--On Wednesday, September 22, 2004 6:55 pm +0800 "Kerwin@HIMAP"
<kerwin@???> wrote:
> What if it has no sender there?what does it mean?when only <>is present...
Its a bounce message, or a vacation message, or some other automatically
generated reply.
> ----- Original Message -----
> From: "Peter Savitch" <x765y@???>
> To: "Eric" <exim@???>
> Cc: <exim-users@???>
> Sent: Wednesday, September 22, 2004 6:27 PM
> Subject: [exim] Working with Exim queue metadata (was: View attachments
> inqueue?)
>
>
> I hope list users will forgive me. Not everybody know that Exim is almost
> incapable of MIME multipart handling (at least, Exim does not have
> intrinsic 100% MIME conformance because it's MTA, not MUA). If reader
> concerned on MIME handling and control policy, then just exiscan,
> http://duncanthrax.net/exiscan-acl/.
>
> Reader of this memo should be familiar with MIME.
>
> So, tÓ view the attachments in the queue, one can:
>
> 1) Find the message in Exim's queue using -bp option:
>
># exim -bp
>
> 0m 259 1CA3To-0001vO-2P <somebody@???>
> otherbody@???
>
> 1*) If you do not want Exim to deliver the message while you investigating
> it, then freeze it manually with -Mf option (you can always thaw the
> message back with -Mt):
>
># exim -Mf 1CA3To-0001vO-2P
> Message 1CA3To-0001vO-2P is now frozen
>
># exim -bp
> 24m 12K 1CA3ad-0001w1-J6 <somebody@???> *** frozen ***
> otherbody@???
>
> 2) Examine the metadata and MIME contents of the message in the queue,
> using message's internal Exim id (do not mess with the Message-Id header,
> this usually different than Exim's). Use -Mvh option:
>
># exim -Mvh 1CA3ad-0001w1-J6
>
> ...
> 128P Received: from root by relay.domain.org with local-smtp
> id 1CA3ad-0001w1-J6
> for otherbody@???; Wed, 22 Sep 2004 13:32:16 +0400
> 014 Subject: TEST
> 047I Message-Id: <1CA3ad-0001w1-J6@???>
> 026F From: somebody@???
> 038 Date: Wed, 22 Sep 2004 13:32:12 +0400
> 018 MIME-Version: 1.0
> 081 Content-Type: multipart/mixed;
> boundary="----_=_NextPart_001_01C4A085.E3E1FF30"
> 028T To: otherbody@???
>
> One could note the `I', `F' and `T' letters that obviously marks the
> appropriate headers (Message-Id, From and To). These things are described
> well in specs, chapter 49, Format of spool files, and can be used by
> custom software that examines Exim's spool zone (queue).
>
> 3) Extract the message body from the queue. Like the latter one, but -Mvb:
>
># exim -Mvb 1CA3ad-0001w1-J6
>
> 1CA3ad-0001w1-J6-D
> This is a multi-part message in MIME format.
>
> ------_=_NextPart_001_01C4A085.E3E1FF30
> Content-Type: multipart/alternative;
> boundary="----_=_NextPart_002_01C4A085.E3E1FF30"
>
>
> ------_=_NextPart_002_01C4A085.E3E1FF30
> Content-Type: text/plain;
> charset="us-ascii"
> Content-Transfer-Encoding: quoted-printable
>
> [snip]
>
> ------_=_NextPart_001_01C4A085.E3E1FF30
> Content-Type: image/jpeg;
> name="5019.jpg"
> Content-Transfer-Encoding: base64
> Content-Description: 5019.jpg
> Content-Disposition: attachment;
> filename="5019.jpg"
>
> /9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAPAAA/+4AJkFkb2JlAGTAAAAAA
> QMA
> FQQDBgoNAAAI1QAAC6QAABLHAAAcyP/bAIQABgQEBAUEBgUFBgkGBQYJCwgGBggLDAoKCwoKD
> BAM
> DAwMDAwQDA4PEA8ODBMTFBQTExwbGxscHx8fHx8fHx8fHwEHBwcNDA0YEBAYGhURFRofHx8fH
> x8f [...]
>
> As you can see, the first line is the message id, followed by MIME
> entities, that is, the message body. If you are interested in images,
> find the string `Content-Type: image/'. Then, skip the MIME part headers,
> take the base64-encoded image (with text editor) and blow it to mimencode
> -u:
>
># cat encoded.txt | mimencode -u -o image.jpg
>
> Exact file extension can be looked up in the part headers, by
> content-type, or by filename parameter. Looks ugly, some automated things
> could be done, but if you want to control ALL images, you are going to
> use spam scanning tools. It's not possible to do such things by hand. BTW
> porn images are caught well by special spectral analysis, because human
> skin color spectral curves are known a priori ;-)
>
> 4) Okay, when you are done with the message, you should decide what to do
> next: either to deliver it in a normal way or drop (remove from the
> queue). In the latter case, you can choose between kicking it off
> silently or giving the bounce to the sender.
>
> To simply thaw (release, opposite to -Mf option) the message and give it
> back to the SMTP world:
># exim -Mt 1CA3To-0001vO-2P
>
> To kick off the message silently (-Mrm sounds like POSIX `rm' command):
># exim -Mrm 1CA3To-0001vO-2P
>
> To give up and bounce (simulate permanent delivery failure):
># exim -Mg 1CA3To-0001vO-2P
>
> To skip the delivery to address otherbody@???:
># exim -Mmd 1CA3To-0001vO-2P otherbody@???
>
> And, to change the envelope sender:
># exim -Mes 1CA3To-0001vO-2P othersender@???
>
> 5) And for now, some advanced things. If you've got an urgent condition
> and need to wipe the queue in emergency then use tools like awk, sed,
> grep, etc combined with Exim's -bp and -Mrm options. One could do the
> things like:
>
> exim -bpr \
> | fgrep '<somebody@???>' \
> | awk '{ print $3; }' \
> | xargs -n 32 exim -Mrm
>
> In this sample, we get the ids of messages sent by somebody@???
> (note brackets!) and ask Exim to remove them, splitting by chunks of 32.
> You can of course use -Mf option instead of -Mrm to just freeze the
> messages for further investigation.
>
> PS
> Though this memo copies the manual, it gives the way of sample using
> Exim's options not everybody knows but yet useful. Especially with large
> queues ;-)
>
> --
>## List details at http://www.exim.org/mailman/listinfo/exim-users Exim
> details at http://www.exim.org/ ##
--
Ian Eiloart
Servers Team
Sussex University ITS
&References=A1990B852D9D9C7532126FF2@lewes.staff.uscs.susx.ac.uk&In-Reply-To=A1990B852D9D9C7532126FF2@lewes.staff.uscs.susx.ac.uk&Body=On%202004-09-22%2011:07,%20Ian%20Eiloart%20wrote:%0A>%20%0A>%20%0A>%20--On%20Wednesday,%20September%2022,%202004%206:55%20pm%20+0800%20%22Kerwin@HIMAP%22%20%0A>%20<kerwin@???>%20wrote:%0A>%20%0A>%20>%20What%20if%20it%20has%20no%20sender%20there?what%20does%20it%20mean?when%20only%20<>is%20present...%0A>%20%0A>%20Its%20a%20bounce%20message,%20or%20a%20vacation%20message,%20or%20some%20other%20automatically%20%0A>%20generated%20reply.%0A>%20%0A>%20>%20-----%20Original%20Message%20-----%0A>%20>%20From:%20%22Peter%20Savitch%22%20<x765y@???>%0A>%20>%20To:%20%22Eric%22%20<exim@???>%0A>%20>%20Cc:%20<exim-users@???>%0A>%20>%20Sent:%20Wednesday,%20September%2022,%202004%206:27%20PM%0A>%20>%20Subject:%20%5Bexim%5D%20Working%20with%20Exim%20queue%20metadata%20(was:%20View%20attachments%0A>%20>%20inqueue?)%0A>%20>%0A>%20>%0A>%20>%20I%20hope%20list%20users%20will%20forgive%20me.%20Not%20everybody%20know%20that%20Exim%20is%20almost%0A>%20>%20incapable%20of%20MIME%20multipart%20handling%20(at%20least,%20Exim%20does%20not%20have%0A>%20>%20intrinsic%20100%%20MIME%20conformance%20because%20it's%20MTA,%20not%20MUA).%20If%20reader%0A>%20>%20concerned%20on%20MIME%20handling%20and%20control%20policy,%20then%20just%20exiscan,%0A>%20>%20http://duncanthrax.net/exiscan-acl/.%0A>%20>%0A>%20>%20Reader%20of%20this%20memo%20should%20be%20familiar%20with%20MIME.%0A>%20>%0A>%20>%20So,%20t%C3%93%20view%20the%20attachments%20in%20the%20queue,%20one%20can:%0A>%20>%0A>%20>%201)%20Find%20the%20message%20in%20Exim's%20queue%20using%20-bp%20option:%0A>%20>%0A>%20>#%20exim%20-bp%0A>%20>%0A>%20>%0A>%20>%201*)%20If%20you%20do%20not%20want%20Exim%20to%20deliver%20the%20message%20while%20you%20investigating%0A>%20>%20it,%20then%20freeze%20it%20manually%20with%20-Mf%20option%20(you%20can%20always%20thaw%20the%0A>%20>%20message%20back%20with%20-Mt):%0A>%20>%0A>%20>#%20exim%20-Mf%201CA3To-0001vO-2P%0A>%20>%20Message%201CA3To-0001vO-2P%20is%20now%20frozen%0A>%20>%0A>%20>%0A>%20>%202)%20Examine%20the%20metadata%20and%20MIME%20contents%20of%20the%20message%20in%20the%20queue,%0A>%20>%20using%20message's%20internal%20Exim%20id%20(do%20not%20mess%20with%20the%20Message-Id%20header,%0A>%20>%20this%20usually%20different%20than%20Exim's).%20Use%20-Mvh%20option:%0A>%20>%0A>%20>#%20exim%20-Mvh%201CA3ad-0001w1-J6%0A>%20>%0A>%20>%0A>%20>%20One%20could%20note%20the%20%60I',%20%60F'%20and%20%60T'%20letters%20that%20obviously%20marks%20the%0A>%20>%20appropriate%20headers%20(Message-Id,%20From%20and%20To).%20These%20things%20are%20described%0A>%20>%20well%20in%20specs,%20chapter%2049,%20Format%20of%20spool%20files,%20and%20can%20be%20used%20by%0A>%20>%20custom%20software%20that%20examines%20Exim's%20spool%20zone%20(queue).%0A>%20>%0A>%20>%203)%20Extract%20the%20message%20body%20from%20the%20queue.%20Like%20the%20latter%20one,%20but%20-Mvb:%0A>%20>%0A>%20>#%20exim%20-Mvb%201CA3ad-0001w1-J6%0A>%20>%0A>%20>%201CA3ad-0001w1-J6-D%0A>%20>%20This%20is%20a%20multi-part%20message%20in%20MIME%20format.%0A>%20>%0A>%20>%0A>%20>%0A>%20>%0A>%20>%20%5Bsnip%5D%0A>%20>%0A>%20>%0A>%20>%20/9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAAPAAA/+4AJkFkb2JlAGTAAAAAA%0A>%20>%20QMA%0A>%20>%20FQQDBgoNAAAI1QAAC6QAABLHAAAcyP/bAIQABgQEBAUEBgUFBgkGBQYJCwgGBggLDAoKCwoKD%0A>%20>%20BAM%0A>%20>%20DAwMDAwQDA4PEA8ODBMTFBQTExwbGxscHx8fHx8fHx8fHwEHBwcNDA0YEBAYGhURFRofHx8fH%0A>%20>%20x8f%20%5B...%5D%0A>%20>%0A>%20>%20As%20you%20can%20see,%20the%20first%20line%20is%20the%20message%20id,%20followed%20by%20MIME%0A>%20>%20entities,%20that%20is,%20the%20message%20body.%20If%20you%20are%20interested%20in%20images,%0A>%20>%20find%20the%20string%20%60Content-Type:%20image/'.%20Then,%20skip%20the%20MIME%20part%20headers,%0A>%20>%20take%20the%20base64-encoded%20image%20(with%20text%20editor)%20and%20blow%20it%20to%20mimencode%0A>%20>%20-u:%0A>%20>%0A>%20>#%20cat%20encoded.txt%20%7C%20mimencode%20-u%20-o%20image.jpg%0A>%20>%0A>%20>%20Exact%20file%20extension%20can%20be%20looked%20up%20in%20the%20part%20headers,%20by%0A>%20>%20content-type,%20or%20by%20filename%20parameter.%20Looks%20ugly,%20some%20automated%20things%0A>%20>%20could%20be%20done,%20but%20if%20you%20want%20to%20control%20ALL%20images,%20you%20are%20going%20to%0A>%20>%20use%20spam%20scanning%20tools.%20It's%20not%20possible%20to%20do%20such%20things%20by%20hand.%20BTW%0A>%20>%20porn%20images%20are%20caught%20well%20by%20special%20spectral%20analysis,%20because%20human%0A>%20>%20skin%20color%20spectral%20curves%20are%20known%20a%20priori%20;-)%0A>%20>%0A>%20>%204)%20Okay,%20when%20you%20are%20done%20with%20the%20message,%20you%20should%20decide%20what%20to%20do%0A>%20>%20next:%20either%20to%20deliver%20it%20in%20a%20normal%20way%20or%20drop%20(remove%20from%20the%0A>%20>%20queue).%20In%20the%20latter%20case,%20you%20can%20choose%20between%20kicking%20it%20off%0A>%20>%20silently%20or%20giving%20the%20bounce%20to%20the%20sender.%0A>%20>%0A>%20>%20To%20simply%20thaw%20(release,%20opposite%20to%20-Mf%20option)%20the%20message%20and%20give%20it%0A>%20>%20back%20to%20the%20SMTP%20world:%0A>%20>#%20exim%20-Mt%201CA3To-0001vO-2P%0A>%20>%0A>%20>%20To%20kick%20off%20the%20message%20silently%20(-Mrm%20sounds%20like%20POSIX%20%60rm'%20command):%0A>%20>#%20exim%20-Mrm%201CA3To-0001vO-2P%0A>%20>%0A>%20>%20To%20give%20up%20and%20bounce%20(simulate%20permanent%20delivery%20failure):%0A>%20>#%20exim%20-Mg%201CA3To-0001vO-2P%0A>%20>%0A>%20>%20To%20skip%20the%20delivery%20to%20address%20otherbody@???:%0A>%20>#%20exim%20-Mmd%201CA3To-0001vO-2P%20otherbody@???%0A>%20>%0A>%20>%20And,%20to%20change%20the%20envelope%20sender:%0A>%20>#%20exim%20-Mes%201CA3To-0001vO-2P%20othersender@???%0A>%20>%0A>%20>%205)%20And%20for%20now,%20some%20advanced%20things.%20If%20you've%20got%20an%20urgent%20condition%0A>%20>%20and%20need%20to%20wipe%20the%20queue%20in%20emergency%20then%20use%20tools%20like%20awk,%20sed,%0A>%20>%20grep,%20etc%20combined%20with%20Exim's%20-bp%20and%20-Mrm%20options.%20One%20could%20do%20the%0A>%20>%20things%20like:%0A>%20>%0A>%20>%20exim%20-bpr%20%5C%0A>%20>%20%20%20%7C%20fgrep%20'<somebody@???>'%20%5C%0A>%20>%20%20%20%7C%20awk%20'%7B%20print%20%243;%20%7D'%20%5C%0A>%20>%20%20%20%7C%20xargs%20-n%2032%20exim%20-Mrm%0A>%20>%0A>%20>%20In%20this%20sample,%20we%20get%20the%20ids%20of%20messages%20sent%20by%20somebody@???%0A>%20>%20(note%20brackets!)%20and%20ask%20Exim%20to%20remove%20them,%20splitting%20by%20chunks%20of%2032.%0A>%20>%20You%20can%20of%20course%20use%20-Mf%20option%20instead%20of%20-Mrm%20to%20just%20freeze%20the%0A>%20>%20messages%20for%20further%20investigation.%0A>%20>%0A>%20>%20PS%0A>%20>%20Though%20this%20memo%20copies%20the%20manual,%20it%20gives%20the%20way%20of%20sample%20using%0A>%20>%20Exim's%20options%20not%20everybody%20knows%20but%20yet%20useful.%20Especially%20with%20large%0A>%20>%20queues%20;-)%0A>%20>%0A>%20>%20--%0A>%20>##%20List%20details%20at%20http://www.exim.org/mailman/listinfo/exim-users%20Exim%0A>%20>%20details%20at%20http://www.exim.org/%20##%0A>%20%0A>%20%0A>%20%0A>%20--%20%0A>%20Ian%20Eiloart%0A>%20Servers%20Team%0A>%20Sussex%20University%20ITS%0A>%20%0A>%20%0A>%20%0A>%20 "Reply to this message")
