Hi Michael,
You can set Scrubber.py not to use the orginal filename in the message
by adding followin line in mm_cfg.py (mailman-2.1.6 and above).
SCRUBBER_DONT_USE_ATTACHMENT_FILENAME = True
Developers,
May be we should set this default in Defaults.py.in in the next release
of 2.1.7. Thoughts?
Michael Rasmussen wrote:
> Resolved. The digest keeps a seperate mbox file at
> {MMDIR}lists/LISTNAME/digest.mbox removing the email from that location
> was the solution to my immediate problem.
>
> This does expose a DOS attack potential for MM lists. The too long
> attachment name needs to be handled in a more graceful manner.
>
> Michael Rasmussen wrote:
>
>>Update:
>>
>>I've found the offending message and purged it from the list archives,
>>purged it from the shunt files, and purged it from everywhere I could
>>find it.
>>
>>Yet the problem persists. So I'm looking for the temp file/mail area
>>where the file that contains this attachment may be found.
>>
>>
>>Michael Rasmussen wrote:
>>
>>>I have a list that was sent a file with an attachement with too long a
>>>name. (See error below) now all mail to the list is being shunted.
>>>
>>>the filename listed does not exist on my system. There is no file on my
>>>system with that name.
>>>The directory
>>>/var/lib/mailman/archives/private/rca-l/attachments/20051207/3d04c3a4 is
>>>empty.
>>>
>>>What do I need to do to resolve this problem?
>>>
>>>========== Error message =====================
>>>Dec 22 06:08:46 2005 (2233) Uncaught runner exception: [Errno 36] File name
>>>too long:
>>>'/var/lib/mailman/archives/private/rca-l/attachments/20051207/3d04c3a4/iso-8859-1QThe_surface_of_the_SunA0_The_sun_has_a_rigid_iron_surfaceiso-8859-1Q_located_under_the_photosphere_that_is_revealed_by_satelliiso-8859-1Qte_imagery.A0_The_solar_surface_sits_beneath_the_suns_viiso-8859-1Qsible_photosphere_and_is_electrically_active..obj'
>>>Dec 22 06:08:46 2005 (2233) Traceback (most recent call last):
>>> File "/usr/lib/mailman/Mailman/Queue/Runner.py", line 111, in _oneloop
>>> self._onefile(msg, msgdata)
>>> File "/usr/lib/mailman/Mailman/Queue/Runner.py", line 167, in _onefile
>>> keepqueued = self._dispose(mlist, msg, msgdata)
>>> File "/usr/lib/mailman/Mailman/Queue/IncomingRunner.py", line 130, in
>>> _dispose
>>> more = self._dopipeline(mlist, msg, msgdata, pipeline)
>>> File "/usr/lib/mailman/Mailman/Queue/IncomingRunner.py", line 153, in
>>> _dopipeline
>>> sys.modules[modname].process(mlist, msg, msgdata)
>>> File "/var/lib/mailman/Mailman/Handlers/ToDigest.py", line 91, in process
>>> send_digests(mlist, mboxfp)
>>> File "/var/lib/mailman/Mailman/Handlers/ToDigest.py", line 132, in
>>> send_digests
>>> send_i18n_digests(mlist, mboxfp)
>>> File "/var/lib/mailman/Mailman/Handlers/ToDigest.py", line 306, in
>>> send_i18n_digests
>>> msg = scrubber(mlist, msg)
>>> File "/var/lib/mailman/Mailman/Handlers/Scrubber.py", line 265, in process
>>> url = save_attachment(mlist, part, dir)
>>> File "/var/lib/mailman/Mailman/Handlers/Scrubber.py", line 447, in
>>> save_attachment
>>> fp = open(path, 'w')
>>>IOError: [Errno 36] File name too long:
>>>'/var/lib/mailman/archives/private/rca-l/attachments/20051207/3d04c3a4/iso-8859-1QThe_surface_of_the_SunA0_The_sun_has_a_rigid_iron_surfaceiso-8859-1Q_located_under_the_photosphere_that_is_revealed_by_satelliiso-8859-1Qte_imagery.A0_The_solar_surface_sits_beneath_the_suns_viiso-8859-1Qsible_photosphere_and_is_electrically_active..obj'
>>>
>>>Dec 22 06:08:46 2005 (2233) SHUNTING:
>>>1135258825.4376719+99568bcc1187c910d48aae8b9ae8f68ed3aa643b
>>>
>>>========== Error message =====================
>>>--
>>> Michael Rasmussen, Portland Oregon
--
Tokio Kikuchi, tkikuchi@ is.kochi-u.ac.jp
http://weather.is.kochi-u.ac.jp/
------------------------------------------------------
Mailman-Users mailing list
[email protected]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe:
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Security Policy:
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp
