pletiplot at xyz.cz');>>'
>         echo 'data'
>         echo 'some spam and html fragments to test the antispam procesing'
>         echo '.'
>         echo quit
> ) | nc -t serverhostname 25
>
> The clienthostname and serverhostname are placeholders of course.
> There is "To: envelope address" and "From: the envelope address" and no
> regular headers as you see (no headers increase the spam score, which is
> what I wanted). The message is read by the MailScanner but in MailScanner
> records in mail.log there is empty space where the recipient should be and
> there is sender address where sender server hostname should be. I debuged
> the Message.pm and message->{to} is empty there. I am not a perl guru so I
> just try to print some values. The To: address is empty in localy generated
> messages too. I was very upset yesterday while debuging it.
>
> Thanks.
> Marek
>
>
> ------------------------------
> *Od: *"Glenn Steen" <glenn.steen at gmail.com <javascript:_e({}, 'cvml',
> 'glenn.steen at gmail.com');>>
> *Komu: *"MailScanner discussion" <mailscanner at lists.mailscanner.info<javascript:_e({}, 'cvml', 'mailscanner at lists.mailscanner.info');>
> >
> *Odeslané: *Čtvrtek, 17. Květen 2012 8:55:20
> *Předmět: *Re: Incorrect logging
>
> Are you refering to headers? MS/MW operates on the envelope addresses, not
> the headers. So it is very likely correct. Quote the details page for a
> message you perceive as wrong, if still in doubt.
>
> --
> -- Glenn
> Den 16 maj 2012 20:33 skrev "Marek Šimon" <marek.simon at casablanca.cz<javascript:_e({}, 'cvml', 'marek.simon at casablanca.cz');>
> >:
>
>> Hi,
>> I have mailscanner with postfix and mailwatch. There is Mailwatch
>> extension in custom function.  Everything works except mailscanner logs
>> "from" instead of "source reverze address" and nothing instead "To:". Seems
>> there is something wrong inside the MailScanner or MailWatch.
>> Marek
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info <javascript:_e({}, 'cvml',
>> 'mailscanner at lists.mailscanner.info');>
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info <javascript:_e({}, 'cvml',
> 'mailscanner at lists.mailscanner.info');>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info <javascript:_e({}, 'cvml',
> 'mailscanner at lists.mailscanner.info');>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>

-- 
-- 
Martin Hepworth
Oxford, UK
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20120517/57e92a4b/attachment.html


More information about the MailScanner mailing list