Getting new backscatter with 2.4.2

> -----Original Message-----
> From: amavis-user-bounceslists.sourceforge.net 
> [mailto:amavis-user-bounceslists.sourceforge.net] On
Behalf Of Gary V
> Sent: Tuesday, July 04, 2006 10:27 PM
> To: amavis-userlists.sourceforge.net
> Subject: Re: [AMaViS-user] Getting new backscatter with
2.4.2
> 
> 
> Gary wrote:
> Looks like a bug.
> No problem when smtp is used, problem when lmtp is
used.

Thanks Gary for digging into it.

By changing 

> I used your entries in master.cf and I could reproduce
this.

> lmtp-amavis unix -      -       n     -       2  lmtp
>     -o lmtp_data_done_timeout=1200
>     -o lmtp_send_xforward_command=yes
>     -o disable_dns_lookups=yes
>     -o header_checks=regexp:/etc/postfix/remove_headers
>     -o max_use=20

> This is what made the difference. I changed it to:

> smtp-amavis unix -     -       n      -       2  smtp
>     -o smtp_data_done_timeout=1200
>     -o smtp_send_xforward_command=yes
>     -o disable_dns_lookups=yes
>     -o header_checks=regexp:/etc/postfix/remove_headers
>     -o max_use=20

It works now.

My assumptions were that lmtp was lighter, and I think
(someone's faq's)
said to use it.

Like the motto says 'all of together are better than all of
us alone.'


I like amavisd-new (mark, great job) and the people in this
electronic
community.

One of the most civil and helpful I have seen.  And I have
been around a
while, involved in lots of usenet wars, anti-spam wars over
usenet news
groups, etc since 1994.  Saw news.admin.net-abuse.email turn
into a
crapping ground for pro and anti-spam zelots (you would
think the
spammers would scan a news admin email group for email
addresses to NOT
spam to keep the complaints to their ISP's down...  )

Trolls, meows', you name it.

Thanks again Gary.

I will change to the smtp service for now, and I know now
that Mark has
pointers from you (lmtp service is not obeying
spam_final_destination)
it won't be long before he fixes it.

I will first do like you said, and pull down original
amavisd-new,..

Noop, only patch to amavisd-new for freebsd ports is this:
(make file does a sed/%%PREFIX%%/ usr/local/  before
installing)

Don't think that will mess up lmtp service.

--- amavisd.orig        Mon Apr 25 01:23:32 2005
+++ amavisd     Mon Apr 25 09:53:59 2005
 -8495,7
+8495,7 
 Amavis::Conf::build_default_maps();

 # default location of the config file if none specified
-push(config_files, '/etc/amavisd.conf')  if !config_files;
+push(config_files, '%%PREFIX%%/etc/amavisd.conf')  if
!config_files;
 # Read/execute the config file, which may override default
set

In config.h we undef MKTEMP
--- helper-progs/config.h.in.orig       Mon Mar  6 00:26:08
2006
+++ helper-progs/config.h.in            Tue Apr  4 08:21:29
2006
 -17,7
+17,7 
 #define HAVE_MKDTEMP

 /* Define if you have the mktemp function, undefine
otherwise */
-#define HAVE_MKTEMP
+#undef HAVE_MKTEMP


> 
> Gary V
> 
> 
> Using Tomcat but need to do more? Need to support web 
> services, security? Get stuff done quickly with 
> pre-integrated technology to make your job easier
Download 
> IBM WebSphere Application Server v.1.0.1 based on
Apache 
> Geronimo 
> http://sel.as-us.falkag.net/sel?cmd=ln
k&kid=120709&bid=263057&
dat=121642
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

Michael wrote:

> I will change to the smtp service for now, and I know
now that Mark has
> pointers from you (lmtp service is not obeying
spam_final_destination)
> it won't be long before he fixes it.

If he does not respond soon, he is probably of the office.

> Noop, only patch to amavisd-new for freebsd ports is
this:
> (make file does a sed/%%PREFIX%%/ usr/local/  before
installing)

> Don't think that will mess up lmtp service.

> -push(config_files, '/etc/amavisd.conf')  if !config_files;
> +push(config_files, '%%PREFIX%%/etc/amavisd.conf')  if
!config_files;

Yeah, later I saw that too.

Gary V


Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

This bug is also present in 2.4.1. When using lmtp
with 2.3.3, it appears there was code to mute the DSN:

Jul  5 10:19:39 sfm postfix/lmtp[3276]: E49A716D23:
 to=<userexample.com>, relay=127.0.0.1[127.0.0.1],
  delay=20, status=sent (250 2.5.0 Ok userexample.com,
   DSN muted (550 5.7.1 Message content rejected, UBE,
id=03277-01))

Gary V


Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

Michael,

(I already replied offline, but let's keep the list
informed)

> After upgrading to 2.4.2, getting backscatter I never
got before:
> It looks like amavisd-new is trying to bounce email
(spam) back to me
> even though it exceeds dsn cutoff level.

Gary V wrote:
> Looks like a bug.
> No problem when smtp is used, problem when lmtp is
used.
...
> This bug is also present in 2.4.1. When using lmtp
> with 2.3.3, it appears there was code to mute the DSN:

Indeed an ugly bug, introduced when true DSN support was
added.
I noticed it also during my code review, but I was too far
away
from the internet...   Thanks
for helping!

Luckily most sites feed amavisd through SMTP (instead of
LMTP),
so it went by unnoticed for quite a while.

The patch below fixes it.


> My assumptions were that lmtp was lighter, and I think
(someone's faq's)
> said to use it.

Old versions of Postfix used session caching only with LMTP,
and SMTP always did a fresh connect for each message.
This is no longer so for quite some time, Postfix SMTP
client
service can reuse open sessions, so there is not much
difference
between feeding amavisd through SMTP or LMTP,
performance-wise.

  Mark


--- amavisd.orig	Tue Jun 27 13:31:56 2006
+++ amavisd	Sun Jul 30 23:41:13 2006

-12050,13 +12050,18 
             for my $r ({$msginfo->per_recip_data}) {
               my($resp) = $r->recip_smtp_response;
-              if ($bounced && $smtp_resp=~/^2/
&& $resp!~/^2/) {
-                # as the message was already bounced by us,
-                # MTA must not bounce it again; failure
status
-                # needs to be converted into success!
-                $resp = sprintf("250 2.5.0 Ok %s, DSN
%s (%s)",
-                        $r->recip_addr, $bounced==1 ?
'sent' : 'muted', $resp);
+              my($recip_quoted) =
qquote_rfc2821_local($r->recip_addr);
+              if ($resp=~/^2/) {
+                # success, no need to change status
+              } elsif ($bounced) {
+                # a non-delivery notifications was already
sent by us, so
+                # MTA must not bounce it again; turn status
into a success
+                $resp = sprintf("250 2.5.0 Ok %s, DSN
was sent (%s)",
+                                $recip_quoted, $resp);
+              } elsif ($resp=~/^5/ &&
$r->recip_destiny != D_REJECT) {
+                $resp = sprintf("250 2.5.0 Ok %s, DSN
suppressed (%s)",
+                                $recip_quoted, $resp);
               }
-              do_log(4, 'sending LMTP response for
<%s>: "%s"',
-                        $r->recip_addr, $resp);
+              do_log(4, 'sending LMTP response for %s:
"%s"',
+                        $recip_quoted, $resp);
               $self->smtp_resp(0, $resp);
             }
-------------------

------------------------------------------------------------
-------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the
chance to share your
opinions on IT & business topics through brief surveys
-- and earn cash
http://www.techsay.com/default.
php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/