> > Which version of Net::Server are you using?
> > Try Net::Server 0.94 (or later) and 0.90 (or earlier),
> > see if it makes any difference.
>
> with Net::Server 0.90 is working fine, but i don't know if this version
> could have security related bugs...so may i keep thi one?

You may keep 0.90, no known security flaws, just slightly more awkward
passing of file handle to application. amavisd-new-2.4.* can handle
both the old and the new style (as introduced by 0.91).

> And you said there is a problem with "file descriptors 0, 1 and 2", so i
> may have other problems now...

Versions of amavisd-new before 2.4.0 would have problems with
Net::Server 0.91 or later. Other combinations are not problematic.

> here is the new one with timestamps (but timeout option is no more a
> target)
>
> 31936 16:57:06 write(0, "152:119:Received: from localhost"..., 157) = 157
> 31936 16:57:06 select(1, [0], NULL, NULL, {3000, 0}) = 1 (in [0], left
> {2999, 404000})
> 31936 16:57:07 read(0, "89:K250 2.6.0 Ok, id=30698-01, f"..., 1024) = 93

This one is fine, read completes normally.
I was wondering about your other, the timed-out case.

> > How does the session look like
> > from the amavisd side (at log level 5)?
> it was the first file i started looking at, but i see nothing wrong in it,
> if you want to look at it working or not, the end looks like this:

> (30698-01) QMQPqq> 250 2.6.0 Ok, id=30698-01, from
>  MTA([127.127.127.127]:10127): 250 ok 1158245827 qp 31983
> (30698-01) TempDir::strip: /var/amavis/tmp/amavis-20060914T165706-30698
...

Was this from a timed out case? You are right, nothing suspicious there.

Looks at the beginning of the log, right after a connect from qmail.
I don't have an example here, but I can show how it looks with a
normal TCP SMTP session:

amavis[253]: loaded base policy bank
amavis[253]: lookup_ip_acl (inet_acl): key="127.0.0.1" matches "127.0.0.1", 
amavis[253]: process_request: fileno sock=16, STDIN=0, STDOUT=1
amavis[253]: switch_to_my_time     480 s, new request
amavis[253]: process_request: suggested_protocol="" on TCP

The interesting part is: process_request: fileno sock=16, STDIN=0, STDOUT=1

The file descriptors 0, 1, and in this case 16, vary between
a before-0.91 and after-0.91 version of Net::Server.

I'm not sure how that interacts with a client in a qmail setup.
I think you are better qualified in this field to investigate.

The amavisd-new-qmqpqq.patch files hasn't been checked for a while,
I just keep it in sync with a released code so that line numbers match,
but I am not testing that it works. Help is welcome.

Btw, what operating system are you using?

  Mark

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to