John Peacock wrote:
Pascal Dreissen wrote:
Tainting is a way for Perl to keep track of "unsafe" data, typically
data that comes from outside of the programs itself. Tainting was
invented to keep bad people from passing specially malformed data on the
commandline and doing things like deleting all of your files. Removing
the taint is done by using a regular expression to validate the data is
what the original programmer expected and then using the results of the
regex to reinitialize the variable (thus removing the taint).
Thanks for your manual :)
In any case, I suspect this is actually a bug in 5.8.0 (which had some
problems with taint that were fixed in 5.8.1 and later). If you can,
you should update to the latest Perl that is available for your distro
(or build your own and use the latest Perl, 5.8.7). Try taking the
'/var/qmail/bin/qmail-queue' off of the config line (since that is the
default anyways) and see if that fixes it.
Ok, that will have a little bit more impact, since i need to investigate
if there are any compiled c module for perl.
However i checked on the old server, it has exactly the same version
running!
As to why it happens on the new system and not the old, you would need
to see what version of Perl was running on the old system (which could
easily have been 5.6.x or something, without the specific problems in
5.8.0).
I tried to use the smtp-forward plugin, this seems to work on plain
messages, however when trying to send an attachment:
@40000000431d95d012d4d6c4 29525 XX: Insecure dependency in require while
running with -T switch at /usr/lib/perl5/5.8.0/utf8_heavy.pl line 156,
<STDIN> line 16.
@40000000431d95d012d4e664
@40000000431d95d012d5a9b4 Use of uninitialized value in concatenation
(.) or string at lib/Qpsmtpd/SMTP.pm line 85, <STDIN> line 16.
@40000000431d95d012d60f44 : command 'data' failed unexpectedly (No such
file or directory)
@40000000431d95d012d70d2c 29525 451 Internal error - try again later -
command 'data' failed unexpectedly
