Koozali.org: home of the SME Server

Contribs.org Forums => Koozali SME Server 10.x => Topic started by: Michail Pappas on December 02, 2021, 07:56:47 AM

Title: Possible issue with DMARC?
Post by: Michail Pappas on December 02, 2021, 07:56:47 AM

I've been watching my qpsmtpd log after the upgrade to v10, just in case I run into any special upgrade issues. Noticed the following dmarc-related error during an email reception:

Code: [Select]

3427 Accepted connection 0/40 from 40.92.70.40 / mail-oln040092070040.outbound.protection.outlook.com
3427 Connection from mail-oln040092070040.outbound.protection.outlook.com [40.92.70.40]
3427 (connect) earlytalker: pass, not spontaneous
3427 (connect) relay: skip, no match
3427 (connect) dnsbl: pass
3427 220 myserver.gr ESMTP
3427 dispatching EHLO EUR03-AM5-obe.outbound.protection.outlook.com
3427 (ehlo) helo: reverse domain match
3427 (ehlo) helo: pass
3427 250-myserver.gr Hi mail-oln040092070040.outbound.protection.outlook.com [40.92.70.40]
3427 250-PIPELINING
3427 250-8BITMIME
3427 250-SIZE 30000000
3427 250-STARTTLS
3427 250 AUTH PLAIN LOGIN
3427 dispatching STARTTLS
3427 220 Go ahead with TLS
3427 (unrecognized_command) tls: TLS setup returning
3427 dispatching EHLO EUR03-AM5-obe.outbound.protection.outlook.com
3427 (ehlo) helo: reverse domain match
3427 (ehlo) helo: pass
3427 250-mydomain.gr Hi mail-oln040092070040.outbound.protection.outlook.com [40.92.70.40]
3427 250-PIPELINING
3427 250-8BITMIME
3427 250-SIZE 30000000
3427 250 AUTH PLAIN LOGIN
3427 dispatching MAIL FROM:<> SIZE=362424
3427 (mail) resolvable_fromhost: pass, null sender
3427 (mail) sender_permitted_from: skip, null sender
3427 (mail) naughty: pass
3427 250 <>, sender OK - how exciting to get mail from you!
3427 dispatching RCPT TO:<somebox@mydomain.gr>
3427 (rcpt) badrcptto: pass
3427 (rcpt) check_goodrcptto: stripping '-' extensions
3427 (rcpt) rcpt_ok: pass: mydomain.gr in rcpthosts
3427 250 <somebox@mydomain.gr>, recipient ok
3427 dispatching DATA
3427 354 go ahead
3427 spooling message to disk
3427 (data_post_headers) dkim: pass, no signature, neutral policy
      new record at /usr/share/perl5/vendor_perl/Mail/DMARC/Report.pm line 77.
DBI error: report_record_spf.domain_id may not be NULL at /usr/share/perl5/vendor_perl/Mail/DMARC/Report/Store/SQL.pm line 684.
3427 (data_post_headers) dmarc: query called by Mail::DMARC::Report::Store::SQL, 546
      INSERT INTO report_record_spf (report_record_id, scope,result) VALUES(??)
      1948, helo, none at /usr/share/perl5/vendor_perl/Mail/DMARC/Report.pm line 77.
3427 (data_post_headers) dmarc: fail, tolerated
3427 (data_post) bogus_bounce: pass, single recipient, empty Return-Path
3427 (data_post) headers: pass
3427 (data_post) naughty: pass
3427 (data_post) spamassassin: error, reject disabled (Ham, 1.1, learn=no)
3427 (data_post) virus::clamdscan: pass, clean
3427 (queue) logging::logterse: ` 40.92.70.40 mail-oln040092070040.outbound.protection.outlook.com    EUR03-AM5-obe.outbound.protection.outlook.com   <>      <somebox@myserver.gr>       queued          <11a50b9a-07f1-43c4-a760-854394690f8b@PAXPR06MB7823.eurprd06.prod.outlook.com>  No, score=1.1 required=6.0 autolearn=no autolearn_force=n
3433 (queue) queue::qmail_2dqueue: (for 3427) Queuing to /var/qmail/bin/qmail-queue
3427 250 Queued! 1638427631 qp 3433 <11a50b9a-07f1-43c4-a760-854394690f8b@PAXPR06MB7823.eurprd06.prod.outlook.com>
3427 dispatching QUIT
3427 Lost connection to client, cannot send response.
3427 click, disconnecting
16806 cleaning up after 3427


Title: Re: Possible issue with DMARC?
Post by: ReetP on December 02, 2021, 11:13:47 AM

So a quick scan round and we can see that we run perl-Mail-DMARC-1.20141206-2.el7.sme.noarch

Latest code is here https://metacpan.org/release/MBRADSHAW/Mail-DMARC-1.20210927/source

Looks like the bit that is the problem is here around Line 546 or just before in SQL.pm

Code: [Select]

sub insert_rr_spf {
....
INSERT INTO report_record_spf (report_record_id, scope,result) VALUES(??)

blah

Looks like the subroutine has been update - I guess it clears up null values (in a perfect world they should not exist I guess)

This is a bug I believe. Put it against qpsmtpd for now and we may have to move it. We'll need to build updated packages - but there will probably be dependency hell in there somewhere.

Title: Re: Possible issue with DMARC?
Post by: Michail Pappas on December 02, 2021, 12:45:12 PM

Opened bug report #11791 (https://bugs.koozali.org/show_bug.cgi?id=11791).

Title: Re: Possible issue with DMARC?
Post by: ReetP on December 02, 2021, 01:56:16 PM

Thanks.

Might be a dupe of these. Please check.

https://bugs.koozali.org/show_bug.cgi?id=9805

https://bugs.koozali.org/show_bug.cgi?id=10103

https://bugs.koozali.org/show_bug.cgi?id=10613

We suspect 10103. Please have a read.