[exim-dev] [Bug 966] New: DKIM-related failures should not e…

Top Page
Delete this message
Reply to this message
Author: Andreas Metzler
Date:  
To: exim-dev
New-Topics: [exim-dev] [Bug 966] DKIM resource-limit logging could be more specific, [exim-dev] [Bug 966] DKIM resource-limit logging could be more specific, [exim-dev] [Bug 966] DKIM resource-limit logging could be more specific, [exim-dev] [Bug 966] DKIM resource-limit logging could be more specific, [exim-dev] [Bug 966] DKIM resource-limit logging could be more specific, [exim-dev] [Bug 966] DKIM resource-limit logging could be more specific, [exim-dev] [Bug 966] DKIM-related failures should not end up in the panic log
Subject: [exim-dev] [Bug 966] New: DKIM-related failures should not end up in the panic log
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://bugs.exim.org/show_bug.cgi?id=966
           Summary: DKIM-related failures should not end up in the panic log
           Product: Exim
           Version: 4.71
          Platform: x86
               URL: http://bugs.debian.org/567876
        OS/Version: Linux
            Status: NEW
          Severity: bug
          Priority: medium
         Component: Logging
        AssignedTo: tom@???
        ReportedBy: eximusers@???
                CC: exim-dev@???



Hello,

DKIM resource limits against DoS cause this kind of messages in paniclog for
messages with more than 512 headers or lines longer than 16k bytes:
------------------------
2010-01-31 21:41:16 1Nbga6-0005ZL-FH DKIM: Error while running this message
through validation, disabling signature verification.
------------------------

This is not a fatal error (like e.g. being unable to write to $spooldir) and
should therefore not end up in paniclog. Also the error message is
unnececessarily unspecific, pdkim already has some detailed errorrs (e.g.
PDKIM_ERR_LONG_LINE).

This was discussed first here
http://mid.gmane.org/200912031200.14973.ke%40helinet.de
and then reported again in <http://bugs.debian.org/567876> I am pushing this to
the bts to make sure it is not lost.


--
Configure bugmail: http://bugs.exim.org/userprefs.cgi?tab=email