OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: missing attribute action

From: Ed Sawicki (edalcpress.com)
Date: Mon Oct 01 2007 - 20:50:56 CDT


Wietse Venema wrote:
> Ed Sawicki:
>> I've built a policy filter that works well most of
>> the time. Sometimes though, I see this appear in the
>> log:
>>
>> ... warning: missing attribute action in input from 127.0.0.1:2525
>>
>> and this is the result that Postfix sends to the sender:
>>
>> 451 4.3.5 Server configuration problem; ....
>>
>> I'm still troubleshooting this problem but perhaps
>> someone could give me some general pointers.
>
> The policy daemon needs to reply with an "action".
>
> Citing from: http://www.postfix.org/SMTPD_POLICY_README.html#protocol
>
> The policy server replies with any action that is allowed in
> a Postfix SMTPD access(5) table. Example:
>
> action=defer_if_permit Service temporarily unavailable
> [empty line]
>
> This causes the Postfix SMTP server to reject the request with
> a 450 temporary error code and with text "Service temporarily
> unavailable", if the Postfix SMTP server finds no reason to
> reject the request permanently.
>
> Wietse

For anyone interested, the problem is solved. It was,
of course a cockpit error. The problem was that I was
doing this in my policy server:

/usr/local/bin/cdb -q good_ip.cdb $client_address

instead of this:

/usr/local/bin/cdb -q good_ip.cdb $client_address >/dev/null

The output of cdb was being sent back to Postfix just before
the action= statement resulting in things like:

ieee.orgaction=DUNNO

A novice mistake.

Ed