Hi Michael, You can set Scrubber.py not to use the orginal filename in the message by adding followin line in mm_cfg.py (mailman-2.1.6 and above).
SCRUBBER_DONT_USE_ATTACHMENT_FILENAME = True Developers, May be we should set this default in Defaults.py.in in the next release of 2.1.7. Thoughts? Michael Rasmussen wrote: > Resolved. The digest keeps a seperate mbox file at > {MMDIR}lists/LISTNAME/digest.mbox removing the email from that location > was the solution to my immediate problem. > > This does expose a DOS attack potential for MM lists. The too long > attachment name needs to be handled in a more graceful manner. > > Michael Rasmussen wrote: > >>Update: >> >>I've found the offending message and purged it from the list archives, >>purged it from the shunt files, and purged it from everywhere I could >>find it. >> >>Yet the problem persists. So I'm looking for the temp file/mail area >>where the file that contains this attachment may be found. >> >> >>Michael Rasmussen wrote: >> >>>I have a list that was sent a file with an attachement with too long a >>>name. (See error below) now all mail to the list is being shunted. >>> >>>the filename listed does not exist on my system. There is no file on my >>>system with that name. >>>The directory >>>/var/lib/mailman/archives/private/rca-l/attachments/20051207/3d04c3a4 is >>>empty. >>> >>>What do I need to do to resolve this problem? >>> >>>========== Error message ===================== >>>Dec 22 06:08:46 2005 (2233) Uncaught runner exception: [Errno 36] File name >>>too long: >>>'/var/lib/mailman/archives/private/rca-l/attachments/20051207/3d04c3a4/iso-8859-1QThe_surface_of_the_SunA0_The_sun_has_a_rigid_iron_surfaceiso-8859-1Q_located_under_the_photosphere_that_is_revealed_by_satelliiso-8859-1Qte_imagery.A0_The_solar_surface_sits_beneath_the_suns_viiso-8859-1Qsible_photosphere_and_is_electrically_active..obj' >>>Dec 22 06:08:46 2005 (2233) Traceback (most recent call last): >>> File "/usr/lib/mailman/Mailman/Queue/Runner.py", line 111, in _oneloop >>> self._onefile(msg, msgdata) >>> File "/usr/lib/mailman/Mailman/Queue/Runner.py", line 167, in _onefile >>> keepqueued = self._dispose(mlist, msg, msgdata) >>> File "/usr/lib/mailman/Mailman/Queue/IncomingRunner.py", line 130, in >>> _dispose >>> more = self._dopipeline(mlist, msg, msgdata, pipeline) >>> File "/usr/lib/mailman/Mailman/Queue/IncomingRunner.py", line 153, in >>> _dopipeline >>> sys.modules[modname].process(mlist, msg, msgdata) >>> File "/var/lib/mailman/Mailman/Handlers/ToDigest.py", line 91, in process >>> send_digests(mlist, mboxfp) >>> File "/var/lib/mailman/Mailman/Handlers/ToDigest.py", line 132, in >>> send_digests >>> send_i18n_digests(mlist, mboxfp) >>> File "/var/lib/mailman/Mailman/Handlers/ToDigest.py", line 306, in >>> send_i18n_digests >>> msg = scrubber(mlist, msg) >>> File "/var/lib/mailman/Mailman/Handlers/Scrubber.py", line 265, in process >>> url = save_attachment(mlist, part, dir) >>> File "/var/lib/mailman/Mailman/Handlers/Scrubber.py", line 447, in >>> save_attachment >>> fp = open(path, 'w') >>>IOError: [Errno 36] File name too long: >>>'/var/lib/mailman/archives/private/rca-l/attachments/20051207/3d04c3a4/iso-8859-1QThe_surface_of_the_SunA0_The_sun_has_a_rigid_iron_surfaceiso-8859-1Q_located_under_the_photosphere_that_is_revealed_by_satelliiso-8859-1Qte_imagery.A0_The_solar_surface_sits_beneath_the_suns_viiso-8859-1Qsible_photosphere_and_is_electrically_active..obj' >>> >>>Dec 22 06:08:46 2005 (2233) SHUNTING: >>>1135258825.4376719+99568bcc1187c910d48aae8b9ae8f68ed3aa643b >>> >>>========== Error message ===================== >>>-- >>> Michael Rasmussen, Portland Oregon -- Tokio Kikuchi, tkikuchi@ is.kochi-u.ac.jp http://weather.is.kochi-u.ac.jp/ ------------------------------------------------------ Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp