<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
tt
{mso-style-priority:99;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
mso-fareast-language:EN-US;}
span.EmailStyle23
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-IE" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt">Hi Shawn,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Ignore Denial Of Service = no<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">I don’t have SELinux or Apparmor installed, I believe (believe!) I have all permissions set correctly, and most emails come in just fine, with or without HTML in them. Now, the kernel level issue is what I
might have to look into. It’s a very low usage VPS though, it’s pretty much idling over 99% of the time. I don’t see anything in dmesg indicating limits. I’ll do a bit of digging in that area.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Thanks!<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Ferry<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="color:black">From: </span></b><span style="color:black">MailScanner <mailscanner-bounces+ferry=vanaesch.com@lists.mailscanner.info> on behalf of Shawn Iverson via MailScanner <mailscanner@lists.mailscanner.info><br>
<b>Reply to: </b>MailScanner Discussion <mailscanner@lists.mailscanner.info><br>
<b>Date: </b>Monday 29 June 2020 at 13:42<br>
<b>To: </b>"mailscanner@lists.mailscanner.info" <mailscanner@lists.mailscanner.info><br>
<b>Cc: </b>Shawn Iverson <shawniverson@summitgrid.com><br>
<b>Subject: </b>Re: HTML disarming died, status = 13</span><span style="color:black;mso-fareast-language:EN-GB"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"><o:p> </o:p></span></p>
</div>
<p><tt><span style="font-size:10.0pt">Ferry,</span></tt><o:p></o:p></p>
<p><tt><span style="font-size:10.0pt">I am having trouble reproducing the issue on my end. I am still looking into this. This is looking more like a failure to spawn the child process and pipe the results back to the parent process.</span></tt><o:p></o:p></p>
<p><tt><span style="font-size:10.0pt">Error 13 on a pipe is "Permission Denied." This can be caused for a variety of reasons. Filesystem permissions, mandatory access control issues (i.e. SELinux or Apparmor), and kernel level issues such as hitting an upper
limit that is set too low or a kernel bug.</span></tt><o:p></o:p></p>
<p><tt><span style="font-size:10.0pt">What do you currently have for this setting in MailScanner?</span></tt><o:p></o:p></p>
<p><tt><span style="font-size:10.0pt">"Ignore Denial Of Service"</span></tt><o:p></o:p></p>
<div>
<p class="MsoNormal">On 6/29/20 3:47 AM, Ferry van Aesch via MailScanner wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal"><span style="font-size:11.0pt">I’m still trying to get my head around this. These failures genuinely seem to be random. Amazon notifications for instance, very standard layout, most come in perfectly fine and recently one of them failed.
I run it through the queue again and it passes without failure. I’m a bit lost tbh.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="color:black">From: </span></b><span style="color:black">Ferry van Aesch
<a href="mailto:ferry@vanaesch.com"><ferry@vanaesch.com></a><br>
<b>Date: </b>Tuesday 16 June 2020 at 19:24<br>
<b>To: </b>MailScanner Discussion <a href="mailto:mailscanner@lists.mailscanner.info">
<mailscanner@lists.mailscanner.info></a><br>
<b>Subject: </b>Re: HTML disarming died, status = 13</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt">Hi Shawn,</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Thanks for getting back to me so quickly. Please see the sanitised email attached. (I assume attaching works with the mailing list?)</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">It’s not happening with every message indeed; but it’s a reasonable amount of the emails it processes. I just ran the original message (cat message|sendmail -t) and it was delivered without a problem.</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Thanks!</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt">Ferry</span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="color:black">From: </span></b><span style="color:black">MailScanner
<a href="mailto:mailscanner-bounces+ferry=vanaesch.com@lists.mailscanner.info"><mailscanner-bounces+ferry=vanaesch.com@lists.mailscanner.info></a> on behalf of Shawn Iverson via MailScanner
<a href="mailto:mailscanner@lists.mailscanner.info"><mailscanner@lists.mailscanner.info></a><br>
<b>Reply to: </b>MailScanner Discussion <a href="mailto:mailscanner@lists.mailscanner.info">
<mailscanner@lists.mailscanner.info></a><br>
<b>Date: </b>Tuesday 16 June 2020 at 18:39<br>
<b>To: </b><a href="mailto:mailscanner@lists.mailscanner.info"><font color="red"><b>MailScanner has detected a possible fraud attempt from "lists.mailscanner.info" claiming to be</b></font> <b><span style="color:red">MailScanner has detected a possible fraud attempt from "lists.mailscanner.info" claiming to be</span></b>
<b><span style="color:red">MailScanner has detected a possible fraud attempt from "lists.mailscanner.info" claiming to be</span></b> "mailscanner@lists.mailscanner.info"</a>
<a href="mailto:mailscanner@lists.mailscanner.info"><mailscanner@lists.mailscanner.info></a><br>
<b>Cc: </b>Shawn Iverson <a href="mailto:shawniverson@summitgrid.com"><shawniverson@summitgrid.com></a><br>
<b>Subject: </b>Re: HTML disarming died, status = 13</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt"> </span><o:p></o:p></p>
</div>
<p>This message is by design, as long as you are not caught in a loop and it is not happening with every message. There's something in the HTML that killed the child spawned to perform the disarming. Depending on the scenario, a sample of the email (sanitized)
might be helpful to isolate what is going on here and improve the HTML Disarming code.<o:p></o:p></p>
<p>Shawn<o:p></o:p></p>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-GB"><br>
<br>
<o:p></o:p></span></p>
<pre><o:p> </o:p></pre>
</blockquote>
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;mso-fareast-language:EN-GB">--
<br>
<span style="border:solid windowtext 1.0pt;padding:0cm"><img border="0" width="32" height="32" style="width:.3333in;height:.3333in" id="_x0000_i1025" src="cid:~WRD0000.jpg" alt="Image removed by sender."></span><br>
Shawn Iverson<br>
<a href="mailto:shawniverson@summitgrid.com">shawniverson@summitgrid.com</a><o:p></o:p></span></p>
</div>
</div>
</body>
</html>