>On 26/Jul/11 19:23, Matus UHLAR - fantomas wrote: >> Does courier do an autoclean if the filter fails? >> Or is the filter expected to be so robust that it's not needed?
On 27.07.11 12:55, Alessandro Vesely wrote: >Courier sends the prepackaged "432 Mail filters temporarily >unavailable" in case of failure. Cleaning up queues is presumably >part of the overall Courier design. I've meant if courier can clean up the mess if the filter leaves some, but that's irelevant now. >> Jul 26 19:00:59 w05 submit: Permission denied >> Jul 26 19:00:59 w05 submit: Failed to connect to: >> /var/lib/courier/allfilters/drweb-courier >Re-injected mail shouldn't get filtered, unless you also have "local" >in your enablefiltering file. I do, which is apparently part of the problem. >> -r-s--x--x 1 root mail 1093472 Jul 11 16:28 /usr/bin/sendmail.courier >> -rwxr-x--- 1 mail mail 128 Jul 26 19:12 >> /usr/lib64/courier/courier/submit [...] >> -rws--s--x 1 mail drweb 618824 May 23 16:46 >> /usr/lib/courier/filters/drweb-courier >> srw-rw---- 1 mail drweb 0 Jul 26 18:32 >> /var/lib/courier/allfilters/drweb-courier >> uid=100(drweb) gid=12(mail) >> groups=3004(drweb),0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel),11(floppy),20(dialout),26(tape),27(video) >> local dns; localhost (localhost [127.0.0.1]) uid 100 >Running uid/gid seem to be swapped w.r.t. the permissions that the >socket requires, i.e. drweb/mail instead of mail/drweb. They also >seem to be swapped w.r.t. the setuid/setgid of the drweb-courier >executable. How come? Since it is that executable who creates the >socket, it should take the same permissions... yes, that should be it! It's the drweb-sender that passes mail to courier.sendmail which later can't open the socket, because it runs as "drweb.mail" while socket has "mail.drweb" permissions. I guess it's the courier's sendmail changing the gid to 'mail' Sorry for not noticing this sooner. Now I have to explain to drweb what happened so could know what happens and how to avoid. -- Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. You have the right to remain silent. Anything you say will be misquoted, then used against you. ------------------------------------------------------------------------------ Got Input? Slashdot Needs You. Take our quick survey online. Come on, we don't ask for help often. Plus, you'll get a chance to win $100 to spend on ThinkGeek. http://p.sf.net/sfu/slashdot-survey _______________________________________________ courier-users mailing list [email protected] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
