[Esa-l] problems with sanitizer and notification email

ken brookner kenb at brookner.com
Tue Dec 5 10:41:53 PST 2000


i'm running jhardin's html-trap.procmail v 1.124 release and am having some
problems.

i use exim instead of sendmail on my linux system (redhat 6.2).  i noted
that when i should be receiving a notification of a problem message, i
wasn't.  the email would go into the quarantine ok, but no notification was
received.  to test this i sent from a networked windows system an attached
*.dll file.  the email was properly quarantined, but no notification was
received.

looking at the procmail.log file i found:

===
NOTIFY kenb
exim abandoned: unknown, malformed, or incomplete option -U
>From kenb at brookner.com Tue Dec 05 10:22:38 2000
 Subject: rtes
  Folder: /var/spool/mail/security       74258
procmail: Skipped ") | $SENDMAIL $SECURITY_NOTIFY"
procmail: Skipped ") | $SENDMAIL $SECURITY_NOTIFY"
Sanitizing MIME attachment headers in "test" from "ken brookner"
<kenb at brookner.com> to kenb msgid=<011201c05ee8$acd90020$1014a8c0 at winqat>
 Trapped poisoned executable "CTCCW.DLL".
 Mangling executable filename "CTCCW.DLL".
 Mangling executable filename "CTCCW.DLL".
===

i then edited the html-trap.procmail file and removed all instances of "-U"
from the various sendmail lines.  i then again sent a dll file as an
attachment.  here is the log from that attempt:

===
NOTIFY kenb
procmail: Skipped ") | $SENDMAIL $SECURITY_NOTIFY"
procmail: Skipped ") | $SENDMAIL $SECURITY_NOTIFY_VERBOSE"
/bin/bash: -c: line 15: syntax error: unexpected end of file
>From kenb at brookner.com Tue Dec 05 10:24:54 2000
 Subject: test
  Folder: /var/spool/mail/security       74258
===

so, removing the "-U" from the sendmail lines made exim happy, but i'm not
sure where the "/bin/bash" error line is coming from.

ideas?

thanks
kenb


____________________________
Ken Brookner
kenb at brookner.com
kenb at qatrix.panther.net
...!rwsys!rowdy!qatrix!kenb




More information about the esd-l mailing list