[Esd-l] Totally Stumped - Sanitizer on an inbound relay

[Chris Rothbauer]

I have been all over this for a few days now and am completely stumped. I
want to run procmail filters, including sanitizer, on an inbound relay. I've
gone through the howto for installing sanitizer on an inbound relay, both
directly editing the cf file and recreating it with the mc. I've also tried
using the mailertable but this always gives me "too many hops." Here is what
I have tried and the checks I've run.

The results of putting LOCAL_RULE_0 in to the mc....
###################################################################
###  Ruleset 98 -- local part of ruleset zero (can be null)     ###
###################################################################

SParseLocal=98

# addresses sent to foo at host.REDIRECT will give a 551 error code
R$* < @ $+ .REDIRECT. >         $: $1 < @ $2 . REDIRECT . > < ${opMode} >
R$* < @ $+ .REDIRECT. > <i>     $: $1 < @ $2 . REDIRECT. >
R$* < @ $+ .REDIRECT. > < $- >  $#error $@ 5.1.1 $: "551 User has moved;
please try " <$1@$2>


R$*<@domain.com>$*      $#procmail $@/etc/procmail/filt.rc
$:$1<@domain.com.procmail.>$2
R$*<@domain.com.>$*     $#procmail $@/etc/procmail/filt.rc
$:$1<@domain.com.procmail.>$2
R$*<@$*.procmail.>$*            $1<@$2.>$3

(yes, those are TABs)

I've also moved the 3 lines up to just above the "short circuit local
delivery" stanza with the same results.

I have the CPprocmail entry and here are the Mprocmail and Mlocal
definitions.
Mprocmail,      P=/usr/bin/procmail, F=DFMmShun, S=11/31, R=21/31,
                T=DNS/RFC822/X-Unix,
                A=procmail -m $h $g $u

Mlocal,         P=/usr/bin/procmail, F=lsDFMAw5:/|@qSPfhn9,
S=EnvFromL/HdrFromL, R=EnvToL/HdrToL,
                T=DNS/RFC822/X-Unix,
                A=procmail -t -Y -a $h -d $u

Output of sendmail -bt checks......

[root at myserver root]# /usr/lib/sendmail -bt
ADDRESS TEST MODE (ruleset 3 NOT automatically invoked)
Enter <ruleset> <address>
> 3,0 bob at domain.com
canonify           input: bob @ domain . com
Canonify2          input: bob < @ domain . com >
Canonify2        returns: bob < @ domain . com . >
canonify         returns: bob < @ domain . com . >
parse              input: bob < @ domain . com . >
Parse0             input: bob < @ domain . com . >
Parse0           returns: bob < @ domain . com . >
ParseLocal         input: bob < @ domain . com . >
ParseLocal       returns: $# procmail $@ / etc / procmail / filt . rc $: bob
< @ domain . com . procmail . >
parse            returns: $# procmail $@ / etc / procmail / filt . rc $: bob
< @ domain . com . procmail . >
> 3,0 bob at domain.com.procmail
canonify           input: bob @ domain . com . procmail
Canonify2          input: bob < @ domain . com . procmail >
Canonify2        returns: bob < @ domain . com . procmail . >
canonify         returns: bob < @ domain . com . procmail . >
parse              input: bob < @ domain . com . procmail . >
Parse0             input: bob < @ domain . com . procmail . >
Parse0           returns: bob < @ domain . com . procmail . >
ParseLocal         input: bob < @ domain . com . procmail . >
ParseLocal       returns: bob < @ domain . com . >
Parse1             input: bob < @ domain . com . >
Mailertable        input: < domain . com > bob < @ domain . com . >
Mailertable        input: domain . < com > bob < @ domain . com . >
Mailertable      returns: bob < @ domain . com . >
Mailertable      returns: bob < @ domain . com . >
MailerToTriple     input: < > bob < @ domain . com . >
MailerToTriple   returns: bob < @ domain . com . >
Parse1           returns: $# esmtp $@ domain . com . $: bob < @ domain . com
. >
parse            returns: $# esmtp $@ domain . com . $: bob < @ domain . com
. >

The last line of filt.rc is ......
# send the mail on to the next relay
:0
! -oi -f "$@"

Using this config, I have yet to see an inbound message actually pass
through the sanitizer. I never get the extra "hop" from root at localhost and
of course stripped files make it through.

I'm running sendmail 8.12.5 on RedHat 8.

HHHHEEEEEEELLLLLLP!

Thanks much!

C