Xymon Mailing List Archive search

smtp/smtps tests against postfix generate errors on server

list Bruce White
Sun, 21 Nov 2010 09:36:45 -0600
Message-Id: <user-e8a38ae2f7b7@xymon.invalid>

You can change what Xymon sends during an smtp test by editing the
<install dir>/etc/bb-services file.

    ......Bruce
  

 
 Bruce White
 Senior Enterprise Systems Engineer | Phone: XXX-XXX-XXXX | Fax: XXX-XXX-XXXX | user-58f975e8bf9d@xymon.invalid | http://www.fellowes.com/
 
 
 
Disclaimer: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. Fellowes, Inc.
 
-----Original Message-----
From: Xymon User in Richmond [mailto:user-24d6f8323faa@xymon.invalid] 
Sent: Saturday, November 20, 2010 8:19 PM
To: xymon at xymon.com
Subject: Re: [xymon] smtp/smtps tests against postfix generate errors on
server

The test is in netservices.c.  You could try patching in a HELO before
the
MAIL command.  Or check postfix's main.cf for reject_unauth_pipelining
directive.  Not sure what removing it might result in for everything
else.
 The "feature" of logging this for every occurrence appears to have been
introduced in 2.6.

On Sat, November 20, 2010 20:31, Shawn Heisey wrote:
I have this message over and over in the log on my personal Debian
mailserver:

improper command pipelining after MAIL from
mail.example.org[ip.ad.dr.es]


It started on November 10th, when I installed updates on the machine,
upgrading postfix from 2.5.5-1.1 to 2.7.1-1~bpo50+1.

I grabbed a sniffer trace, where I found that Xymon is sending, in a
single packet, a "mail" command followed by "quit".  The server
responds
with the following because this is a violation of the strict RFC:

503 5.5.1 Error: send HELO/EHLO first
221 2.0.0 Bye

My postfix config has two places where it checks for unauthorized
pipelining, one of which was not preceded by permit_mynetworks, so I
fixed that, and it didn't help.

I am running the lenny-backports xymon package, version
4.3.0~beta2.dfsg-5~bpo50+1.

Can the test be re-engineered so that it follows proper SMTP protocol
and waits for a server response between each command?

Thanks,
Shawn