Here's an example of something peculiar in our sendmail logs that I've
seen an number of times:
May 11 10:45:58 electra sm-mta[21923]: [ID 801593 mail.info] p4BFjwZl021923: from=<XXXX_at_uleth.ca>, size=5277, class=0, nrcpts=1, msgid=<653B2C8ABB04214880ABEA49E345859702232435_at_EXCHCL2.uleth.ca>, proto=ESMTP, daemon=MTA, relay=mx2.uleth.ca [142.66.3.49]
May 11 10:46:58 electra sm-mta[21923]: [ID 801593 mail.error] p4BFjwZl021923: Milter (dkim): timeout before data read, where=eom
May 11 10:46:58 electra sm-mta[21923]: [ID 801593 mail.info] p4BFjwZl021923: Milter (dkim): to error state
May 11 10:46:58 electra sm-mta[21923]: [ID 801593 mail.info] p4BFjwZl021923: Milter add: header: X-DCC-UofM-Metrics: electra 1033; Body=1 Fuz1=1 Fuz2=1
May 11 10:46:58 electra sm-mta[22596]: [ID 801593 mail.info] p4BFjwZl021923: to=<YYYY_at_cc.umanitoba.ca>, delay=00:01:00, xdelay=00:00:00, mailer=local, pri=35531, relay=localhost, dsn=2.0.0, stat=Sent
We run three filters, defined in this sequence in sendmail.cf:
Xj-chkmail, S=local:/var/run/jchkmail/j-chkmail.sock, T=C:2m;S:20s;R:40s;E:5m
Xdkim, S=inet:8891_at_localhost, T=S:60s;R:60s
Xdcc, S=inet:3331_at_electra.cc.umanitoba.ca, F=T, T=S:60s;R:60s
The curious thing is that the DKIM filter timed out waiting to read
the message, but as soon as it reported that fact, the DCC milter was
able to read the message and modify it. How is this possible?
--
-Gary Mills- -Unix Group- -Computer and Network Services-
Received on Mon May 16 2011 - 15:09:37 PST