OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: bad mail stream close status -1

From: Wietse Venema (wietseporcupine.org)
Date: Thu Jan 01 2004 - 21:36:17 CST


Robin Lynn Frank:
> On Thursday 01 January 2004 19:00, Wietse Venema wrote:
> > Robin Lynn Frank:
> > > On Thursday 01 January 2004 17:56, Wietse Venema wrote:
> > > > Robin Lynn Frank:
> > > > > I don't recall seeing this one before. Where should I be looking?
> > > >
> > > > Could you quote the whole message including program name? This
> > > > error is logged when aborting mail submission.
> > > >
> > > > Wietse
> > >
> > > Jan 1 18:35:58 alpha postfix/sendmail[26926]: warning: bad mail stream
> > > close status -1
> >
> > A status of -1 means that waitpid() failed to recover the exit
> > status of the postdrop child process. Older Postfix versions did
> > not care when the mail submission was aborted. I added this warning
> > while we were investigating what turned out to be a MacOSX bug.
> >
> > Were you running any particular Postfix version?
> >
> > Were you running any particular operating system version?
> >
> > Wietse
>
> 20031226 on Mandrake Linux 9.1. In looking thru the logs I found the times
> correspond to when 3 cron jobs run. I don't see any other instances.
>
> /usr/sbin/fetchnews -v 2>&1
> /usr/local/bin/pflogsumm -d today --verp_mung=2 /var/log/mail/*
> /usr//bin/tmda-pending -C -b -s | mail -s 'omega13 TMDA pending summary' \
> omega13

In any case, one of the mail transactions was aborted, and the
postdrop child process (of sendmail piping mail into the postdrop
command) did not terminate in the normal manner.

If you have process accounting turned on you may find out more
about those process exit status codes.

If you don't, then the opportunity is gone, as I have removed this
warning from future code (the MacOSX bus is identified, and I am
not writing code that screams for every mystery error that happens
while cleaning up from some already reported error).

        Wietse