[Mailman-Users] filename too long error - stopping list

[Michael Rasmussen]

Resolved.  The digest keeps a seperate mbox file at 
{MMDIR}lists/LISTNAME/digest.mbox  removing the email from that location 
was the solution to my immediate problem.

This does expose a DOS attack potential for MM lists.  The too long
attachment name needs to be handled in a more graceful manner.

Michael Rasmussen wrote:
> Update:
> 
> I've found the offending message and purged it from the list archives,
> purged it from the shunt files, and purged it from everywhere I could
> find it. 
> 
> Yet the problem persists.  So I'm looking for the temp file/mail area
> where the file that contains this attachment may be found.
> 
> 
> Michael Rasmussen wrote:
> > I have a list that was sent a file with an attachement with too long a
> > name.  (See error below) now all mail to the list is being shunted.
> > 
> > the filename listed does not exist on my system.  There is no file on my system with that name.  
> > The directory /var/lib/mailman/archives/private/rca-l/attachments/20051207/3d04c3a4 is empty.
> > 
> > What do I need to do to resolve this problem?
> > 
> > ==========  Error message =====================
> > Dec 22 06:08:46 2005 (2233) Uncaught runner exception: [Errno 36] File name too long: '/var/lib/mailman/archives/private/rca-l/attachments/20051207/3d04c3a4/iso-8859-1QThe_surface_of_the_SunA0_The_sun_has_a_rigid_iron_surfaceiso-8859-1Q_located_under_the_photosphere_that_is_revealed_by_satelliiso-8859-1Qte_imagery.A0_The_solar_surface_sits_beneath_the_suns_viiso-8859-1Qsible_photosphere_and_is_electrically_active..obj'
> > Dec 22 06:08:46 2005 (2233) Traceback (most recent call last):
> >   File "/usr/lib/mailman/Mailman/Queue/Runner.py", line 111, in _oneloop
> >     self._onefile(msg, msgdata)
> >   File "/usr/lib/mailman/Mailman/Queue/Runner.py", line 167, in _onefile
> >     keepqueued = self._dispose(mlist, msg, msgdata)
> >   File "/usr/lib/mailman/Mailman/Queue/IncomingRunner.py", line 130, in _dispose
> >     more = self._dopipeline(mlist, msg, msgdata, pipeline)
> >   File "/usr/lib/mailman/Mailman/Queue/IncomingRunner.py", line 153, in _dopipeline
> >     sys.modules[modname].process(mlist, msg, msgdata)
> >   File "/var/lib/mailman/Mailman/Handlers/ToDigest.py", line 91, in process
> >     send_digests(mlist, mboxfp)
> >   File "/var/lib/mailman/Mailman/Handlers/ToDigest.py", line 132, in send_digests
> >     send_i18n_digests(mlist, mboxfp)
> >   File "/var/lib/mailman/Mailman/Handlers/ToDigest.py", line 306, in send_i18n_digests
> >     msg = scrubber(mlist, msg)
> >   File "/var/lib/mailman/Mailman/Handlers/Scrubber.py", line 265, in process
> >     url = save_attachment(mlist, part, dir)
> >   File "/var/lib/mailman/Mailman/Handlers/Scrubber.py", line 447, in save_attachment
> >     fp = open(path, 'w')
> > IOError: [Errno 36] File name too long: '/var/lib/mailman/archives/private/rca-l/attachments/20051207/3d04c3a4/iso-8859-1QThe_surface_of_the_SunA0_The_sun_has_a_rigid_iron_surfaceiso-8859-1Q_located_under_the_photosphere_that_is_revealed_by_satelliiso-8859-1Qte_imagery.A0_The_solar_surface_sits_beneath_the_suns_viiso-8859-1Qsible_photosphere_and_is_electrically_active..obj'
> > 
> > Dec 22 06:08:46 2005 (2233) SHUNTING: 1135258825.4376719+99568bcc1187c910d48aae8b9ae8f68ed3aa643b
> > 
> > ==========  Error message =====================
> > -- 
> >     Michael Rasmussen, Portland Oregon  
> >   Be appropriate && Follow your curiosity
> >         http://www.patch.com/words/
> >   The fortune cookie says:
> > Horse sense is the thing a horse has which keeps it from betting on people.
> > 		-- W. C. Fields
> > 
> > ------------------------------------------------------
> > Mailman-Users mailing list
> > Mailman-Users at python.org
> > http://mail.python.org/mailman/listinfo/mailman-users
> > Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
> > Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
> > Unsubscribe: http://mail.python.org/mailman/options/mailman-users/mikeraz%40patch.com
> > 
> > Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp
> 
> -- 
>     Michael Rasmussen, Portland Oregon  
>   Be appropriate && Follow your curiosity
>         http://www.patch.com/words/
>   The fortune cookie says:
> I may not be able to walk, but I drive from a sitting position.
> 
> ------------------------------------------------------
> Mailman-Users mailing list
> Mailman-Users at python.org
> http://mail.python.org/mailman/listinfo/mailman-users
> Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
> Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
> Unsubscribe: http://mail.python.org/mailman/options/mailman-users/mikeraz%40patch.com
> 
> Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp

-- 
    Michael Rasmussen, Portland Oregon  
  Be appropriate && Follow your curiosity
        http://www.patch.com/words/
  The fortune cookie says:
Don't compare floating point numbers solely for equality.