Hi,
I have an annoying problem with one specific message and any help of you would
be greatly appreciated.
My cyrus imap version is 2.5.10 and my SMTP is a postfix 3.1.4
This afternoon I received a spam/malware mail message in my own mailbox, and I
was reporting it to Spamcop using the original message as attachment. My client
is Thunderbird 52.0.1.
Then I stepped into this problem....
Thunderbird seemed to hang and a syslog message like this was reported from
cyrus-imap:
Apr 25 22:05:29 local6:err imap: imap[13453]: IOERROR: reading message:
unexpected end of file
Surprisingly the message is ok and postfix process the message without any
problem. The problem is the copy of the mail that Thunderbird try to put into
the Sent folder.
Note that I only have problem with this message. Any other sent message is
copied to Sent folder without any issue.
So, I supposed this is a formatting issue with this exact message and I was
going to forget about it. But... IOERROR seems a bit hard to me... this should
not happen in cyrus-imap.
Looking into imap logs I see these errors at the end. All are "6 NO System I/O
error".
===
PK
<1493150904<
>1493150978>6 NO System I/O error
PK
>1493150760>6 NO System I/O error
===
I'm attaching imap logs (with some address changed to xxx for privacy), and
also a copy of the mail received into a hotmail account.
WARNING WARNING WARNING WARNING.... please do not open the ZIP into hotmail.txt
file, it contains a harmful/malware .js file that I was going to report.
Regards,
Carlos Velasco
---------- x...@xxx.com Tue Apr 25 22:08:24 2017
<1493150904<4 COMPRESS DEFLATE
>1493150904>4 OK DEFLATE active
<1493150904<5 ID ("name" "Thunderbird" "version" "52.0.1")
>1493150904>* ID ("name" "Cyrus IMAPD" "version" "2.5.10 be9a1799 2016-10-18"
>"vendor" "Project Cyrus" "support-url" "http://www.cyrusimap.org"; "os" "Linux"
>"os-version" "4.8.6" "environment" "Built w/Cyrus SASL 2.1.26; Running w/Cyrus
>SASL 2.1.26; Built w/OpenSSL 1.0.2j 26 Sep 2016; Running w/OpenSSL 1.0.2k 26
>Jan 2017; Built w/zlib 1.2.8; Running w/zlib 1.2.8; CMU Sieve 2.4; mmap =
>shared; lock = fcntl; nonblock = fcntl; idle = idled")
5 OK Completed
<1493150904<6 append "INBOX/Sent" (\Seen) {5180+}
<1493150904<References:
<<149314105608.21938.13585947838228240308@105.212.50.231>
Subject: Fwd: 28403 xxx.xxx
To: xxxx <x...@xxx.com>
From: xxx <x...@xxx.com>
X-Forwarded-Message-Id:
<<149314105608.21938.13585947838228240308@105.212.50.231>
Message-ID: <495a6eb8-535a-d9ed-5bff-79f99f910...@xxx.com>
Date: Tue, 25 Apr 2017 22:08:24 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101
Thunderbird/52.0.1
MIME-Version: 1.0
In-Reply-To: <149314105608.21938.13585947838228240308@105.212.50.231>
Content-Type: multipart/mixed;
boundary="------------ED4352FA0F9660CD0BAD727B"
Content-Language: es-ES
This is a multi-part message in MIME format.
--------------ED4352FA0F9660CD0BAD727B
Content-Type: multipart/alternative;
boundary="------------5068FE9C74D8AA01225202AA"
--------------5068FE9C74D8AA01225202AA
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
--------------5068FE9C74D8AA01225202AA
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body style="background-color: rgb(255, 255, 255); color: rgb(0, 0,
0);" text="#000000" bgcolor="#FFFFFF">
<br>
</body>
</html>
--------------5068FE9C74D8AA01225202AA--
--------------ED4352FA0F9660CD0BAD727B
Content-Type: message/rfc822;
name="28403 xxxxx.eml"
Content-Transfer-Encoding: 8bit
Content-Disposition: attachment;
filename="28403 xxx_xxxx.eml"
X-Spam-Checker-Version: SpamAssassin 3.4.2-r1676620 (2015-04-28) on
pulsar.nimastelecom.com
X-Spam-Level: *
X-Spam-Status: No, score=1.7 required=5.0 tests=BAYES_00,DCC_CHECK,
DIGEST_MULTIPLE,PYZOR_CHECK,RDNS_NONE,TVD_SPACE_RATIO,TVD_SPACE_RATIO_MINFP
autolearn=no autolearn_force=no version=3.4.2-r1676620
Received: from nimastelecom.com (unknown [105.212.50.231])
by w01.nimastelecom.com (ESMTP Server) with SMTP
for <x...@xxx.com>; Tue, 25 Apr 2017 19:24:29 +0200 (CEST)
Date: Tue, 25 Apr 2017 17:24:16 -0000
From: <sere...@arredosalaria.com>
Importance: High
Content-Disposition: attachment
Content-Type: application/zip; name="909929.zip"
Subject: 28403 xxxxx
To: <x...@xxx.com>
Message-ID: <149314105608.21938.13585947838228240308@105.212.50.231>
MIME-Version: 1.0
Content-Transfer-Encoding: base64
PK
<1493150904<
>1493150978>6 NO System I/O error
---------- x...@xxx.com Tue Apr 25 22:05:39 2017
<1493150739<4 COMPRESS DEFLATE
>1493150739>4 OK DEFLATE active
<1493150739<5 ID ("name" "Thunderbird" "version" "52.0.1")
>1493150739>* ID ("name" "Cyrus IMAPD" "version" "2.5.10 be9a1799 2016-10-18"
>"vendor" "Project Cyrus" "support-url" "http://www.cyrusimap.org"; "os" "Linux"
>"os-version" "4.8.6" "environment" "Built w/Cyrus SASL 2.1.26; Running w/Cyrus
>SASL 2.1.26; Built w/OpenSSL 1.0.2j 26 Sep 2016; Running w/OpenSSL 1.0.2k 26
>Jan 2017; Built w/zlib 1.2.8; Running w/zlib 1.2.8; CMU Sieve 2.4; mmap =
>shared; lock = fcntl; nonblock = fcntl; idle = idled")
5 OK Completed
<1493150739<6 append "INBOX/Sent" (\Seen) {5180+}
<1493150739<References:
<<149314105608.21938.13585947838228240308@105.212.50.231>
Subject: Fwd: 28403 xxx
To: x...@xxx.com
From: xxx <x...@xxx.com>
X-Forwarded-Message-Id:
<<149314105608.21938.13585947838228240308@105.212.50.231>
Message-ID: <2f1fa7c5-caa6-e8d0-131d-11b0b9625...@xxx.com>
Date: Tue, 25 Apr 2017 22:04:39 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101
Thunderbird/52.0.1
MIME-Version: 1.0
In-Reply-To: <149314105608.21938.13585947838228240308@105.212.50.231>
Content-Type: multipart/mixed;
boundary="------------F0B5186FF6EA5F8FF26C58A0"
Content-Language: es-ES
This is a multi-part message in MIME format.
--------------F0B5186FF6EA5F8FF26C58A0
Content-Type: multipart/alternative;
boundary="------------630B9C08FFE7ADF0DF108F40"
--------------630B9C08FFE7ADF0DF108F40
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
--------------630B9C08FFE7ADF0DF108F40
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body style="background-color: rgb(255, 255, 255); color: rgb(0, 0,
0);" text="#000000" bgcolor="#FFFFFF">
<br>
</body>
</html>
--------------630B9C08FFE7ADF0DF108F40--
--------------F0B5186FF6EA5F8FF26C58A0
Content-Type: message/rfc822;
name="28403 xxx.eml"
Content-Transfer-Encoding: 8bit
Content-Disposition: attachment;
filename="28403 xxx.eml"
X-Spam-Checker-Version: SpamAssassin 3.4.2-r1676620 (2015-04-28) on
pulsar.nimastelecom.com
X-Spam-Level: *
X-Spam-Status: No, score=1.7 required=5.0 tests=BAYES_00,DCC_CHECK,
DIGEST_MULTIPLE,PYZOR_CHECK,RDNS_NONE,TVD_SPACE_RATIO,TVD_SPACE_RATIO_MINFP
autolearn=no autolearn_force=no version=3.4.2-r1676620
Received: from nimastelecom.com (unknown [105.212.50.231])
by w01.nimastelecom.com (ESMTP Server) with SMTP
for <x...@xxx.com>; Tue, 25 Apr 2017 19:24:29 +0200 (CEST)
Date: Tue, 25 Apr 2017 17:24:16 -0000
From: <sere...@arredosalaria.com>
Importance: High
Content-Disposition: attachment
Content-Type: application/zip; name="909929.zip"
Subject: 28403 xxx
To: <x...@xxx.com>
Message-ID: <149314105608.21938.13585947838228240308@105.212.50.231>
MIME-Version: 1.0
Content-Transfer-Encoding: base64
PK
>1493150760>6 NO System I/O error
Received: from w01.nimastelecom.com (localhost [127.0.0.1])
by w01.nimastelecom.com (ESMTP Server) with ESMTPS
for <sirmar...@hotmail.com>; Tue, 25 Apr 2017 22:12:36 +0200 (CEST)
Received: from [1.1.1.1] (dhcp.xxx.com [1.1.1.1])
by w01.nimastelecom.com (ESMTP Server) with ESMTPSA id 383AB10B
for <sirmar...@hotmail.com>; Tue, 25 Apr 2017 22:12:36 +0200 (CEST)
References: <<149314105608.21938.13585947838228240308@105.212.50.231>
Subject: Fwd: 28403 xxx
To: <x...@xxx.com>
From: xxx <x...@xxx.com>
X-Forwarded-Message-Id:
<<149314105608.21938.13585947838228240308@105.212.50.231>
Message-ID: <4bda1240-5d39-bfa2-1627-bf412a923...@xxx.com>
Date: Tue, 25 Apr 2017 22:12:35 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101
Thunderbird/52.0.1
In-Reply-To: <149314105608.21938.13585947838228240308@105.212.50.231>
Content-Type: multipart/mixed;
boundary="------------67049BBC0112CA3698BA2382"
Content-Language: es-ES
Return-Path: x...@xxx.com
MIME-Version: 1.0
--------------67049BBC0112CA3698BA2382
Content-Type: multipart/alternative;
boundary="------------C7CAEAF767EFC98D1C101FF1"
--------------C7CAEAF767EFC98D1C101FF1
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit
--------------C7CAEAF767EFC98D1C101FF1
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: 7bit
<html><head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="background-color: rgb(255, 255, 255); color: rgb(0, 0,
0);" text="#000000" bgcolor="#FFFFFF">
<br>
</body>
</html>
--------------C7CAEAF767EFC98D1C101FF1--
--------------67049BBC0112CA3698BA2382
Content-Type: message/rfc822; name="28403 xxx.eml"
Content-Transfer-Encoding: 8bit
Content-Disposition: attachment; filename="28403 xxx.eml"
X-Spam-Checker-Version: SpamAssassin 3.4.2-r1676620 (2015-04-28) on
pulsar.nimastelecom.com
X-Spam-Level: *
X-Spam-Status: No, score=1.7 required=5.0 tests=BAYES_00,DCC_CHECK,
DIGEST_MULTIPLE,PYZOR_CHECK,RDNS_NONE,TVD_SPACE_RATIO,TVD_SPACE_RATIO_MINFP
autolearn=no autolearn_force=no version=3.4.2-r1676620
Received: from nimastelecom.com (unknown [105.212.50.231])
by w01.nimastelecom.com (ESMTP Server) with SMTP
for <x...@xxx.com>; Tue, 25 Apr 2017 19:24:29 +0200 (CEST)
Date: Tue, 25 Apr 2017 17:24:16 +0000
From: <sere...@arredosalaria.com>
Content-Disposition: attachment
Content-Type: application/zip; name="909929.zip"
Subject: 28403 xxx
To: <x...@xxx.com>
Message-ID: <149314105608.21938.13585947838228240308@105.212.50.231>
Content-Transfer-Encoding: base64
Importance: high
X-Priority: 1
MIME-Version: 1.0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--------------67049BBC0112CA3698BA2382--
