On 08/05/14 10:35, Cyborg wrote:
Hi all,

i just found a lot aof unhandled fragments of emails in my input directory.

The corresponding message in the log is just:


2014-04-20 23:52:03 1Wbzed-0007gr-FE string_sprintf expansion was longer
than 32768

the only file left is the data part :

-rw-r----- 1 exim exim 2549239 20. Apr 23:52 ./1Wbzed-0007gr-FE-D

Interessting is, that no other logline is present, no from, no to log,
nor the host who send it.

It's possible that someone tried it via 127.0.0.1 or sendmail_wrapper ,
but without the header file, we wil never know.

As you can see, it's not just one mail:

-rw-r----- 1 exim exim 2549239 20. Apr 05:02 ./1Wbi16-0001Z6-FY-D
-rw-r----- 1 exim exim 2549239 19. Apr 22:02 ./1WbbT3-00078f-QN-D
[...]


Any ideas what could have caused this ?

Not offhand.   Can you extract a mail from one of those spool files
and work out how to feed it back into exim?   If so, then do it
with debug turned on ( -d-all+acl+deliver+expand ) to see where
in the processing it happens.  With luck this will give
the relevant expansion item which is big.   Then find that in
your config file/s and work out a way to avoid doing it when
it isn't safe...
--
Cheers,
   Jeremy

--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to