RE: [Mimedefang] Command rejected

2004-03-25 Thread Robert Covell 
action_bounce looked fine.  It is possible that I upgraded minor versions of
sendmail recently.  I will have to check my notes to see what happened
first.  Guess I didn't think that would cause a problem, but if the milter
code changed then it would...

Thanks for the insight,
-Bob

> So you've got two issues:
>
> (1) Why is some mail being rejected?  It's supposed to be!  Look for
> action_bounce in your filter to figure out how it's deciding this and
> change it if necessary.
>
> (2) Why is it using a generic message instead of something
> informative?  That's harder to tell.  Make sure action_bounce is being
> called with valid parameters.  Something as simple as action_bounce("I
> don't like this mail") is fine - see the man page for
> mimedefang_filter for
> more options.  If that looks correct, maybe there's a problem with your
> milter installation?  Did you upgrade sendmail without rebuilding
> mimedefang?  Did you install MD from a binary RPM built against a
> different
> version of sendmail?  At this point I'm just guessing.

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

RE: [Mimedefang] Command rejected

2004-03-25 Thread Kelson Vibber 
At 11:40 AM 3/25/2004, Kelson Vibber wrote:
see the man page for mimedefang_filter for more options.
Er, make that mimedefang-filter.

Kelson Vibber
SpeedGate Communications  

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

RE: [Mimedefang] Command rejected

2004-03-25 Thread Kelson Vibber 
At 08:45 AM 3/25/2004, Robert Covell wrote:
Mar 25 10:16:45 server6 mimedefang[12794]: i2PGDuDQ012793: Bouncing because
filter instructed us to
Your filter has called action_bounce.  This is normal.

Mar 25 10:16:45 server6 mimedefang[12794]: i2PGDuDQ012793: set_reply
returned MI_FAILURE
Not sure, but I think it means something is preventing MD from setting the 
response message for the SMTP rejection.

Mar 25 10:16:45 server6 sm-mta[12793]: i2PGDuDQ012793: Milter: data,
reject=554 5.7.1 Command rejected
Milter has told sendmail to reject the message with the code "554 5.7.1 
Command rejected".  Except for the code, this is normal.  I'd guess that 
milter fell back to a default response when MD failed to set a specific one.

Mar 25 10:16:45 server6 sm-mta[12793]: i2PGDuDQ012793:
to=<[EMAIL PROTECTED]>, delay=00:00:06, pri=35693, stat=Command rejected
Sendmail is doing what your filter told it to and rejecting the 
message.  This is also normal.

The key problem is in the second line, with the MI_FAILURE.

So you've got two issues:

(1) Why is some mail being rejected?  It's supposed to be!  Look for 
action_bounce in your filter to figure out how it's deciding this and 
change it if necessary.

(2) Why is it using a generic message instead of something 
informative?  That's harder to tell.  Make sure action_bounce is being 
called with valid parameters.  Something as simple as action_bounce("I 
don't like this mail") is fine - see the man page for mimedefang_filter for 
more options.  If that looks correct, maybe there's a problem with your 
milter installation?  Did you upgrade sendmail without rebuilding 
mimedefang?  Did you install MD from a binary RPM built against a different 
version of sendmail?  At this point I'm just guessing.

Kelson Vibber
SpeedGate Communications  

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

RE: [Mimedefang] Command rejected

2004-03-25 Thread Robert Covell 
Here are some brief log entries:

Mar 25 10:16:45 server6 sm-mta[12793]: i2PGDuDQ012793:
to=<[EMAIL PROTECTED]>, delay=00:00:06, pri=35693, stat=Command rejected
Mar 25 10:17:28 server6 sm-mta[13826]: i2PGHQDF013826: Milter: data,
reject=554 5.7.1 Command rejected
Mar 25 10:17:28 server6 sm-mta[13826]: i2PGHQDF013826:
to=<[EMAIL PROTECTED]>, delay=00:00:01, pri=60204, stat=Command rejected
Mar 25 10:18:35 server6 sm-mta[14091]: i2PGIYDF014091: Milter: data,
reject=554 5.7.1 Command rejected
Mar 25 10:18:35 server6 sm-mta[14091]: i2PGIYDF014091:
to=<[EMAIL PROTECTED]>, delay=00:00:01, pri=71836, stat=Command rejected

Here are the details for each entries:
Detail for i2PGDuDQ012793:

Mar 25 10:16:45 server6 sm-mta[12793]: i2PGDuDQ012793:
from=<[EMAIL PROTECTED]>, size=5693, class=0, nrcpts=1,
msgid=<[EMAIL PROTECTED]>, proto=SMTP, daemon=MTA,
relay=m155.Burnside.uri.edu [131.128.138.155]
Mar 25 10:16:45 server6 mimedefang.pl[12645]:
MDLOG,i2PGDuDQ012793,virus,,131.128.138.155,<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]
udoku.com>,You can geet any wooman with this bbook,  Dtperko WcPTbQT
Mar 25 10:16:45 server6 sendmail[13631]: i2PGGjeJ013631:
[EMAIL PROTECTED], size=430, class=0, nrcpts=1,
msgid=<[EMAIL PROTECTED]>,
[EMAIL PROTECTED]
Mar 25 10:16:45 server6 mimedefang.pl[12645]: filter: i2PGDuDQ012793:
bounce=1 discard=1 notify_administrator=1
Mar 25 10:16:45 server6 mimedefang[12794]: i2PGDuDQ012793: Bouncing because
filter instructed us to
Mar 25 10:16:45 server6 mimedefang[12794]: i2PGDuDQ012793: set_reply
returned MI_FAILURE
Mar 25 10:16:45 server6 sm-mta[12793]: i2PGDuDQ012793: Milter: data,
reject=554 5.7.1 Command rejected
Mar 25 10:16:45 server6 sm-mta[12793]: i2PGDuDQ012793:
to=<[EMAIL PROTECTED]>, delay=00:00:06, pri=35693, stat=Command rejected
Mar 25 10:22:17 server6 sm-mta[14652]: i2PGMGDH014652:
from=<[EMAIL PROTECTED]>, size=679, class=0, nrcpts=1,
msgid=<[EMAIL PROTECTED]>, proto=ESMTP,
daemon=MTA, relay=localhost [127.0.0.1]


Detail for i2PGHQDF013826:

Mar 25 10:17:27 server6 sm-mta[13826]: i2PGHQDF013826:
from=<[EMAIL PROTECTED]>, size=30204, class=0, nrcpts=1,
msgid=<[EMAIL PROTECTED]>, proto=SMTP,
daemon=MTA, relay=Vital-Express-1063649.cust-rtr.pacbell.net
[68.124.113.142]
Mar 25 10:17:27 server6 mimedefang.pl[12966]:
MDLOG,i2PGHQDF013826,virus,Worm.SomeFool.Gen-2,68.124.113.142,<[EMAIL PROTECTED]
t.com>,<[EMAIL PROTECTED]>,information
Mar 25 10:17:27 server6 sendmail[13841]: i2PGHR6j013841:
[EMAIL PROTECTED], size=471, class=0, nrcpts=1,
msgid=<[EMAIL PROTECTED]>,
[EMAIL PROTECTED]
Mar 25 10:17:28 server6 mimedefang.pl[12966]: filter: i2PGHQDF013826:
bounce=1 discard=1 notify_administrator=1
Mar 25 10:17:28 server6 mimedefang[13827]: i2PGHQDF013826: Bouncing because
filter instructed us to
Mar 25 10:17:28 server6 mimedefang[13827]: i2PGHQDF013826: set_reply
returned MI_FAILURE
Mar 25 10:17:28 server6 sm-mta[13826]: i2PGHQDF013826: Milter: data,
reject=554 5.7.1 Command rejected
Mar 25 10:17:28 server6 sm-mta[13826]: i2PGHQDF013826:
to=<[EMAIL PROTECTED]>, delay=00:00:01, pri=60204, stat=Command rejected
Mar 25 10:22:22 server6 sm-mta[14652]: i2PGMGDP014652:
from=<[EMAIL PROTECTED]>, size=720, class=0, nrcpts=1,
msgid=<[EMAIL PROTECTED]>, proto=ESMTP,
daemon=MTA, relay=localhost [127.0.0.1]


Detail for i2PGIYDF014091:

Mar 25 10:18:35 server6 sm-mta[14091]: i2PGIYDF014091:
from=<[EMAIL PROTECTED]>, size=41836, class=0, nrcpts=1,
msgid=<[EMAIL PROTECTED]>, proto=ESMTP, daemon=MTA,
relay=host35-210.discord.birch.net [65.16.35.210]
Mar 25 10:18:35 server6 mimedefang.pl[12966]:
MDLOG,i2PGIYDF014091,virus,Worm.SomeFool.P,65.16.35.210,<[EMAIL PROTECTED]
om>,<[EMAIL PROTECTED]>,ALARM! Virus found!
Mar 25 10:18:35 server6 sendmail[14098]: i2PGIZkB014098:
[EMAIL PROTECTED], size=468, class=0, nrcpts=1,
msgid=<[EMAIL PROTECTED]>,
[EMAIL PROTECTED]
Mar 25 10:18:35 server6 mimedefang.pl[12966]: filter: i2PGIYDF014091:
bounce=1 discard=1 notify_administrator=1
Mar 25 10:18:35 server6 mimedefang[14092]: i2PGIYDF014091: Bouncing because
filter instructed us to
Mar 25 10:18:35 server6 mimedefang[14092]: i2PGIYDF014091: set_reply
returned MI_FAILURE
Mar 25 10:18:35 server6 sm-mta[14091]: i2PGIYDF014091: Milter: data,
reject=554 5.7.1 Command rejected
Mar 25 10:18:35 server6 sm-mta[14091]: i2PGIYDF014091:
to=<[EMAIL PROTECTED]>, delay=00:00:01, pri=71836, stat=Command rejected
Mar 25 10:22:21 server6 sm-mta[14652]: i2PGMGDN014652:
from=<[EMAIL PROTECTED]>, size=717, class=0, nrcpts=1,
msgid=<[EMAIL PROTECTED]>, proto=ESMTP,
daemon=MTA, relay=localhost [127.0.0.1]

> -Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Rob
> Sent: Thursday, March 25, 2004 8:18 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [Mimedefang] Command rejected
>
>
> > -Original Message-
> > Fro

RE: [Mimedefang] Command rejected

2004-03-25 Thread Rob 
> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On 
> Behalf Of Robert Covell
> 
> Why does this occur at random times in our maillog on two 
> relay servers?
> What does "Command rejected" mean?  My research on 
> sendmail.org came up with
> very vague ideas.  The only thing I can determine is that it 
> is after either
> Spam a virus has been caught (Not on every email that is Spam 
> or a virus).
> 
> Setup:  Sendmail 8.12.10, MD 2.40, SA 2.61, Clam AV, KAV

Log entry?


PLEASE - keep list traffic on the list.  Email sent directly to me may
be ignored utterly.

-- 
Rob | What part of "no" was it you didn't understand? 
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang