From: Victor Duchovni on 19 Feb 2010 15:25 On Fri, Feb 19, 2010 at 09:16:37PM +0100, Ralf Hildebrandt wrote: > * Victor Duchovni <Victor.Duchovni(a)morganstanley.com>: > > > Well, Postfix just executes "procmail" via your shell (when mailbox_command > > contains shell metacharacters). Don't blame the messenger. The error message > > is from your shell, which clearly reports not being able to run the > > /usr/bin/procmail executable. > > Maybe smrsh? Not at all likely. Postfix does not use "smrsh". With mailbox_command, Postfix explicitly uses the compiled-in path of the Bourne shell: (void) execl(_PATH_BSHELL, "sh", "-c", command, (char *) 0); msg_fatal("execl %s: %m", _PATH_BSHELL); It is mostly pointless to use smrsh with procmail, as procmail allows users to bypass the restrictions imposed by smrsh. This is explained in the smrsh manpage: Also, including mail filtering programs such as procmail(1) is a very bad idea. procmail(1) allows users to run arbitrary programs in their procmailrc(5). -- Viktor. P.S. Morgan Stanley is looking for a New York City based, Senior Unix system/email administrator to architect and sustain our perimeter email environment. If you are interested, please drop me a note.
From: Wietse Venema on 19 Feb 2010 15:48 Victor Duchovni: > On Fri, Feb 19, 2010 at 09:16:37PM +0100, Ralf Hildebrandt wrote: > > > * Victor Duchovni <Victor.Duchovni(a)morganstanley.com>: > > > > > Well, Postfix just executes "procmail" via your shell (when mailbox_command > > > contains shell metacharacters). Don't blame the messenger. The error message > > > is from your shell, which clearly reports not being able to run the > > > /usr/bin/procmail executable. > > > > Maybe smrsh? > > Not at all likely. Postfix does not use "smrsh". With mailbox_command, > Postfix explicitly uses the compiled-in path of the Bourne shell: > > (void) execl(_PATH_BSHELL, "sh", "-c", command, (char *) 0); > msg_fatal("execl %s: %m", _PATH_BSHELL); > > It is mostly pointless to use smrsh with procmail, as procmail allows > users to bypass the restrictions imposed by smrsh. This is explained > in the smrsh manpage: > > Also, including mail filtering programs such as procmail(1) > is a very bad idea. procmail(1) allows users to run arbitrary > programs in their procmailrc(5). Postfix will use $local_command_shell for commands chosen by users. However it will use /bin/sh for commands chosen by the administrator. Wietse
From: "Adrian P. van Bloois" on 20 Feb 2010 08:05 * El Fri, Feb 19, 2010 at 06:56:38PM +0100, escribiste: > Hi, > I just installed postfix 2.7.0. > WIthout changes to the existing configuration of 2.6.5 I get this error > using procmail as my mailbox_command: > Feb 19 18:34:29 adrianvb postfix/local[14290]: BD85F7006D: to=<adrian(a)adrianvb.xs4all.nl>, orig_to=<root>, relay=local, delay=0.03, delays=0.02/0/0/0.01, dsn=5.3.0, status=bounced (Command died with status 126: "/usr/bin/procmail". Command output: /usr/bin/procmail: /usr/bin/procmail: cannot execute binary file ) > Anyone any ideas??? I have th thing working now with local delivery agent, so mailbox_command is empty. When I feed an e-mail to procmail it just works, when I change the mailbox_command back to /usr/bin/procmail I get the same problem. There's something rotten in the state of UNIX. > > Adrian > > > -- > Adrian P. van Bloois > Postbus 2575 email: adrian(a)accu.uu.nl > 3500 GN Utrecht voice: +31-30-68-94649 > The Netherlands fax: ++31-30-68-94601 > > The whole point of cooking is to get as much flavour out of the > ingredients as possible. > -- Delia SMith -- Adrian P. van Bloois Postbus 2575 email: adrian(a)accu.uu.nl 3500 GN Utrecht voice: +31-(0)-30-68-94649 The Netherlands fax: +31-30-68-94649 The whole point of cooking is to get as much flavour out of the ingredients as possible. -- Delia Smith
From: mouss on 20 Feb 2010 08:17 Adrian P. van Bloois a �crit : > * El Fri, Feb 19, 2010 at 06:56:38PM +0100, escribiste: >> Hi, >> I just installed postfix 2.7.0. >> WIthout changes to the existing configuration of 2.6.5 I get this error >> using procmail as my mailbox_command: >> Feb 19 18:34:29 adrianvb postfix/local[14290]: BD85F7006D: to=<adrian(a)adrianvb.xs4all.nl>, orig_to=<root>, relay=local, delay=0.03, delays=0.02/0/0/0.01, dsn=5.3.0, status=bounced (Command died with status 126: "/usr/bin/procmail". Command output: /usr/bin/procmail: /usr/bin/procmail: cannot execute binary file ) >> Anyone any ideas??? > I have th thing working now with local delivery agent, so > mailbox_command is empty. > When I feed an e-mail to procmail it just works, when I change the > mailbox_command back to /usr/bin/procmail I get the same problem. > There's something rotten in the state of UNIX. > do you have selinux/apparmor/... ?
From: "Adrian P. van Bloois" on 20 Feb 2010 09:19 * El Sat, Feb 20, 2010 at 02:17:05PM +0100, escribiste: > Adrian P. van Bloois a �crit : > > * El Fri, Feb 19, 2010 at 06:56:38PM +0100, escribiste: > >> Hi, > >> I just installed postfix 2.7.0. > >> WIthout changes to the existing configuration of 2.6.5 I get this error > >> using procmail as my mailbox_command: > >> Feb 19 18:34:29 adrianvb postfix/local[14290]: BD85F7006D: to=<adrian(a)adrianvb.xs4all.nl>, orig_to=<root>, relay=local, delay=0.03, delays=0.02/0/0/0.01, dsn=5.3.0, status=bounced (Command died with status 126: "/usr/bin/procmail". Command output: /usr/bin/procmail: /usr/bin/procmail: cannot execute binary file ) > >> Anyone any ideas??? > > I have th thing working now with local delivery agent, so > > mailbox_command is empty. > > When I feed an e-mail to procmail it just works, when I change the > > mailbox_command back to /usr/bin/procmail I get the same problem. > > There's something rotten in the state of UNIX. > > > > do you have selinux/apparmor/... ? Nope!!! WHen I execute procmail from the commandline it works perfectly. As soon as I put it in my .forward or in the main.cf it fails. -- Adrian P. van Bloois Postbus 2575 email: adrian(a)accu.uu.nl 3500 GN Utrecht voice: +31-(0)-30-68-94649 The Netherlands fax: +31-30-68-94649 The whole point of cooking is to get as much flavour out of the ingredients as possible. -- Delia Smith
First
|
Prev
|
Next
|
Last
Pages: 1 2 3 4 Prev: Postfix Virtual Users with maildrop Next: postfix explicit logging all failures in maillog |