Package: courier-mta
Version: 0.76.3-5
Severity: important
Dear Maintainer,
*** Reporter, please consider answering these questions, where appropriate ***
* What led up to the situation?
* What exactly did you do (or not do) that was effective (or
ineffective)?
* What was the outcome of this action?
* What outcome did you expect instead?
*** End of the template - remove these template lines ***
The removal of the courier-specific "courier-maildrop"
program, and the decision to switch courier-mta to use the
standard version of "maildrop", has broken the "maildropfilter"
feature which is used to provide spam filtering during SMTP.
The version of maildrop included with (and previously built
and packaged with) courier-mta, includes some special functionality
required to operate in "embedded" mode. In particular, courier
passes the destination user's UID and GID to maildrop via the
special option "-D uidvalue/gidvalue", and this is used to
provide proper access restrictions when maildrop is reading
the filter files during the SMTP session.
The standard version of maildrop does not recognize or support
this option. This causes SMTP sessions to fail, if maildrop-
based filtering is specified in the courier configuration: it
results in a "511" error with a complaint from maildrop. The
mail bounces.
There is no way to override the inclusion of the "-D uid/gid"
option when the maildrop filter is invoked - it's hardcoded into
that section of courier-mta.
>From looking briefly at the maildrop code included with courier-mta
I can see that there's a fair amount of code there which is needed
for embedded-mode operation and which is probably "compiled out" of
the standard version of maildrop.
So, Debian Stretch users of courier-mta have an unfortunate
choice to make - either give up SMTP-time spam filtering
(which is _really_ important these days), hand-build a new
courier-specific version of maildrop from the Debian sources,
or revert back to an older courier-mta package.
I can understand why you'd want to simplify the courier-mta
package by not building its custom version of maildrop, but
I'm afraid that by doing so you've broken a significant aspect
of Courier's functionality.
-- System Information:
Debian Release: 9.0
APT prefers stable
APT policy: (990, 'stable'), (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8),
LANGUAGE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
Versions of packages courier-mta depends on:
ii courier-authlib 0.66.4-9
ii courier-base 0.76.3-5
ii debconf [debconf-2.0] 1.5.61
ii init-system-helpers 1.48
ii libc6 2.24-11+deb9u1
ii libcourier-unicode1 1.4-3+b1
ii libgcc1 1:6.3.0-18
ii libgdbm3 1.8.3-14
ii libidn11 1.33-1
ii libnet-cidr-perl 0.18-1
ii libperl5.24 5.24.1-3
ii libstdc++6 6.3.0-18
ii sysvinit-utils 2.88dsf-59.9
courier-mta recommends no packages.
Versions of packages courier-mta suggests:
pn courier-doc <none>
pn courier-filter-perl <none>
pn couriergrey <none>
ii emacs24-nox [mail-reader] 24.5+1-11
ii mailutils [mail-reader] 1:3.1.1-1
ii mutt [mail-reader] 1.7.2-1
ii s-nail [mail-reader] 14.8.16-1
-- Configuration Files:
/etc/courier/aliases/system [Errno 13] Permission denied:
'/etc/courier/aliases/system'
/etc/courier/esmtpauthclient [Errno 13] Permission denied:
'/etc/courier/esmtpauthclient'
/etc/courier/module.esmtp changed [not included]
/etc/courier/smtpaccess/default changed [not included]
-- debconf information:
courier-mta/dsnfrom: mailer-dae...@coop.radagast.org
courier-mta/defaultdomain: radagast.org
