On Thu, Jan 06, 2005 at 10:01:42PM -0600, René Berber said:
> Stephen Gran wrote:
> 
> > On Wed, Jan 07, 2004 at 08:14:13PM +0100, Ryszard Jurczenko said:
> [snip]
> > > This is line from mailog when I manualy change privileges 
> > for mail boxes
> > > .....mail.mail  . Procmail is working and mail is renamed .
> > > 
> > > Jan  5 13:28:04 prodruk sendmail[3879]: j05CS3u03879: 
> > from=<[EMAIL PROTECTED]>, size=1110, class=0, nrcpts=1, 
> > msgid=<[EMAIL PROTECTED]>, proto=ESMTP, daemon=MTA, 
> > relay=crc2.excedent.us [206.158.107.157]
> > > Jan  5 13:28:20 prodruk procmail[3881]: Renamed bogus 
> > "/var/spool/mail/rysiek" into "/var/spool/mail/BOGUS.rysiek.W8VB" 
> > > Jan  5 13:28:20 prodruk sendmail[3880]: j05CS3u03879: 
> > to=<[EMAIL PROTECTED]>, delay=00:00:16, 
> > xdelay=00:00:16, mailer=local, pri=30806, dsn=2.0.0, stat=Sent
> > 
> > No what you've done is make sendmail notice the bad permissions and
> > decide the old mailbox is bogus, and refuse to deliver to it. 
> >  This is a mistake, and not what you want to do.
> 
> Er, look at the log... It says _procmail_, it's not sendmail doing the virus
> filter and the log doesn't show that clamav even saw the message, it's just
> procmail and a procmail rule which probably is badly made (i.e. uses
> clamdscan over a file/directory that clamd cannot access).  It even seems
> from the original message that Ryszard wants the message renamed.

No, this is standard MDA stuff with sendmail/procmail systems - I have
seen it many times on poorly done restore-from-backup situations when
permissions are out of sync.  If the destination mailbox is not owned by
the user that the mail is for, the old one is renamed to
BOGUS.$user.$random, and a new one is created.  This is a side effect of
his changing the permissions on the mail boxes to mail:mail, which is
clearly wrong.

He may want his mailboxes renamed, he may want clam to scan his mail,
but what he has achieved is neither - he has achieved an error recovery
moment in his MDA.
-- 
 --------------------------------------------------------------------------
|  Stephen Gran                  | He hath eaten me out of house and home. |
|  [EMAIL PROTECTED]             | -- William Shakespeare, "Henry IV"      |
|  http://www.lobefin.net/~steve |                                         |
 --------------------------------------------------------------------------

Attachment: pgpMjMmq9R9K8.pgp
Description: PGP signature

_______________________________________________
http://lists.clamav.net/cgi-bin/mailman/listinfo/clamav-users

Reply via email to