Sendmail milter SPF (was: run levels (priority) and chkconfig --add)
Michael Weiner
hunter at userfriendly.net
Wed Oct 20 22:49:08 UTC 2004
On Thu, 2004-10-21 at 00:47 +0200, Alexander Dalloz wrote:
> Am Do, den 21.10.2004 schrieb Paul Howarth um 0:34:
>
> > > Oct 17 09:37:47 kjc386 sendmail[2296]: i9HDblkJ002296: Milter
> > > (spf-milter): error connecting to filter: Connection refused by
> > > /var/spf-milter/spf-milter.sock
> > > Oct 17 09:37:47 kjc386 sendmail[2296]: i9HDblkJ002296: Milter
> > > (spf-milter): to error state
> > > Oct 17 09:37:47 kjc386 sendmail[2296]: i9HDblkJ002296: Milter:
> > > initialization failed, temp failing commands
> > >
> > > And the email is then bounced (temporarily) by sendmail.
> > >
> > > > Does the socket get created in /var/spf-milter?
> > >
> > > Not sure, I haven't looked whilest it was dead. It certainly exists
> > > after I restart it.
> >
> > It shouldn't be there when the milter is dead, but it should be there
> > when it's just started, before sendmail is started.
>
> But if the socket is missing when Sendmail comes up there will be an
> error warning in the maillog produced by Sendmail.
>
> > Could be an "unsafe socket" problem; make sure that none of the
> > directories / /var /var/spf-milter are world-writable.
>
> Then too Sendmail would complain in the maillog.
>
> It could be a problem that an old socket file resides and the SPF milter
> server startup does not fully create a new socket file. You could
> prevent this situation by writing in the start() function of the SPF
> milter init script a line
>
> rm -f /var/spf-milter/spf-milter.sock
>
> right before the daemon line with which the milter is started.
>
> (Wouldn't be a more common location for the socket - and other milter
> files - /var/lib/spf-milter/ or /var/spool/spf-milter/?)
Actually milters normally use the sockets created in /var/run. I run
several and by default they like /var/run/$PROG (i.e. sid-milter,
spf-milter, dk-filter, mime-defang, etc)
Michael Weiner
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20041020/de169625/attachment-0003.sig>
More information about the fedora-list
mailing list