Hi all,
I have reviewed my logs this afternoon and found something strange.
My postfix accepts an email from <&_1;@mailing.leadsponsorises.com>,
lets dspam process it, and when dspam sends it back to postfix, the
latter rejects it as follows:
warning: Illegal address syntax from localhost.localdomain[127.0.0.1]
in MAIL command: <&_1;@mailing.leadsponsorises.com>
What I do not understand is why postfix does not reject it directly.
Here is a part of my main.cf:
smtpd_recipient_restrictions = permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_destination,
reject_invalid_hostname,
reject_non_fqdn_hostname,
reject_non_fqdn_sender,
reject_non_fqdn_recipient,
reject_unknown_sender_domain,
reject_unknown_recipient_domain,
reject_unlisted_recipient,
reject_rbl_client bl.spamcop.net,
check_policy_service inet:127.0.0.1:60000
#Postgrey
check_recipient_access
pcre:/etc/postfix/dspam_filter_access,
permit
Here is the reinjection transport used for DSPAM reinjection in
master.cf:
localhost:10026 inet n - n - - smtpd
-o content_filter=
-o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
-o smtpd_helo_restrictions=
-o smtpd_client_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o mynetworks=127.0.0.0/8
-o smtpd_authorized_xforward_hosts=127.0.0.0/8
I attach the full log of the smtp session.
Also note I cannot find this email in the user's log on the WebUI.
This is using postfix 2.5.5 and dspam 3.6.8 on Debian Lenny.
Any hint on what is causing this behaviour? I guess I am missing
something obvious...
Cheers,
Julien
May 26 15:41:51 nix postfix/smtpd[30771]: connect from prod-mail-245.cab03.net[84.14.192.245]
May 26 15:41:51 nix postgrey: action=pass, reason=triplet found, delay=902, client_name=prod-mail-245.cab03.net, client_address=84.14.192.245, sender=&_1;@mailing.leadsponsorises.com, [email protected]
May 26 15:41:51 nix postgrey: cleaning up old logs...
May 26 15:41:51 nix postfix/smtpd[30771]: NOQUEUE: filter: RCPT from prod-mail-245.cab03.net[84.14.192.245]: <[email protected]>: Recipient address triggers FILTER dspam:dspam; from=<&_1;@mailing.leadsponsorises.com> to=<[email protected]> proto=ESMTP helo=<prod-mail-245.cab03.net>
May 26 15:41:51 nix postfix/smtpd[30771]: C8AEB2BE75: client=prod-mail-245.cab03.net[84.14.192.245]
May 26 15:41:51 nix postfix/cleanup[30815]: C8AEB2BE75: message-id=<[email protected]>
May 26 15:41:52 nix postfix/qmgr[13247]: C8AEB2BE75: from=<&_1;@mailing.leadsponsorises.com>, size=24827, nrcpt=1 (queue active)
May 26 15:41:52 nix postfix/smtpd[30822]: connect from localhost.localdomain[127.0.0.1]
May 26 15:41:52 nix postfix/smtpd[30822]: warning: Illegal address syntax from localhost.localdomain[127.0.0.1] in MAIL command: <&_1;@mailing.leadsponsorises.com>
May 26 15:41:52 nix dspam[11881]: Got error 501 in response to MAIL FROM: 501 5.1.7 Bad sender address syntax#015
May 26 15:41:52 nix postfix/smtpd[30822]: disconnect from localhost.localdomain[127.0.0.1]
May 26 15:41:52 nix dspam[11881]: Delivery failed completely
May 26 15:41:52 nix dspam[30819]: Client exited with error -1
May 26 15:41:52 nix postfix/pipe[30818]: C8AEB2BE75: to=<[email protected]>, relay=dspam, delay=1.4, delays=1/0.01/0/0.37, dsn=5.3.0, status=bounced (Command died with status 255: "/usr/bin/dspam")
------------------------------------------------------------------------------
Register Now for Creativity and Technology (CaT), June 3rd, NYC. CaT
is a gathering of tech-side developers & brand creativity professionals. Meet
the minds behind Google Creative Lab, Visual Complexity, Processing, &
iPhoneDevCamp as they present alongside digital heavyweights like Barbarian
Group, R/GA, & Big Spaceship. http://p.sf.net/sfu/creativitycat-com
_______________________________________________
Dspam-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/dspam-user
