Greetings,
Xmail version 1.20:
I have an external command (custom program) that I'm running form
mailproc.tab for certain user accounts. It looks for certain
characteristics of a message, and if found, the message is copied to a
quarantine area, and a return code of 16 is returned (to stop processing
the mailproc.tab before the message is delivered to the user).
Today, when checking my quarantine area, I found a message that had been
quarantined which still had headers in it as if it were still being
processed by the SMTP engine. My understanding was that by the time a
message got to the mailproc.tab filter for a specific user account, that
the items used for SMTP processing (such as the lines containing the local
message id, the MAIL FROM and RCPT TO lines, and the "<<MAIL-DATA>>" line)
had been removed.
I've copied below the full header portion from this message.
I've also reviewed all filters, mailprocs, etc, for calls to the external
program that would have moved this message to quarantine, and ensured that
the only place it's being called is from mailproc.tab files within specific
user accounts (not during SMTP processing). The mailproc.tab that appears
to have caught this message contains:
"external"[TAB]"0"[TAB]"60"[TAB]"Quarantine.exe"[TAB]"@@FILE"[TAB]"E:\xmail\MailRoot\domains\quarantine.txt"[TAB]"@@MSGID"
"mailbox"
"redirect"[TAB]"[EMAIL PROTECTED]"
Note that all instances of "[TAB]" are actual tab characters in the
mailproc.tab file.
Finally, listed in the smail log is an entry which appears to indicate that
this was, in fact, caught by a mailproc.tab instance:
"karen.arisiasoft.com" "1106419542602.2656.42d9.karen" "S178236"
"[EMAIL PROTECTED]" "[EMAIL PROTECTED]" "EXTRN"
"Quarantine.exe" "2005-01-22 13:45:06"
Any insight?
Tracy
------------------------------------
69.58.30.138:59110;66.219.172.36:25;Sat, 22 Jan 2005 13:45:03 -0500
karen.arisiasoft.com
S178236
MAIL FROM:<[EMAIL PROTECTED]>
RCPT TO:<[EMAIL PROTECTED]>
<<MAIL-DATA>>
Received: from dufus.thecomputercorner.com (69.58.30.138:59110)
by karen.arisiasoft.com with [XMail 1.20 ESMTP Server]
id <S178236> for <[EMAIL PROTECTED]> from
<[EMAIL PROTECTED]>;
Sat, 22 Jan 2005 13:45:03 -0500
Received: (qmail 27401 invoked by uid 48); 22 Jan 2005 04:07:12 -0000
Date: 22 Jan 2005 04:07:12 -0000
Message-ID: <[EMAIL PROTECTED]>
To:
Subject: GET BACK TO ME
From: olu <[EMAIL PROTECTED]>
X-Priority: 3 (Normal)
CC:
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Mailer: RLSP Mailer
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]
