No subject


Wed Jul 30 17:08:51 UTC 2008


ta loss=2C
    or introduces a security hole allowing access to the accounts of users =
who use the package.

loss of emails is data loss so my understanding is that this bug qualifies =
as grave.

>=20
> Please send the output of fetchmail -vvv and fetchmail --configdump.

I've editted /etc/default/fetchmail to add the line=20
OPTIONS=3D-vvv
output from ps shows that fetchmail is now being run as
/usr/bin/fetchmail -vvv -f /etc/fetchmailrc --pidfile /var/run/fetchmail/fe=
tchmail.pid -d 300 --syslog
When I lose another email=2C I'll post the log.

Here's the result of fetchmail --configdump
# fetchmail --configdump
fetchmail: WARNING: Running as root is discouraged.
TRUE=3D1=3B FALSE=3D0

os_type =3D 'linux'
feature_options =3D ('pop3'=2C'imap'=2C'gssapi'=2C'sdps'=2C'etrn'=2C'odmr'=
=2C'ssl'=2C)
# Start of configuration initializer
fetchmailrc =3D {
    'poll_interval':0=2C
    "logfile":None=2C
    "idfile":"/root/.fetchids"=2C
    "postmaster":"postmaster"=2C
    'bouncemail':TRUE=2C
    'spambounce':FALSE=2C
    "properties":None=2C
    'invisible':FALSE=2C
    'showdots':TRUE=2C
    'syslog':FALSE=2C
    'servers': []
}
# End of initializer

>=20
> As far as I can see this messages comes from exim (sink.c)=20
> not from fetchmail.

The text comes from exim4. However=2C it is fetchmail that logs the text.
My understanding of the problem is that
a)  fetchmail has an e-mail from the pop3 server that needs to be sent to t=
he local exim4.
b)  fetchmail has extracted a From address from the e-mail that is invalid.
c)  fetchmail uses this invalid From address which gets rejected by exim4
d)  Instead of retrying with a made up valid From address (e.g. mailer-daem=
on at localhost)=2C
     fetchmail is logging exim4's rejection and discarding the e-mail.

I don't know if the e-mail actually contains an invalid From address or if =
it contains a
valid From address but fetchmail doesn't extract it correctly. However=2C t=
hat is a minor
point. The main one being that an invalid From address should not cause los=
s of the
e-mail.

Bruce
_________________________________________________________________
Got Game? Win Prizes in the Windows Live Hotmail Mobile Summer Games Trivia=
 Contest
http://www.gowindowslive.com/summergames?ocid=3DTXT_TAGHM=





More information about the pkg-fetchmail-maint mailing list