nagios and sendmail log entries (did not issue MAIL/EXPN/VRFY/ETRN)

[Andreas Ericsson]

Marc Powell wrote:
> 
>>-----Original Message-----
>>From: nagios-users-admin at lists.sourceforge.net [mailto:nagios-users-
>>admin at lists.sourceforge.net] On Behalf Of Andreas Ericsson
>>Sent: Wednesday, August 10, 2005 4:04 PM
>>To: Marcus Sobchak
>>Cc: nagios-users at lists.sourceforge.net
>>Subject: Re: [Nagios-users] nagios and sendmail log entries (did not
> 
> issue
> 
>>MAIL/EXPN/VRFY/ETRN)
>>
>>Marcus Sobchak wrote:
>>
>>>Hi,
>>>
>>>nagios generates the follwing maillog entry each time it checks my
>>
>>sendmail
>>
>>>(8.12.3):
>>>
>>>Aug 10 21:03:28 walter sm-mta[24243]: j7AJ3SoQ024243:
>>>nagios at urps.uni-bielefeld.de [129.70.12.152] did not issue
>>>MAIL/EXPN/VRFY/ETRN during connection to MTA
>>>
> 
> 
> [snip]
> 
> 
>>You could do some magic with check_tcp and adding several SEND
> 
> strings,
> 
>>or you could change your MTA daemon to something that follows the RFC.
> 
> 
> I'm curious. How is it that an e-mail server logging the fact that a
> connecting client didn't issue SMTP transaction commands against RFC?

It's not, strictly speaking, but a complete transaction can be made up 
of HELO and QUIT, while sendmail thinks of it as an exception or breach 
of protocol. It's the think of it that's not RFC compliant.

> Which RFC is this disallowed in or are you generally saying that
> Sendmail isn't RFC compliant?
> 

Considering sendmails history of remote root exploits, local privilege 
escalation problems and other security issues, I've never used it myself 
so I can't really say.

-- 
Andreas Ericsson                   andreas.ericsson at op5.se
OP5 AB                             www.op5.se
Lead Developer


-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null