[Exim] Error in system filter: internal problem in system fi…

Top Page
Delete this message
Reply to this message
Author: Juergen Edner
Date:  
To: exim-users
Subject: [Exim] Error in system filter: internal problem in system filter: failure to transfer data from subprocess
Hello Philip,
some days ago I checked my mainlog file and saw that the following
message appeared after every queue run:

Error in system filter: internal problem in system filter: failure
to transfer data from subprocess

I found out that it had started after receiving a big spam mail so
I checked the input queue and found a message which caused this error.
I activated the debug output but couldn't find a hint for this error
and my system filter file hasn't been modifed for weeks.
This is the debug output:

   # /usr/local/exim/bin/exim -d+filter -q -v
   Exim version 4.30 uid=0 gid=0 pid=13718 D=fbb95efd
   Berkeley DB: Sleepycat Software: DB 2.4.14: (6/2/98)
   Support for: iconv() OpenSSL
   Lookups: lsearch wildlsearch nwildlsearch dbm dmbnz
   Authenticators: cram_md5 plaintext spa
   Routers: accept dnslookup ipliteral manualroute queryprogram redirect
   Transports: appendfile/mbx autoreply pipe smtp
   changed uid/gid: forcing real = effective
     uid=0 gid=0 pid=13718
     auxiliary group list: <none>
   finduser used cached passwd data for exim
   configuration file is /usr/local/exim/configure
   log selector = 040d99d8
   trusted user
   admin user
   skipping ACL configuration - not needed
   Single queue run
   set_process_info: 13718 running the queue (single queue run)
   LOG: queue_run MAIN
     Start queue run: pid=13718
   queue running main directory
   search_tidyup called
   set_process_info: 13718 running queue: 1AanTZ-0006FH-Rh-H
   set_process_info: 13719 delivering 1AanTZ-0006FH-Rh (queue run pid
     13718)
   reading spool file 1AanTZ-0006FH-Rh-H
   user=exim uid=42 gid=42 sender=CVSARIELREPORTS@???
   sender_fullhost = 168-226-177-91.speedy.com.ar (dario-2zhla9qb1)
     [168.226.177.91]
   sender_rcvhost = 168-226-177-91.speedy.com.ar ([168.226.177.91]
     helo=dario-2zhla9qb1)
   sender_local=0 ident=unset
   Non-recipients:
   Empty Tree
   ---- End of tree ----
   recipients_count=1
   body_linecount=455 message_linecount=86
   running system filter
   rda_interpret (file): /etc/exim-systemfilter
   expanded: /etc/exim-systemfilter
   set_process_info: 13718 running queue: waiting for 1AanTZ-0006FH-Rh
     (13719)
   changed uid/gid: system filter
     uid=42 gid=42 pid=13720
     auxiliary group list: <none>
   2390 bytes read from /etc/exim-systemfilter
   data is an Exim filter program
   Filter: start of processing
     Condition is false: error_message
     Condition is true: ${if def:h_X-New-Scan-Done: {def}{undef}} is def
     Condition is true: ${if def:h_X-New-Scan-Signature: {def}{undef}} is
       def
     Condition is false: ${if def:h_X-New-Virus-Flag: {def}{undef}} is
       def
     Condition is false: ${if def:h_X-New-Virus: {def}{undef}} is def
     Condition is true: ${if def:h_X-New-Spam-Flag: {def}{undef}} is def
     Condition is true: ${if def:h_X-New-Spam-Score: {def}{undef}} is def
     Condition is true: ${if def:h_X-New-Spam-Report: {def}{undef}} is
       def
     Condition is true: ${if def:h_X-New-Subject: {def}{undef}} is def
   Filtering did not set up a significant delivery.
   Normal delivery will occur.
   Filter: end of processing
   rda_interpret: subprocess yield=1 error=NULL
   LOG: MAIN PANIC
     internal problem in system filter: failure to transfer data from
       subprocess
   system filter returned 8
   LOG: MAIN PANIC
     Error in system filter: internal problem in system filter: failure
       to transfer data from subprocess
   set_process_info: 13718 running queue: waiting for children of 13719
   set_process_info: 13718 running queue
   LOG: queue_run MAIN
     End queue run: pid=13718
   search_tidyup called


After I having deleted the message everything worked fine again.
Therefore I think that it could only be a kind of buffer overrun
which had forced this error.
If you are interested in getting the original spam files for debug
purposes let me know. I will send it to you via PM then.

Regards Juergen
--
Mail: juergen.edner@???
GPG Key available