Loading ...
Sorry, an error occurred while loading the content.

odd log entries

Expand Messages
  • Andrew Long
    About three weeks ago, I started seeing the following in logwatch/postfix section: Unrecognized warning: stdin: unexpected EOF in data, record type 78 length
    Message 1 of 6 , Oct 1, 2007
    • 0 Attachment
      About three weeks ago, I started seeing the following in logwatch/postfix section:

      Unrecognized warning:
      stdin: unexpected EOF in data, record type 78 length 128 : 1 Time(s)

      **Unmatched Entries**

      fatal: No recipient addresses found in message header
      fatal: uid=0: malformed input

      I can see no cases where delivery is failing, but the errors persist. This machine is only responsible for collecting about 5 messages a day from some local servers and sending them out to an outside smtp server.


      +++POSTFINGER+++

      --System Parameters--
      mail_version = 2.3.3
      hostname = AAA.AAA.AAA
      uname = Linux AAA.AAA.AAA 2.6.18-8.1.6.el5 #1 SMP Thu Jun 14 17:46:09 EDT 2007 i686 i686 i386 GNU/Li nux

      --Packaging information--
      looks like this postfix comes from RPM package: postfix-2.3.3-2

      --Mailbox locking methods--
      flock fcntl dotlock

      --Supported Lookup tables--
      btree cidr environ hash ldap nis pcre proxy regexp static unix

      --main.cf non-default parameters--
      alias_database = hash:/etc/postfix/aliases
      alias_maps = hash:/etc/postfix/aliases
      html_directory = /usr/share/doc/postfix-2.4.5-documentation/html
      mailq_path = /usr/bin/mailq.postfix
      manpage_directory = /usr/share/man
      mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
      mynetworks = 192.168.10.0/28, 127.0.0.0/8
      newaliases_path = /usr/bin/newaliases.postfix
      readme_directory = /usr/share/doc/postfix-2.4.5-documentation/readme
      sendmail_path = /usr/sbin/sendmail.postfix

      --master.cf--
      smtp inet n - n - - smtpd
      pickup fifo n - n 60 1 pickup
      cleanup unix n - n - 0 cleanup
      qmgr fifo n - n 300 1 qmgr
      tlsmgr unix - - n 1000? 1 tlsmgr
      rewrite unix - - n - - trivial-rewrite
      bounce unix - - n - 0 bounce
      defer unix - - n - 0 bounce
      trace unix - - n - 0 bounce
      verify unix - - n - 1 verify
      flush unix n - n 1000? 0 flush
      proxymap unix - - n - - proxymap
      smtp unix - - n - - smtp
      relay unix - - n - - smtp
      -o fallback_relay=
      showq unix n - n - - showq
      error unix - - n - - error
      retry unix - - n - - error
      discard unix - - n - - discard
      local unix - n n - - local
      virtual unix - n n - - virtual
      lmtp unix - - n - - lmtp
      anvil unix - - n - 1 anvil
      scache unix - - n - 1 scache

      --Specific file and directory permissions--
      drwx-wx--- 2 postfix postdrop 4096 Oct 1 04:02 /var/spool/postfix/maildrop
      drwx--x--- 2 postfix postdrop 4096 Sep 28 13:00 /var/spool/postfix/public
      total 0
      srw-rw-rw- 1 postfix postfix 0 Sep 28 13:00 cleanup
      srw-rw-rw- 1 postfix postfix 0 Sep 28 13:00 flush
      prw--w--w- 1 postfix postfix 0 Oct 1 10:18 pickup
      prw--w--w- 1 postfix postfix 0 Oct 1 10:15 qmgr
      srw-rw-rw- 1 postfix postfix 0 Sep 28 13:00 showq
      drwx------ 2 postfix root 4096 Sep 28 13:00 /var/spool/postfix/private
      total 0
      srw-rw-rw- 1 postfix postfix 0 Sep 28 13:00 anvil
      srw-rw-rw- 1 postfix postfix 0 Sep 28 13:00 bounce
      srw-rw-rw- 1 postfix postfix 0 Sep 17 15:49 bsmtp
      srw-rw-rw- 1 postfix postfix 0 Sep 17 15:49 cyrus
      srw-rw-rw- 1 postfix postfix 0 Sep 28 13:00 defer
      srw-rw-rw- 1 postfix postfix 0 Sep 28 13:00 discard
      srw-rw-rw- 1 postfix postfix 0 Sep 28 13:00 error
      srw-rw-rw- 1 postfix postfix 0 Sep 17 15:49 ifmail
      srw-rw-rw- 1 postfix postfix 0 Sep 28 13:00 lmtp
      srw-rw-rw- 1 postfix postfix 0 Sep 28 13:00 local
      srw-rw-rw- 1 postfix postfix 0 Sep 17 15:49 maildrop
      srw-rw-rw- 1 postfix postfix 0 Sep 17 15:49 old-cyrus
      srw-rw-rw- 1 postfix postfix 0 Sep 28 13:00 proxymap
      srw-rw-rw- 1 postfix postfix 0 Sep 28 13:00 relay
      srw-rw-rw- 1 postfix postfix 0 Sep 28 13:00 retry
      srw-rw-rw- 1 postfix postfix 0 Sep 28 13:00 rewrite
      srw-rw-rw- 1 postfix postfix 0 Sep 28 13:00 scache
      srw-rw-rw- 1 postfix postfix 0 Sep 28 13:00 smtp
      srw-rw-rw- 1 postfix postfix 0 Sep 28 13:00 tlsmgr
      srw-rw-rw- 1 postfix postfix 0 Sep 28 13:00 trace
      srw-rw-rw- 1 postfix postfix 0 Sep 17 15:49 uucp
      srw-rw-rw- 1 postfix postfix 0 Sep 28 13:00 verify
      srw-rw-rw- 1 postfix postfix 0 Sep 28 13:00 virtual
      -rwxr-sr-x 1 root postdrop 160652 Jan 21 2007 /usr/sbin/postdrop
      -rwxr-sr-x 1 root postdrop 177032 Jan 21 2007 /usr/sbin/postqueue

      --Library dependencies--
      /usr/libexec/postfix/smtpd:
      linux-gate.so.1 => (0x00da6000)
      libldap-2.3.so.0 => /usr/lib/libldap-2.3.so.0 (0x00136000)
      liblber-2.3.so.0 => /usr/lib/liblber-2.3.so.0 (0x00628000)
      libpcre.so.0 => /lib/libpcre.so.0 (0x004b1000)
      libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x0011d000)
      libssl.so.6 => /lib/libssl.so.6 (0x00b23000)
      libcrypto.so.6 => /lib/libcrypto.so.6 (0x00170000)
      libdl.so.2 => /lib/libdl.so.2 (0x00110000)
      libz.so.1 => /usr/lib/libz.so.1 (0x00a9c000)
      libdb-4.3.so => /lib/libdb-4.3.so (0x00686000)
      libnsl.so.1 => /lib/libnsl.so.1 (0x002a2000)
      libresolv.so.2 => /lib/libresolv.so.2 (0x00388000)
      libc.so.6 => /lib/libc.so.6 (0x0077d000)
      libcrypt.so.1 => /lib/libcrypt.so.1 (0x00c4b000)
      libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0x009ab000)
      libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0x002b8000)
      libcom_err.so.2 => /lib/libcom_err.so.2 (0x00485000)
      libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0x0054b000)
      /lib/ld-linux.so.2 (0x0051c000)
      libpthread.so.0 => /lib/libpthread.so.0 (0x00340000)
      libkrb5support.so.0 => /usr/lib/libkrb5support.so.0 (0x008db000)
      -- end of postfinger output --

      Regards,

      Andrew Long
    • Victor Duchovni
      ... Which daemon is reporting this problem? The log sample leaves out that crucial information. Perhaps you have a truncated message in the maildrop queue
      Message 2 of 6 , Oct 1, 2007
      • 0 Attachment
        On Mon, Oct 01, 2007 at 11:10:19AM -0400, Andrew Long wrote:

        >
        > About three weeks ago, I started seeing the following in logwatch/postfix section:
        >
        > Unrecognized warning:
        > stdin: unexpected EOF in data, record type 78 length 128 : 1 Time(s)
        >
        > **Unmatched Entries**
        >
        > fatal: No recipient addresses found in message header
        > fatal: uid=0: malformed input
        >
        > I can see no cases where delivery is failing, but the errors persist. This machine is only responsible for collecting about 5 messages a day from some local servers and sending them out to an outside smtp server.

        Which daemon is reporting this problem? The log sample leaves out
        that crucial information. Perhaps you have a truncated message in the
        "maildrop" queue directory whose permissions are set to 0744 indicating
        that this is a complete message, ready to be sent, but it is not in
        fact complete. It could also be in "incoming", but "maildrop" seems
        more likely...

        --
        Viktor.

        Disclaimer: off-list followups get on-list replies or get ignored.
        Please do not ignore the "Reply-To" header.

        To unsubscribe from the postfix-users list, visit
        http://www.postfix.org/lists.html or click the link below:
        <mailto:majordomo@...?body=unsubscribe%20postfix-users>

        If my response solves your problem, the best way to thank me is to not
        send an "it worked, thanks" follow-up. If you must respond, please put
        "It worked, thanks" in the "Subject" so I can delete these quickly.
      • Andrew Long
        ... Here is the complete entry... Oct 1 03:00:12 authorization postfix/sendmail[15028]: fatal: No recipient addresses found in message header Oct 1 07:00:13
        Message 3 of 6 , Oct 1, 2007
        • 0 Attachment
          > On Mon, Oct 01, 2007 at 11:10:19AM -0400, Andrew Long wrote:
          >
          > >
          > > About three weeks ago, I started seeing the following in
          > logwatch/postfix section:
          > >
          > > Unrecognized warning:
          > > stdin: unexpected EOF in data, record type 78 length 128 : 1
          > > Time(s)
          > >
          > > **Unmatched Entries**
          > >
          > > fatal: No recipient addresses found in message header
          > > fatal: uid=0: malformed input
          > >
          > > I can see no cases where delivery is failing, but the
          > errors persist. This machine is only responsible for
          > collecting about 5 messages a day from some local servers and
          > sending them out to an outside smtp server.
          >
          > Which daemon is reporting this problem? The log sample leaves
          > out that crucial information. Perhaps you have a truncated
          > message in the "maildrop" queue directory whose permissions
          > are set to 0744 indicating that this is a complete message,
          > ready to be sent, but it is not in fact complete. It could
          > also be in "incoming", but "maildrop" seems more likely...

          Here is the complete entry...

          Oct 1 03:00:12 authorization postfix/sendmail[15028]: fatal: No recipient
          addresses found in message header
          Oct 1 07:00:13 authorization postfix/postdrop[15029]: warning: stdin:
          unexpected EOF reading length, record type 78
          Oct 1 03:00:13 authorization postfix/postdrop[15029]: fatal: uid=0:
          malformed input
        • Victor Duchovni
          ... Something is invoking sendmail -t , but not providing any header recipients. The postfix sendmail(1) program gives up. ... The postdrop helped sees an
          Message 4 of 6 , Oct 1, 2007
          • 0 Attachment
            On Mon, Oct 01, 2007 at 11:30:51AM -0400, Andrew Long wrote:

            > Oct 1 03:00:12 authorization postfix/sendmail[15028]: fatal: No recipient
            > addresses found in message header

            Something is invoking "sendmail -t", but not providing any header
            recipients. The postfix sendmail(1) program gives up.

            > Oct 1 07:00:13 authorization postfix/postdrop[15029]: warning: stdin:
            > unexpected EOF reading length, record type 78

            The "postdrop" helped sees an incomplete queue file, and gives up.

            > Oct 1 03:00:13 authorization postfix/postdrop[15029]: fatal: uid=0:
            > malformed input

            This is normal:

            $ echo "this is test " | sendmail -it

            will yield similar results.

            --
            Viktor.

            Disclaimer: off-list followups get on-list replies or get ignored.
            Please do not ignore the "Reply-To" header.

            To unsubscribe from the postfix-users list, visit
            http://www.postfix.org/lists.html or click the link below:
            <mailto:majordomo@...?body=unsubscribe%20postfix-users>

            If my response solves your problem, the best way to thank me is to not
            send an "it worked, thanks" follow-up. If you must respond, please put
            "It worked, thanks" in the "Subject" so I can delete these quickly.
          • Andrew Long
            ... I checked the queues this morning and they were empty, can you think of any way to find the culprit? - Andrew
            Message 5 of 6 , Oct 1, 2007
            • 0 Attachment
              >
              > On Mon, Oct 01, 2007 at 11:30:51AM -0400, Andrew Long wrote:
              >
              > > Oct 1 03:00:12 authorization postfix/sendmail[15028]: fatal: No
              > > recipient addresses found in message header
              >
              > Something is invoking "sendmail -t", but not providing any
              > header recipients. The postfix sendmail(1) program gives up.
              >
              > > Oct 1 07:00:13 authorization postfix/postdrop[15029]:
              > warning: stdin:
              > > unexpected EOF reading length, record type 78
              >
              > The "postdrop" helped sees an incomplete queue file, and gives up.
              >
              > > Oct 1 03:00:13 authorization postfix/postdrop[15029]: fatal: uid=0:
              > > malformed input
              >
              > This is normal:
              >
              > $ echo "this is test " | sendmail -it
              >
              > will yield similar results.

              I checked the queues this morning and they were empty, can you think of any
              way to find the culprit?

              - Andrew
            • Victor Duchovni
              ... The message is not in the queue, it failed local submission. Find the cron job or other application that is invoking sendmail -t (or empty command-line
              Message 6 of 6 , Oct 1, 2007
              • 0 Attachment
                On Mon, Oct 01, 2007 at 01:55:30PM -0400, Andrew Long wrote:

                > > Something is invoking "sendmail -t", but not providing any
                > > header recipients. The postfix sendmail(1) program gives up.
                > >
                > > > Oct 1 07:00:13 authorization postfix/postdrop[15029]:
                > > warning: stdin:
                > > > unexpected EOF reading length, record type 78
                > >
                > > The "postdrop" helped sees an incomplete queue file, and gives up.
                > >
                > > > Oct 1 03:00:13 authorization postfix/postdrop[15029]: fatal: uid=0:
                > > > malformed input
                > >
                > > This is normal:
                > >
                > > $ echo "this is test " | sendmail -it
                > >
                > > will yield similar results.
                >
                > I checked the queues this morning and they were empty, can you think of any
                > way to find the culprit?

                The message is not in the queue, it failed local submission. Find the cron
                job or other application that is invoking "sendmail -t" (or empty command-line
                recipient list) and no recipient headers.

                --
                Viktor.

                Disclaimer: off-list followups get on-list replies or get ignored.
                Please do not ignore the "Reply-To" header.

                To unsubscribe from the postfix-users list, visit
                http://www.postfix.org/lists.html or click the link below:
                <mailto:majordomo@...?body=unsubscribe%20postfix-users>

                If my response solves your problem, the best way to thank me is to not
                send an "it worked, thanks" follow-up. If you must respond, please put
                "It worked, thanks" in the "Subject" so I can delete these quickly.
              Your message has been successfully submitted and would be delivered to recipients shortly.