Just a voice of concern, That Old Sendmail, Is Remotley Vulnerable to a root
takeover of the host.
I hope your friend, see's this concern, and plans to upgrade before someone
decides to get malicioius for whatever reasons.
As for your Note, Does anyone have an updated RFC for SMTP? I just want to
check over those Newlines, to see if it's compliant with today's
requirements. Could possibly be, Sendmail's 8.7.5/8.7.3 protocol is
outdated.
Jonathan D. Poole
-----Original Message-----
From: Markus Stumpf <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
Date: Tuesday, August 29, 2000 10:39 AM
Subject: i give up - sendmail and stray newlines
>A friend of mine has a rather old Linux system with Sendmail 8.7.5/8.7.3.
>There were no problems talking to me qmail system until yesterday,
>when someone typed in some text via a web-Interface and this should be
>delivered to a local mailbox. The message was rejected with "stray
newlines".
>
>I could reproduce the behaviour with
> echo 'Test^M...' | Mail -s 'test' [EMAIL PROTECTED]
>
>This results in the following recordio log:
>
>tcpcontrol: ok 1972 mail.space.net:195.30.0.8:25
xxxxx.jura.uni-mainz.de:134.93.224.NNN::1183
>recordio: 1972 > 220 mail.space.net ESMTP?
>recordio: 1972 < EHLO xxxxx.jura.uni-mainz.de?
>recordio: 1972 > 250-mail.space.net?
>recordio: 1972 > 250-PIPELINING?
>recordio: 1972 > 250 8BITMIME?
>recordio: 1972 < MAIL From:<[EMAIL PROTECTED]>?
>recordio: 1972 > 250 ok?
>recordio: 1972 < RCPT To:<[EMAIL PROTECTED]>?
>recordio: 1972 > 250 ok?
>recordio: 1972 < DATA?
>recordio: 1972 > 354 go ahead?
>recordio: 1972 < Received: (from maex@localhost) by xxxxx.jura.uni-mainz.de
(8.7.5/8.7.3) id AAA10303 for [EMAIL PROTECTED]; Wed, 30 Aug 2000 00:16:58
+0200?
>recordio: 1972 < Date: Wed, 30 Aug 2000 00:16:58 +0200?
>recordio: 1972 < From: Maex der Tester <[EMAIL PROTECTED]>?
>recordio: 1972 < Message-Id: <200008+
>recordio: 1972 < [EMAIL PROTECTED]>?
>recordio: 1972 < To: [EMAIL PROTECTED]?
>recordio: 1972 < Subject: Test?
>recordio: 1972 < ?
>recordio: 1972 < Test?...
>recordio: 1972 > 451 Put ,E=\r\n at the end of Mether, Mtcp, or Msmtp in
sendmail.cf if you are using Solaris 2.5 (fixed in 2.5.1). I cannot accept
messages with stray newlines. Many SMTP servers will time out waiting for
\r\n.\r\n.?
>smtpd: 967587433.542401 1972 > [EOF]
>tcpserver: end 1972 status 256
>
>What I don't understand is why qmail chokes because of a stray newline?
>I don't see a "\n.\n" in the above example. At best there is a "\r...\n"
>Why does qmail think this is a stray newline?
>Isn't "\r...\n" a valid sequence in a message body?
>
>If I do this from a more modern sendmail (8.9.3/8.9.3) the above looks like
>
>recordio: 4795 < Test?...?
>recordio: 4795 < .?
>recordio: 4795 > 250 ok 967588205 qp 4798?
>recordio: 4795 < QUIT?
>tcpserver: end 4795 status 256
>
>What do I miss (please forgive me if this is obvious and I don't see it!)?
>Puzzled,
>
> \Maex
>
>--
>SpaceNet GmbH | http://www.Space.Net/ | Stress is when you
wake
>Research & Development | mailto:[EMAIL PROTECTED] | up screaming and
you
>Joseph-Dollinger-Bogen 14 | Tel: +49 (89) 32356-0 | realize you haven't
>D-80807 Muenchen | Fax: +49 (89) 32356-299 | fallen asleep yet.
>
