Re: [Mailman-Developers] [Mailman-Users] filename too long error - stopping list

Hi Michael,
You can set Scrubber.py not to use the orginal filename in the message by adding followin line in mm_cfg.py (mailman-2.1.6 and above).
SCRUBBER_DONT_USE_ATTACHMENT_FILENAME = True
Developers,
May be we should set this default in Defaults.py.in in the next release of 2.1.7. Thoughts?
Michael Rasmussen wrote:
Resolved. The digest keeps a seperate mbox file at {MMDIR}lists/LISTNAME/digest.mbox removing the email from that location was the solution to my immediate problem.
This does expose a DOS attack potential for MM lists. The too long attachment name needs to be handled in a more graceful manner.
Michael Rasmussen wrote:
Update:
I've found the offending message and purged it from the list archives, purged it from the shunt files, and purged it from everywhere I could find it.
Yet the problem persists. So I'm looking for the temp file/mail area where the file that contains this attachment may be found.
Michael Rasmussen wrote:
I have a list that was sent a file with an attachement with too long a name. (See error below) now all mail to the list is being shunted.
the filename listed does not exist on my system. There is no file on my system with that name.
The directory /var/lib/mailman/archives/private/rca-l/attachments/20051207/3d04c3a4 is empty.What do I need to do to resolve this problem?
========== Error message ===================== Dec 22 06:08:46 2005 (2233) Uncaught runner exception: [Errno 36] File name too long: '/var/lib/mailman/archives/private/rca-l/attachments/20051207/3d04c3a4/iso-8859-1QThe_surface_of_the_SunA0_The_sun_has_a_rigid_iron_surfaceiso-8859-1Q_located_under_the_photosphere_that_is_revealed_by_satelliiso-8859-1Qte_imagery.A0_The_solar_surface_sits_beneath_the_suns_viiso-8859-1Qsible_photosphere_and_is_electrically_active..obj' Dec 22 06:08:46 2005 (2233) Traceback (most recent call last): File "/usr/lib/mailman/Mailman/Queue/Runner.py", line 111, in _oneloop self._onefile(msg, msgdata) File "/usr/lib/mailman/Mailman/Queue/Runner.py", line 167, in _onefile keepqueued = self._dispose(mlist, msg, msgdata) File "/usr/lib/mailman/Mailman/Queue/IncomingRunner.py", line 130, in _dispose more = self._dopipeline(mlist, msg, msgdata, pipeline) File "/usr/lib/mailman/Mailman/Queue/IncomingRunner.py", line 153, in _dopipeline sys.modules[modname].process(mlist, msg, msgdata) File "/var/lib/mailman/Mailman/Handlers/ToDigest.py", line 91, in process send_digests(mlist, mboxfp) File "/var/lib/mailman/Mailman/Handlers/ToDigest.py", line 132, in send_digests send_i18n_digests(mlist, mboxfp) File "/var/lib/mailman/Mailman/Handlers/ToDigest.py", line 306, in send_i18n_digests msg = scrubber(mlist, msg) File "/var/lib/mailman/Mailman/Handlers/Scrubber.py", line 265, in process url = save_attachment(mlist, part, dir) File "/var/lib/mailman/Mailman/Handlers/Scrubber.py", line 447, in save_attachment fp = open(path, 'w') IOError: [Errno 36] File name too long: '/var/lib/mailman/archives/private/rca-l/attachments/20051207/3d04c3a4/iso-8859-1QThe_surface_of_the_SunA0_The_sun_has_a_rigid_iron_surfaceiso-8859-1Q_located_under_the_photosphere_that_is_revealed_by_satelliiso-8859-1Qte_imagery.A0_The_solar_surface_sits_beneath_the_suns_viiso-8859-1Qsible_photosphere_and_is_electrically_active..obj'
Dec 22 06:08:46 2005 (2233) SHUNTING: 1135258825.4376719+99568bcc1187c910d48aae8b9ae8f68ed3aa643b
========== Error message =====================
Michael Rasmussen, Portland Oregon
-- Tokio Kikuchi, tkikuchi@ is.kochi-u.ac.jp http://weather.is.kochi-u.ac.jp/

"Tokio" == Tokio Kikuchi <tkikuchi@is.kochi-u.ac.jp> writes:
Tokio> SCRUBBER_DONT_USE_ATTACHMENT_FILENAME = True
Tokio> May be we should set this default in Defaults.py.in in the
Tokio> next release of 2.1.7. Thoughts?
I think that's a good idea. Very few users have any idea what the file name is (and their programs have less, lots of my colleagues send files with names beginning ESC $ B -- which are the escape codes to switch to Japanese! the programs don't know how to encode them properly) They just click on the link. So I think it's mostly harmless.
We should provide a FAQ for the admins who do want the feature.
For 2.2 we should think about truncating the buffer.
-- School of Systems and Information Engineering http://turnbull.sk.tsukuba.ac.jp University of Tsukuba Tennodai 1-1-1 Tsukuba 305-8573 JAPAN Ask not how you can "do" free software business; ask what your business can "do for" free software.

On Fri, 2005-12-23 at 09:22 +0900, Tokio Kikuchi wrote:
May be we should set this default in Defaults.py.in in the next release of 2.1.7. Thoughts?
It's probably a good idea, but also as Stephen says, it might be a good idea to shorten the filename (keeping the extension) even when this value is left as False.
-Barry
participants (3)
-
Barry Warsaw
-
Stephen J. Turnbull
-
Tokio Kikuchi