OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Large messages being dropped, but not by message_size_limit

From: Victor Duchovni (Victor.DuchovniMorganStanley.com)
Date: Fri Jul 13 2007 - 12:41:15 CDT


On Fri, Jul 13, 2007 at 12:32:38PM -0500, Chris St. Pierre wrote:

> Okay, so then here's what's happening:

Speculation? Or have you verified this (tracing syscalls, other
measurements)?

> 1. Postfix, on our MXes, attempts to deliver the message via LMTP to
> our IMAP cluster.
>
> 2. Cyrus lmtpd receives the message and, at some point during the
> LMTP dialogue, invokes the 'sendmail' binary for some as-yet
> unknown reason.
>
> 3. The sendmail binary fails the the above error message.
>
> 4. Cyrus lmtpd, for another as-yet unknown reason, returns the error
> message verbatim rather than prepending it with a return code to
> preserve the validity of the session.
>
> 5. Postfix quite sanely complains that Cyrus has violated protocol,
> and the rest is history.
>
> Under what circumstances would the 'sendmail' binary fail with the
> above error? I have no max_message_size set in the (very stock)
> Postfix config on the IMAP servers; nor are any partitions full, nor
> the recipient at or near quota.
>

Well, if you fix the disease and not the symptoms, perhaps the question
will become moot. Why is Cyrus invoking sendmail(1)? Why is it leaving
sendmail(1) connected to the client SMTP stream? Cyrus is broken, fix
that.

If you don't set a message_size_limit it defaults to 10MB:

        $ postconf -d message_size_limit
        ...

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:majordomopostfix.org?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.