On Thu, 13 Dec 2007, Tony Earnshaw wrote:
> That's Postfix stuff from milter.c, so it's not very likely that 
> Sendmail people here can answer. I haven't had that (Postfix 2.4.6, 
> dkim-filter 2.4.0), but I occasionally get "can't read SMFIC_HEADER 
> reply packet header: Connection reset by peer" when over-eager mailers 
> send HUGE CCs or TOs to scores of recipients. It just means Postfix 
> doesn't sign the message; it doesn't die, thank $DEITY, like it does if 
> it can't contact amavisd-new or my dspam daemon.

Mark opened a bug against dkim-filter for rejecting messages with 
oversized headers (over 32k of total header size).  This is actually 
intended as protection against a denial-of-service attack, but the 
hard-coding of the limit isn't especially friendly.

The next release will make that limit configurable.

The logging though is a little confusing; if mlfi_header() returns 
SMFIS_REJECT, the recovery of the sending MTA should be graceful.

-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services
for just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
dkim-milter-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dkim-milter-discuss

Reply via email to