|
From: cw <we...@fi...> - 2006-01-08 11:59:16
|
I recently posted under another address whilst I was having trouble rebuilding a server but sorted that one out. Shortly before I had to rebuild the server I noticed virtualmin delivering some messages to the wrong vhost. Since the rebuild I hoped it had gone away but I have just had a message to exactly the same mailbox delivered to the same incorrect vhost. Setup: FreeBSD 6.0, Webmin 1.250, Virtualmin 2.610 Machine hostname: machine.domaina.tld Domains in question: domaina.tld, domainb.tld Mailbox in question: sec...@do... Catchalls in question: cat...@do... There is no user set up with the mailbox security@ in any domain, nor is there on the server itself. The mailbox sec...@do... does not exist. Where a mailbox does not exist, sendmail normally rejects at the SMTP level saying "user unknown". When an e-mail is addressed to sec...@do..., it gets delivered to the catchall mailbox for domaina.tld. The message also goes through ClamAV 0.87.1 and SpamAssassin 3.1.0 but as far as I know they are not responsible for determining where the message ends up (ClamAV quarantines only viruses, SA only injects its headers and alters the subject. Headers are below, anyone got any advice as to how the message is getting to where it is getting? Is this even a Virtualmin problem or is it more likely something in Sendmail? Received: by machine.domaina.tld (mbox cat...@do...) (with Cubic Circle's cucipop (v1.31 1998/05/13) Sun Jan 8 11:21:40 2006) X-From_: si...@fu... Sun Jan 8 10:58:16 2006 Return-Path: <si...@fu...> Received: from friend (pcp0011888159pcs.pnsakn01.nj.comcast.net [69.249.13.172]) by machine.domaina.tld (8.13.4/8.13.4) with ESMTP id k08AwAXe005089 for <sec...@do...>; Sun, 8 Jan 2006 10:58:15 GMT (envelope-from si...@fu...) Message-ID: <000001c61442$66b25c80$0100007f@VINHCAM-USER> From: "Simon" <si...@fu...> To: <sec...@do... |
|
From: Jamie C. <jca...@we...> - 2006-01-08 13:28:44
|
On Sun, 2006-01-08 at 22:59, cw wrote: > I recently posted under another address whilst I was having trouble > rebuilding a server but sorted that one out. > Shortly before I had to rebuild the server I noticed virtualmin > delivering some messages to the wrong vhost. Since the rebuild I hoped > it had gone away but I have just had a message to exactly the same > mailbox delivered to the same incorrect vhost. > > Setup: FreeBSD 6.0, Webmin 1.250, Virtualmin 2.610 > Machine hostname: machine.domaina.tld > Domains in question: domaina.tld, domainb.tld > Mailbox in question: sec...@do... > Catchalls in question: cat...@do... > > There is no user set up with the mailbox security@ in any domain, nor is > there on the server itself. The mailbox sec...@do... does not > exist. Where a mailbox does not exist, sendmail normally rejects at the > SMTP level saying "user unknown". > When an e-mail is addressed to sec...@do..., it gets delivered > to the catchall mailbox for domaina.tld. > > The message also goes through ClamAV 0.87.1 and SpamAssassin 3.1.0 but > as far as I know they are not responsible for determining where the > message ends up (ClamAV quarantines only viruses, SA only injects its > headers and alters the subject. > > Headers are below, anyone got any advice as to how the message is > getting to where it is getting? Is this even a Virtualmin problem or is > it more likely something in Sendmail? > > Received: by machine.domaina.tld (mbox cat...@do...) > (with Cubic Circle's cucipop (v1.31 1998/05/13) Sun Jan 8 11:21:40 2006) > X-From_: si...@fu... Sun Jan 8 10:58:16 2006 > Return-Path: <si...@fu...> > Received: from friend (pcp0011888159pcs.pnsakn01.nj.comcast.net > [69.249.13.172]) > by machine.domaina.tld (8.13.4/8.13.4) with ESMTP id k08AwAXe005089 > for <sec...@do...>; Sun, 8 Jan 2006 10:58:15 GMT > (envelope-from si...@fu...) > Message-ID: <000001c61442$66b25c80$0100007f@VINHCAM-USER> > From: "Simon" <si...@fu...> > To: <sec...@do... This may be a Virtualmin bug, if it has setup the sendmail aliases and virtusers incorrectly somehow. What are the relevant entries in /etc/mail/virtusertable and /etc/mail/aliases for the problem address and the catchall? They should reveal how mail is really being delivered.. - Jamie |
|
From: cw <we...@fi...> - 2006-01-08 13:52:06
|
> This may be a Virtualmin bug, if it has setup the sendmail aliases and > virtusers incorrectly somehow. What are the relevant entries in > /etc/mail/virtusertable and /etc/mail/aliases for the problem address > and the catchall? They should reveal how mail is really being > delivered.. > > - Jamie Cheers for the reply Jamie, /etc/mail/aliases has is basically all the default FreeBSD stuff. I suspect the problem is this line: security: root root is redirected to the catchall for domaina.tld The concern though is that I would expect this mailbox to be applied only to messages addressed to the hostname of the server. I've tested a few other aliases defined in there and it would seem that anything addressed to one of those aliases under *any* domain is redirected as per /etc/mail/aliases unless it is explicitly defined in the domain as something else. So is this expected behaviour? Personally I would have expected each domain to be treated completely separately the aliases defined in /etc/mail/aliases only to be applied to the server hostname which isn't even domaina.tld it is host.domaina.tld Regards, Colin. |
|
From: Alan D. <We...@Om...> - 2006-01-08 14:28:32
|
On 1/8/2006 8:52 AM, cw wrote: > The concern though is that I would expect this mailbox to be applied > only to messages addressed to the hostname of the server. I've tested > a few other aliases defined in there and it would seem that anything > addressed to one of those aliases under *any* domain is redirected as > per /etc/mail/aliases unless it is explicitly defined in the domain as > something else. > > So is this expected behaviour? Personally I would have expected each > domain to be treated completely separately the aliases defined in > /etc/mail/aliases only to be applied to the server hostname which > isn't even domaina.tld it is host.domaina.tld Yes, this is expected behavior. Aliases are system-wide, so they apply by default to ALL domains. Addresses for specific domains or hosts belongs in the virtusertable. If you want the virtusertable to be used strictly for certain domains (or all domains) without consulting the aliases file, then you can define a "catch all" for each of those domains with a destination of error:nouser. That will restrict the addresses for those domains to only the addresses defined in the virtusertable. Alan |
|
From: Jamie C. <jca...@we...> - 2006-01-08 23:42:29
|
On 9/Jan/2006 00:52 cw wrote .. > > This may be a Virtualmin bug, if it has setup the sendmail aliases and > > virtusers incorrectly somehow. What are the relevant entries in > > /etc/mail/virtusertable and /etc/mail/aliases for the problem address > > and the catchall? They should reveal how mail is really being > > delivered.. > > > > - Jamie > > Cheers for the reply Jamie, > > /etc/mail/aliases has is basically all the default FreeBSD stuff. I > suspect the problem is this line: > > security: root > > root is redirected to the catchall for domaina.tld > > The concern though is that I would expect this mailbox to be applied > only to messages addressed to the hostname of the server. I've tested a > few other aliases defined in there and it would seem that anything > addressed to one of those aliases under *any* domain is redirected as > per /etc/mail/aliases unless it is explicitly defined in the domain as > something else. > > So is this expected behaviour? Personally I would have expected each > domain to be treated completely separately the aliases defined in > /etc/mail/aliases only to be applied to the server hostname which isn't > even domaina.tld it is host.domaina.tld Yes, this is expected behaviour. Sendmail aliases apply to all domains, whereas virtuser entries apply to only one domain. This is why Virtualmin always creates virtusers ... I am guessing this alias was created using Webmin's Sendmail module (or manually). - Jamie |
|
From: Alan D. <We...@Om...> - 2006-01-09 00:11:40
|
Jinx! :-) Alan On 1/8/2006 9:28 AM, Alan Dobkin wrote: > Yes, this is expected behavior. Aliases are system-wide, so they apply > by default to ALL domains. Addresses for specific domains or hosts > belongs in the virtusertable. On 1/8/2006 6:42 PM, Jamie Cameron wrote: > Yes, this is expected behaviour. Sendmail aliases apply to all domains, whereas > virtuser entries apply to only one domain. This is why Virtualmin always creates > virtusers ... I am guessing this alias was created using Webmin's Sendmail module > (or manually). > > - Jamie |
|
From: Jamie C. <jca...@we...> - 2006-01-09 00:16:11
|
Oops .. I didn't see your email before I wrote mine! - Jamie On 9/Jan/2006 11:11 Alan Dobkin wrote .. > Jinx! :-) > > Alan > > On 1/8/2006 9:28 AM, Alan Dobkin wrote: > > Yes, this is expected behavior. Aliases are system-wide, so they apply > > by default to ALL domains. Addresses for specific domains or hosts > > belongs in the virtusertable. > > On 1/8/2006 6:42 PM, Jamie Cameron wrote: > > Yes, this is expected behaviour. Sendmail aliases apply to all domains, > whereas > > virtuser entries apply to only one domain. This is why Virtualmin always > creates > > virtusers ... I am guessing this alias was created using Webmin's Sendmail > module > > (or manually). > > > > - Jamie |