On 26/Jul/11 19:23, Matus UHLAR - fantomas wrote:
> 
> Does courier do an autoclean if the filter fails?
> Or is the filter expected to be so robust that it's not needed?

Courier sends the prepackaged "432 Mail filters temporarily
unavailable" in case of failure.  Cleaning up queues is presumably
part of the overall Courier design.

> Currently I have other problem:
> 
> Jul 26 19:00:59 w05 drweb-sender.real: [47819500582672] sender INFO 
> absT3gOH6/000000000005866C.000000004E2EF038.000072A2 get msg [from: 
> <[email protected]>; to:<[email protected]>] from queue for processing...
> Jul 26 19:00:59 w05 submit: Permission denied
> Jul 26 19:00:59 w05 submit: Failed to connect to: 
> /var/lib/courier/allfilters/drweb-courier
> Jul 26 19:00:59 w05 drweb-sender.real: [47819500582672] sender.pipe WARN 
> absT3gOH6/000000000005866C.000000004E2EF038.000072A2 normal termination, exit 
> status = 75; was error (pid=29789)
> 
> It seems that sendmail is unable from some reason to connect to 
> /var/lib/courier/allfilters/drweb-courier, I have tried to find out 
> why...

Re-injected mail shouldn't get filtered, unless you also have "local"
in your enablefiltering file.

> -r-s--x--x 1 root mail  1093472 Jul 11 16:28 /usr/bin/sendmail.courier
> -rwxr-x--- 1 mail mail      128 Jul 26 19:12 /usr/lib64/courier/courier/submit

Which one does drweb-courier invoke?  I'd guess it execs "sendmail".

> -rws--s--x 1 mail drweb  618824 May 23 16:46 
> /usr/lib/courier/filters/drweb-courier
> -rwxr-x--- 1 mail mail      128 Jul 26 19:12 /usr/lib64/courier/courier/submit
> drwxr-xr-x 2 mail mail     4096 Jul 26 18:32 /var/lib/courier/allfilters/
> srw-rw---- 1 mail drweb       0 Jul 26 18:32 
> /var/lib/courier/allfilters/drweb-courier
> 
> I replaced submit by a script that logs the file and 'id -a output'

I assume you mean 'id -a'.

> uid=100(drweb) gid=12(mail) 
> groups=3004(drweb),0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel),11(floppy),20(dialout),26(tape),27(video)
> local dns; localhost (localhost [127.0.0.1]) uid 100
> 
> How does submit process connect to courierfilter?

It calls connect(s, sockaddr), where s is a Unix socket stream, and
sockaddr is /var/lib/courier/allfilters/drweb-courier

Running uid/gid seem to be swapped w.r.t. the permissions that the
socket requires, i.e. drweb/mail instead of mail/drweb.  They also
seem to be swapped w.r.t. the setuid/setgid of the drweb-courier
executable.  How come?  Since it is that executable who creates the
socket, it should take the same permissions...

-- 





































------------------------------------------------------------------------------
Got Input?   Slashdot Needs You.
Take our quick survey online.  Come on, we don't ask for help often.
Plus, you'll get a chance to win $100 to spend on ThinkGeek.
http://p.sf.net/sfu/slashdot-survey
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to