[Esd-l] Problem configuring Sanitizer with qmail

[Stephen Sloan]

-----Original Message-----
From: John D. Hardin [mailto:jhardin at impsec.org]
Sent: Saturday, July 20, 2002 11:48 PM
To: Stephen Sloan
Cc: esd-l at spconnect.com
Subject: Re: [Esd-l] Problem configuring Sanitizer with qmail


On Thu, 18 Jul 2002, Stephen Sloan wrote:

>> I've installed the Sanitizer on one of our servers and it seems to
>> be working well with the exception that the notification portion
> fails. Here is an excerpt from the log file:
>>
>> sendmail: illegal option -- U

>See the discussion of MTA_FLAGS_CMDLN on the Configuration page.

Thanks, apparently I had an older copy of that page that didn't include the
section on MTA_FLAGS. Actually I solved the problem by editing
html-trap.procmail to change the parameter from -U to -t.

>> As far as I can see, the test message has all of the usual
>> headers. Any thoughts?

>Can you post the headers from the test message?

Headers:

Received: (qmail 4837 invoked by alias); 23 Jul 2002 16:40:05 -0000
Delivered-To: alias-localdelivery-ssloan at mincocorp.com
Received: (qmail 4834 invoked by uid 8); 23 Jul 2002 16:40:05 -0000
Received: from h00a0cc3bd62e.ne.client2.attbi.com (24.147.168.97, claiming
to be "stephensloan.dyndns.org")
	by SME1 with SMTP id smtpdA5mIEP; Tue, 23 Jul 2002 12:39:57 EDT
Received: (qmail 1884 invoked by uid 8); 23 Jul 2002 17:04:41 -0000
Received: from localhost (127.0.0.1, claiming to be "stephensloan.com")
	by localhost with SMTP id smtpdEYDmpe; Tue, 23 Jul 2002 13:04:39 EDT
Received: from 207.41.39.86
        (SquirrelMail authenticated user ssloan)
        by www.stephensloan.com with HTTP;
        Tue, 23 Jul 2002 13:04:39 -0400 (EDT)
Message-ID: <61974.207.41.39.86.1027443879.squirrel at www.stephensloan.com>
Date: Tue, 23 Jul 2002 13:04:39 -0400 (EDT)
Subject: Test Screen Saver
From: "Stephen Sloan" <ssloan at stephensloan.com>
To: <ssloan at mincocorp.com>
X-Priority: 3
Importance: Normal
X-MSMail-Priority: Normal
X-Mailer: SquirrelMail (version 1.2.6)
MIME-Version: 1.0
X-Security: MIME headers sanitized on SME1
	See http://www.impsec.org/email-tools/sanitizer-intro.html
	for details. $Revision: 1.135 $Date: 2002-05-26 21:19:33-07
X-Security: The postmaster has not enabled quarantine of poisoned messages.
Content-Type: multipart/mixed; boundary="----=_20020723130439_83559"

As you can see, the Sanitizer correctly dealt with the attachment but did
not notify the sender.