Re: [otrs] 3.0.4 -- corruption of attachments?

13 Jan 2011

      ...
...
* Marc Strapetz :
...
...
...
When forwarding an email with with one ZIP attachment (16307 bytes,
exported from Thunderbird), OTRS creates an email with two attachments
of the same name, (9997 bytes and 4443 bytes). Is this a known problem?
Do you have logs for that?
Doesn't look suspicious. Note besides the "xxx" we are also replacing
authentication information by "Received: from [127.0.0.1] ..."
...
Can the contents still be unpacked?
Or is the ZIP file broken?
The ZIP(s) are both broken and hence Google rejects (see log below).

Jan 13 15:31:34 h1315949 postfix/smtpd[20181]: connect from
xxxxxxx[xxx.xxx.xxx.xxx]
Jan 13 15:31:34 h1315949 postfix/smtpd[20181]: setting up TLS connection
from xxxxxxx[xxx.xxx.xxx.xxx]
Jan 13 15:31:34 h1315949 postfix/smtpd[20181]: Anonymous TLS connection
established from xxxxxxx[xxx.xxx.xxx.xxx]: TLSv1 with cipher
DHE-RSA-AES256-SHA (256/256 bits)
Jan 13 15:31:34 h1315949 postfix/smtpd[20181]: A7085174006:
client=xxxxxxx[xxx.xxx.xxx.xxx], sasl_method=LOGIN, sasl_username=xxx
Jan 13 15:31:35 h1315949 postfix/cleanup[17625]: A7085174006: replace:
header Received: from xxxxxxx (xxxxxxx [xxx.xxx.xxx.xxx])??(using TLSv1
with cipher DHE-RSA-AES256-SHA (256/256 bits))??(No client certificate
requested)??(Authenticated sen from xxxxxxx[xxx.xxx.xxx.xxx];
from= to= proto=ESMTP
helo=<xxxxxxx>: Received: from [127.0.0.1] (localhost [127.0.0.1]) with
ESMTPSA id A7085174006
Jan 13 15:31:35 h1315949 postfix/cleanup[17625]: A7085174006:
message-id=<1294929085.5796.47557948185.6890.2@xxxxxxx>
Jan 13 15:31:35 h1315949 postfix/qmgr[13432]: A7085174006:
from=, size=25835, nrcpt=3 (queue active)
Jan 13 15:31:35 h1315949 postfix/smtpd[20181]: disconnect from
xxxxxxx[xxx.xxx.xxx.xxx]
Jan 13 15:31:35 h1315949 postfix/smtp[20213]: Host offered STARTTLS:
[gmail-smtp-in.l.google.com]
Jan 13 15:31:36 h1315949 postfix/local[18324]: A7085174006:
to=, orig_to=, relay=local, delay=1.7,
delays=0.92/0/0/0.76, dsn=2.0.0, status=sent (delivered to command:
/usr/bin/procmail -t /etc/procmailrc-courier)
Jan 13 15:31:36 h1315949 postfix/local[18323]: A7085174006:
to=, orig_to=, relay=local, delay=2.2,
delays=0.92/0.01/0/1.3, dsn=2.0.0, status=sent (delivered to command:
/usr/bin/procmail -t /etc/procmailrc-courier)
Jan 13 15:31:37 h1315949 postfix/smtp[20213]: A7085174006:
to=, relay=gmail-smtp-in.l.google.com[74.125.43.27]:25,
delay=1.8, delays=0.92/0.09/0.1/0.72, dsn=5.7.0, status=bounced (host
gmail-smtp-in.l.google.com[74.125.43.27] said: 552-5.7.0 Our system
detected an illegal attachment on your message. Please 552-5.7.0 visit
http://mail.google.com/support/bin/answer.py?answer=6590 to 552 5.7.0
review our attachment guidelines. 20si99155faz.66 (in reply to end of
DATA command))
Jan 13 15:31:37 h1315949 postfix/cleanup[19557]: 16310174007:
message-id=<20110113143137.16310174007@syntevo.com>
Jan 13 15:31:37 h1315949 postfix/qmgr[13432]: 16310174007: from=<>,
size=28119, nrcpt=3 (queue active)
Jan 13 15:31:37 h1315949 postfix/bounce[20224]: A7085174006: sender
non-delivery notification: 16310174007
Jan 13 15:31:37 h1315949 postfix/qmgr[13432]: A7085174006: removed
Jan 13 15:31:38 h1315949 postfix/local[19863]: 16310174007:
to=, orig_to=, relay=local,
delay=1.3, delays=0.34/0.01/0/0.96, dsn=2.0.0, status=sent (delivered to
command: /usr/bin/procmail -t /etc/procmailrc-courier)
Jan 13 15:31:38 h1315949 postfix/local[18350]: 16310174007:
to=, orig_to=, relay=local,
delay=1.8, delays=0.34/0/0/1.5, dsn=2.0.0, status=sent (delivered to
command: /usr/bin/procmail -t /etc/procmailrc-courier)
Jan 13 15:31:39 h1315949 postfix/local[20196]: 16310174007:
to=, orig_to=, relay=local,
delay=2.2, delays=0.34/0.01/0/1.9, dsn=2.0.0, status=sent (delivered to
command: /usr/bin/procmail -t /etc/procmailrc-courier)
Jan 13 15:31:39 h1315949 postfix/qmgr[13432]: 16310174007: removed

--
Best regards,
Marc Strapetz
=============
syntevo GmbH
http://www.syntevo.com
http://blog.syntevo.com

On 13.01.2011 20:35, Ralf Hildebrandt wrote:
...
* Marc Strapetz :
...
...
...
When forwarding an email with with one ZIP attachment (16307 bytes,
exported from Thunderbird), OTRS creates an email with two attachments
of the same name, (9997 bytes and 4443 bytes). Is this a known problem?
Do you have logs for that?
What kind of logs do you refer to? In the system log, there is only one
line regarding the forwarded email: "
Mail logs!
...
The ZIP file seems to be split.
Can the contents still be unpacked?
Or is the ZIP file broken?