Bug 367009 – Numerous bounce backs to my email address

• Status: RESOLVED FIXED
• Product: Gentoo Infrastructure

[Description Mike Pagano 2011-05-12 17:41:09 UTC]

I am getting numerous reports on bounce backs when people send email to my @gentoo.org address. I also get kicked off of my mailing lists I subscribe too because of bounce backs.

[Comment 1 Jeremy Olexa (darkside) (RETIRED) 2011-05-12 21:22:59 UTC]

Hello, could you provide some sample headers of bounced mails? It is hard to wildly guess what the problem may be. Thanks!

[Comment 2 Mike Pagano 2011-05-13 16:39:14 UTC]

Created attachment 273097 [details]
sample headers of bounced mails

Here you go.

[Comment 3 Mike Pagano 2011-05-16 15:02:06 UTC]

Created attachment 273445 [details]
Boucebacks from mailing lists (e.g. from gentoo-project)

I get these from almost all of the mailing lists I subscribe too. This one is from gentoo-project.

[Comment 4 Mike Pagano 2011-06-05 17:31:58 UTC]

Created attachment 275939 [details]
Another example from gentoo-project

[Comment 5 Robin Johnson 2011-07-14 06:37:19 UTC]

Ok,

I traced it down.

The problem is NOT in postfix or anything on the main server side...
It's in mpagano's procmail. You should NOT be using any procmail return codes that affect the result returned by postfix.

Specifically, all of the 'EXITCODE=67' rules are the problem, and need to be removed from the procmailrc. EXITCODE 75 is the only one that should be used, and only when mail isn't delivered and you would like postfix to try again.

$ grep 67 /usr/include/sysexits.h
#define EX_NOUSER	67	/* addressee unknown */

$ egrep '86E342AC261:.*(to=<mpagano|to=<robbat2|removed|from=<|message-id=|client=)' smtp.log.1 
Jul 14 02:47:31 woodpecker postfix/smtpd[21487]: 86E342AC261: client=localhost[127.0.0.1]
Jul 14 02:47:31 woodpecker postfix/cleanup[21825]: 86E342AC261: message-id=<000d01cc41d0$5c069500$6400a8c0@polynomiala>
Jul 14 02:47:31 woodpecker postfix/qmgr[21447]: 86E342AC261: from=<[e-mail]>, size=2151, nrcpt=10 (queue active)
Jul 14 02:47:31 woodpecker postfix/local[22264]: 86E342AC261: to=<[e-mail]>, relay=local, delay=0.41, delays=0.18/0.02/0/0.21, dsn=2.0.0, status=sent (delivered to maildir)
Jul 14 02:47:32 woodpecker postfix/local[22080]: 86E342AC261: to=<[e-mail]>, orig_to=<[e-mail]>, relay=local, delay=0.74, delays=0.18/0.02/0/0.54, dsn=5.1.1, status=bounced (user unknown)
Jul 14 02:47:32 woodpecker postfix/local[22257]: 86E342AC261: to=<[e-mail]>, orig_to=<[e-mail]>, relay=local, delay=1, delays=0.18/0.02/0/0.85, dsn=2.0.0, status=sent (delivered to maildir)
Jul 14 02:47:32 woodpecker postfix/qmgr[21447]: 86E342AC261: removed

(plus it was sent to many other users).

$ grep 'Jul 14 02:47:32' /home/mpagano/procmail.log -A3 -B2
procmail: Extraneous locallockfile ignored
matched on rule: SPAM flag is YES
        From [e-mail]  Thu Jul 14 02:47:32 2011
 Subject: =?koi8-r?B?8NLPxMHNIDLIINzUwdbOz8Ug2sTBzsnFIM3F1NLPIO3B0tjJzsEg8s/d?=
  Folder: .spam/new/1310611652.22530_1.woodpecker			   2205
procmail: Extraneous locallockfile ignored

[Comment 6 Mike Pagano 2011-07-14 16:51:18 UTC]

Robbat, thanks. I owe you a beer.