[news.sysadmin] Caught in a virtual pinball machine

kls@ditka.UUCP (Karl Swartz) (09/01/89)

Over the past month or so a handful of messages have ended up
in the uucp mailbox here on ditka, for reasons which have been
quite elusive to me.  Attached are the latest two examples.
All seem to have bounced several times before finally finding
a home here, such that it is.  All seem to have bounced off of
rt1 early along the way, for reasons which also elude me.  All
have involved sundc.East.Sun.COM early in the process, and most
have also involved csed-60 or another csed-# machine.

In the following examples, the first or second bounce was at
rt1, with a failed uux.  This is rather puzzling since rt1 (an
IBM RT running AIX 2.2.1) has a sendmail.cf configured to know
who it can uux to, and knows to pass anything else to ditka
for routing.  When I tried the failed addresses in sendmail's
test mode it knew to pass them on to ditka and not to try uux
as it did for the messages in question.

Regardless of this, I see no reason why either of the messages
should have passed thru ditka or rt1 at all, in particular the
second message which appears to have been failed mail to a
local user.  Maybe a mailing list gone wild?  I have no idea.

If anybody can shed any light on this I'd really appreciate it.

	***********************
	***  failed mail #1 ***
	***********************

From uucp Thu Aug 31 22:39 MDT 1989
>From lll-winken!riacs!rutgers!sfgl.sfgl.fr!Mailer-Daemon  Thu Aug 31 22:39:08 1989 remote from pacbell
Received: by ditka.UUCP (smail2.5)
	id AA24593; 31 Aug 89 22:39:08 MDT (Thu)
Received: by lll-winken.llnl.gov (smail2.5)
	id AA12305; 31 Aug 89 14:03:02 PDT (Thu)
Received: from rutgers.UUCP by icarus.riacs.edu (5.59/2.1G)
	   id AA08269; Tue, 29 Aug 89 19:21:00 PDT
Received: from ogccse.UUCP by rutgers.edu (5.59/SMI4.0/RU1.2/3.04) with UUCP 
	id AA27445; Sun, 27 Aug 89 01:25:35 EDT
Received: by cse.ogc.edu (5.61+OGC_1.5 (named)/OGC_6.1)
		id AA07948 ; Sat, 26 Aug 89 21:41:39 -0700
Received: by verdix.verdix.com (5.51/nomad-master-cf/v0.3/08-12-88)
	id AA27446; Sat, 26 Aug 89 21:24:26 PDT
Received: from snail.Sun.COM by sun.Sun.COM (4.1/SMI-4.0)
	id AA06960; Sat, 26 Aug 89 16:52:17 PDT
Received: from East.Sun.COM by snail.Sun.COM (4.1/SMI-4.1)
	id AA24709; Sat, 26 Aug 89 16:50:32 PDT
Received: by East.Sun.COM (4.1/SMI-4.1)
	id AB23389; Sat, 26 Aug 89 19:48:19 EST
Date: Sat, 26 Aug 89 19:48:19 EST
From: riacs!rutgers!sfgl.sfgl.fr!Mailer-Daemon (Mail Delivery Subsystem)
Subject: Returned mail: Service unavailable
Message-Id: <8908270048.AB23389@East.Sun.COM>
To: <riacs!lll-winken!pacbell!ditka!uucp>
Status: RO

   ----- Transcript of session follows -----
Connected to snail-swanbb:
>>> RCPT To:<ditka@QUCDN.QueensU.CA:dalamb>
<<< 554 <ditka@QUCDN.QueensU.CA:dalamb>... Unknown domain : QueensU . CA : dalamb
554 <ditka@QUCDN.QueensU.CA:dalamb>... Service unavailable

   ----- Unsent message follows -----
Received: from sundc.East.Sun.COM by East.Sun.COM (4.1/SMI-4.1)
	id AA23387; Sat, 26 Aug 89 19:48:19 EST
Received: from East.Sun.COM by sundc.East.Sun.COM (4.1/SMI-4.1)
	id AA04617; Sat, 26 Aug 89 19:52:51 EDT
Received: from snail.Sun.COM (snail-swanbb.West.Sun.COM) by East.Sun.COM (4.1/SMI-4.1)
	id AA23384; Sat, 26 Aug 89 19:48:12 EST
Received: from sun.Sun.COM (sun-bb) by snail.Sun.COM (4.1/SMI-4.1)
	id AA24699; Sat, 26 Aug 89 16:50:12 PDT
Received: from verdix.UUCP by sun.Sun.COM (4.1/SMI-4.0)
	id AA06933; Sat, 26 Aug 89 16:51:52 PDT
Received: by verdix.verdix.com (5.51/nomad-master-cf/v0.3/08-12-88)
	id AA12093; Fri, 25 Aug 89 06:47:40 PDT
Return-Path: <dgis!uunet!cs.utexas.edu!ames.arc.nasa.gov!pacbell!ditka!rt1!ditka!uucp@verdix.com>
Received: by vrdxhq.verdix.com (4.12/01-Aug-89) 
	id AA14926; Fri, 25 Aug 89 09:46:20 edt
Received: from uunet.UUCP by dgis.daitc.mil (5.61++/21-Aug-89) with UUCP
	id AA08752; Thu, 24 Aug 89 13:29:23 -0400
Received: from cs.utexas.edu by uunet.uu.net (5.61/1.14) with UUCP 
	id AA21808; Thu, 24 Aug 89 13:24:59 -0400
Posted-Date: 24 Aug 89 02:02:07 MDT (Thu)
Received: from ames.arc.nasa.gov by cs.utexas.edu (5.59/1.39)
	id AA23579; Thu, 24 Aug 89 11:12:27 CDT
Received: by ames.arc.nasa.gov (5.61/1.2); Thu, 24 Aug 89 02:35:25 -0700
Received: by ditka.UUCP (smail2.5)
	id AA20176; 24 Aug 89 02:05:12 MDT (Thu)
Received: by rt1.lanl.gov (AIX  2.1 2/4.03/ks 06/22/89)
          id AA00163; Thu, 24 Aug 89 01:57:32 MDT
Received: by ditka.UUCP (smail2.5)
	id AA20116; 24 Aug 89 02:02:30 MDT (Thu)
Date: 24 Aug 89 02:02:07 MDT (Thu)
From: dgis!uunet!cs.utexas.edu!ames.arc.nasa.gov!rt1!ditka.UUCP!MAILER-DAEMON@verdix.com
Subject: failed mail
To: ditka!pacbell!csed-1!sundc.East.Sun.COM!sundc!QUCDN.QueensU.CA:dalamb!ditka@cs.utexas.edu
Message-Id: <8908240202.AA20116@ditka.UUCP>

=======     command failed      =======

 COMMAND: /usr/bin/uux -art1!ditka!pacbell!csed-1!sundc.East.Sun.COM!sundc!QUCDN.QueensU.CA:dalamb!ditka -r - oids-8!rmail '(wheeler)'

======= standard error follows  =======
bad system name: oids-8
uux failed ( 11 )
======= text of message follows =======
>From rt1!ditka!pacbell!csed-1!sundc.East.Sun.COM!sundc!QUCDN.QueensU.CA:dalamb!ditka
Received: by rt1.lanl.gov (AIX  2.1 2/4.03/ks 06/22/89)
          id AA00093; Thu, 24 Aug 89 01:49:43 MDT
Received: by ditka.UUCP (smail2.5)
	id AA19869; 24 Aug 89 01:50:41 MDT (Thu)
Received: from snail.Sun.COM by sun.Sun.COM (4.1/SMI-4.0)
	id AA00268; Tue, 22 Aug 89 22:43:34 PDT
Received: from East.Sun.COM by snail.Sun.COM (4.1/SMI-4.1)
	id AA14114; Mon, 21 Aug 89 15:34:53 PDT
Received: from sundc.East.Sun.COM by East.Sun.COM (4.1/SMI-4.1)
	id AA04792; Mon, 21 Aug 89 18:32:56 EST
Received: from csed-1.UUCP by sundc.East.Sun.COM (4.1/SMI-4.1)
	id AA13931; Mon, 21 Aug 89 18:37:23 EDT
Received: from East.Sun.COM by sundc.East.Sun.COM (4.1/SMI-4.1)
	id AA11659; Mon, 21 Aug 89 17:27:34 EDT
Received: from Central.Sun.COM (texsun-bb.Central.Sun.COM) by East.Sun.COM (4.1/SMI-4.1)
	id AA01507; Mon, 21 Aug 89 17:23:00 EST
Received: from swrinde.UUCP by Central.Sun.COM (4.1/SMI-4.1)
	id AA05987; Mon, 21 Aug 89 16:26:21 CDT
Received: from QUCDN.QueensU.CA by swrinde.nde.swri.edu (5.61/1.34)
	id AA03295; Mon, 21 Aug 89 16:17:23 -0500
Received: from qusuntrc.qucis.queensu.ca by QUCDN.QueensU.CA (IBM VM SMTP R1.2.1) with TCP; Mon, 21 Aug 89 17:17:45 EDT
Received: by qusuntrc.qucis.queensu.ca (3.2/SMI-3.2)
	id AA12846; Mon, 21 Aug 89 17:20:13 EDT
Date: Mon, 21 Aug 89 17:20:13 EDT
From: rt1!sundc!Central!swrinde!qucis.queensu.ca!dalamb@sundc.East.Sun.COM
Message-Id: <8908212120.AA12846@qusuntrc.qucis.queensu.ca>
To: sun!sundc.East.Sun.COM!Central!sundc.East.Sun.COM!csed-1!oids-8!wheeler
Subject: (deleted)


	***********************
	***  failed mail #2 ***
	***********************

From uucp Thu Aug 31 22:39 MDT 1989
>From lll-winken!riacs!rutgers!sundc.east.sun.com!Mailer-Daemon  Thu Aug 31 22:39:13 1989 remote from pacbell
Received: by ditka.UUCP (smail2.5)
	id AA24597; 31 Aug 89 22:39:13 MDT (Thu)
Received: by lll-winken.llnl.gov (smail2.5)
	id AA12319; 31 Aug 89 14:03:19 PDT (Thu)
Received: from rutgers.UUCP by icarus.riacs.edu (5.59/2.1G)
	   id AA08278; Tue, 29 Aug 89 19:21:05 PDT
Received: from ogccse.UUCP by rutgers.edu (5.59/SMI4.0/RU1.2/3.04) with UUCP 
	id AA27450; Sun, 27 Aug 89 01:25:34 EDT
Received: by cse.ogc.edu (5.61+OGC_1.5 (named)/OGC_6.1)
		id AA07955 ; Sat, 26 Aug 89 21:41:40 -0700
Received: by verdix.verdix.com (5.51/nomad-master-cf/v0.3/08-12-88)
	id AA27456; Sat, 26 Aug 89 21:24:45 PDT
Received: from snail.Sun.COM by sun.Sun.COM (4.1/SMI-4.0)
	id AA06981; Sat, 26 Aug 89 16:52:31 PDT
Received: from East.Sun.COM by snail.Sun.COM (4.1/SMI-4.1)
	id AA24716; Sat, 26 Aug 89 16:50:45 PDT
Received: from sundc.East.Sun.COM by East.Sun.COM (4.1/SMI-4.1)
	id AA23399; Sat, 26 Aug 89 19:48:36 EST
Received: by sundc.East.Sun.COM (4.1/SMI-4.1)
	id AB04629; Sat, 26 Aug 89 19:53:05 EDT
Date: Sat, 26 Aug 89 19:53:05 EDT
From: riacs!rutgers!sundc.east.sun.com!Mailer-Daemon (Mail Delivery Subsystem)
Subject: Returned mail: Host unknown
Message-Id: <8908262353.AB04629@sundc.East.Sun.COM>
To: <riacs!lll-winken!pacbell!ditka!uucp>
Status: RO

   ----- Transcript of session follows -----
bad system name: csed-60
uux failed. code 68
550 <csed-60!Mailer-Daemon@sundc>... Host unknown

   ----- Unsent message follows -----
Received: from East.Sun.COM by sundc.East.Sun.COM (4.1/SMI-4.1)
	id AA04627; Sat, 26 Aug 89 19:53:05 EDT
Received: from snail.Sun.COM (snail-swanbb.West.Sun.COM) by East.Sun.COM (4.1/SMI-4.1)
	id AA23390; Sat, 26 Aug 89 19:48:24 EST
Received: from sun.Sun.COM (sun-bb) by snail.Sun.COM (4.1/SMI-4.1)
	id AA24705; Sat, 26 Aug 89 16:50:25 PDT
Received: from verdix.UUCP by sun.Sun.COM (4.1/SMI-4.0)
	id AA06948; Sat, 26 Aug 89 16:52:06 PDT
Received: by verdix.verdix.com (5.51/nomad-master-cf/v0.3/08-12-88)
	id AA12957; Fri, 25 Aug 89 08:44:53 PDT
Return-Path: <dgis!uunet!cs.utexas.edu!ames.arc.nasa.gov!pacbell!ditka!rt1!ditka!uucp@verdix.com>
Received: by vrdxhq.verdix.com (4.12/01-Aug-89) 
	id AA17199; Fri, 25 Aug 89 11:43:31 edt
Received: from uunet.UUCP by dgis.daitc.mil (5.61++/21-Aug-89) with UUCP
	id AA08751; Thu, 24 Aug 89 13:29:14 -0400
Received: from cs.utexas.edu by uunet.uu.net (5.61/1.14) with UUCP 
	id AA21794; Thu, 24 Aug 89 13:24:53 -0400
Posted-Date: 24 Aug 89 01:57:18 MDT (Thu)
Received: from ames.arc.nasa.gov by cs.utexas.edu (5.59/1.39)
	id AA23436; Thu, 24 Aug 89 11:12:17 CDT
Received: by ames.arc.nasa.gov (5.61/1.2); Thu, 24 Aug 89 02:34:24 -0700
Received: by ditka.UUCP (smail2.5)
	id AA20141; 24 Aug 89 02:03:40 MDT (Thu)
Received: by rt1.lanl.gov (AIX  2.1 2/4.03/ks 06/22/89)
          id AA00116; Thu, 24 Aug 89 02:52:47 EDT
Received: by ditka.UUCP (smail2.5)
	id AA19972; 24 Aug 89 01:57:35 MDT (Thu)
Date: 24 Aug 89 01:57:18 MDT (Thu)
From: dgis!uunet!cs.utexas.edu!ames.arc.nasa.gov!rt1!ditka.UUCP!MAILER-DAEMON@verdix.com
Subject: failed mail
To: ditka!pacbell!csed-1!sundc.East.Sun.COM!csed-60!Mailer-Daemon@cs.utexas.edu
Message-Id: <8908240157.AA19972@ditka.UUCP>

=======     command failed      =======

 COMMAND: /usr/bin/uux -art1!ditka!pacbell!csed-1!sundc.East.Sun.COM!csed-60!Mailer-Daemon -r - csed-1stoltz!rmail '(mohar)'

======= standard error follows  =======
bad system name: csed-1stoltz
uux failed ( 11 )
======= text of message follows =======
>From rt1!ditka!pacbell!csed-1!sundc.East.Sun.COM!csed-60!Mailer-Daemon
Received: by rt1.lanl.gov (AIX  2.1 2/4.03/ks 06/22/89)
          id AA00055; Thu, 24 Aug 89 01:44:08 MDT
Received: by ditka.UUCP (smail2.5)
	id AA19798; 24 Aug 89 01:48:37 MDT (Thu)
Received: from snail.Sun.COM by sun.Sun.COM (4.1/SMI-4.0)
	id AA28029; Mon, 21 Aug 89 14:39:34 PDT
Received: from East.Sun.COM by snail.Sun.COM (4.1/SMI-4.1)
	id AA11542; Mon, 21 Aug 89 14:36:10 PDT
Received: from sundc.East.Sun.COM by East.Sun.COM (4.1/SMI-4.1)
	id AA02055; Mon, 21 Aug 89 17:33:20 EST
Received: from csed-1.UUCP by sundc.East.Sun.COM (4.1/SMI-4.1)
	id AA12004; Mon, 21 Aug 89 17:37:47 EDT
Received: from csed-60. by csed-1 (3.2/SMI-3.2)
	id AA28063; Mon, 21 Aug 89 17:15:03 EDT
Received: by csed-60. (4.0/SMI-4.0)
	id AA00183; Mon, 21 Aug 89 17:13:06 EDT
Date: Mon, 21 Aug 89 17:13:06 EDT
From: rt1!csed-1!csed-60!Mailer-Daemon@sundc.East.Sun.COM (Mail Delivery Subsystem)
Subject: Returned mail: User unknown
Message-Id: <8908212113.AA00183@csed-60.>
To: sun!sundc.Sun.COM!Postmaster

   ----- Transcript of session follows -----
550 akin-60... User unknown
421 csed-33: Host csed-33 is down, will keep trying for 3 days

  ----- Message header follows -----
Return-Path: <akin>
Received: by csed-60. (4.0/SMI-4.0)
	id AA00181; Mon, 21 Aug 89 17:13:06 EDT
Date: Mon, 21 Aug 89 17:13:06 EDT
From: akin (Bill Akin)
Message-Id: <8908212113.AA00181@csed-60.>
To: akin
Subject: Testing
Cc: akin-60


-- 
Karl Swartz		|UUCP		uunet!lll-winken!ames!hc!rt1!ditka!kls
1-505/667-7777 (work)	|Internet	kls@rt1.lanl.gov
1-505/672-3113 (home)	|BIX		kswartz
"I never let my schooling get in the way of my education."  (Twain)

kls@ditka.UUCP (Karl Swartz) (09/03/89)

In article <3897@ditka.UUCP> I write:
>Over the past month or so a handful of messages have ended up
>in the uucp mailbox here on ditka ...

>All seem to have bounced several times before finally finding
>a home here, such that it is.  All seem to have bounced off of
>rt1 early along the way, for reasons which also elude me.  All
>have involved sundc.East.Sun.COM early in the process ...

I spent several hours yesterday and today going over all the
logs I could find.  The first such message came thru ditka at
10:22 pm on August 8th:

    From: pacbell!csed-1!sundc.East.Sun.COM!sundc!
	Sun.COM!claris!ames!postmaster    (wrapped for clarity)
    To: rt1!hc!cs!rock

The rt1!hc link disappeared about that time; rt1 *should* have
stripped the hc, found the cs (which it doesn't know), and sent
it to ditka for routing.  (I know, re-routing is bad, but quite
a lot of traffic went via rt1!hc and the link was rather abruptly
dropped, certainly before the maps were updated.)

Instead, a few minutes later I see the following going thru ditka:

    From: rt1!ditka!pacbell!csed-1!sundc.East.Sun.COM!
        sundc!Sun.COM!claris!ames!postditka    (wrapped for clarity)
    To: rt1!hc!cs!rock

Note that the "From:" username has been changed.  Apparently one
of the many bugs that IBM introduced in sendmail for AIX 2.2.1 is
a buffer size of only 70 characters for the "From:" address at
some point ("ditka!pacbell ... ames!post" is exactly 70 characters
long; other trashed messages confirm this).

I've been sorely tempted to trash the IBM sendmail in favor of an
unmolested 5.61 version; maybe this is the excuse I've been waiting
for.  Of course there are probably many other hacks that will keep
5.61 from working on AIX without a great deal of painful work.

>I see no reason why either of the messages
>should have passed thru ditka or rt1 at all

This part part still remains a mystery.  I can't find any other
hc's in the maps, and none of the sites involved would have been
routed via the real hc.  If it helps, here is a 'uniq -c' on all
the rmails directed thru rt1 and hc that seemed to lead to trouble:

   1     rmail rt1!hc!4!30
   1     rmail rt1!hc!ajpo!greeneh
   6     rmail rt1!hc!ajpo.sei.cmu!ploedereder
   4     rmail rt1!hc!cs!rock
  17     rmail rt1!hc!csed-1stoltz!mohar
   1     rmail rt1!hc!csed-37!mohar
   1     rmail rt1!hc!fatvax!ebailey
   4     rmail rt1!hc!ida!rwex
   5     rmail rt1!hc!ncs.dnd.ca!smichell
   1     rmail rt1!hc!oids-8!wheeler
   1     rmail rt1!hc!philabs.philips.labs!caj
   1     rmail rt1!hc!philabs.philips.labs!dpb
   1     rmail rt1!hc!philabs.philips.labs!ewk
   1     rmail rt1!hc!philabs.philips.labs!mat
   1     rmail rt1!hc!philabs.philips.labs!mmr
   2     rmail rt1!hc!umass!gsg
   1     rmail rt1!hc!ut.edu.ray!issi

All of these passed thru sundc early in the process, for whatever
that might be worth.

-- 
Karl Swartz		|UUCP		ames!lll-winken!pacbell!ditka!kls
1-505/667-7777 (work)	|Internet	kls@rt1.lanl.gov
1-505/672-3113 (home)	|BIX		kswartz
"I never let my schooling get in the way of my education."  (Twain)

clarke@acheron.uucp (Ed Clarke/10240000) (09/04/89)

From article <3940@ditka.UUCP>, by kls@ditka.UUCP (Karl Swartz):
> 
> I've been sorely tempted to trash the IBM sendmail in favor of an
> unmolested 5.61 version; maybe this is the excuse I've been waiting
> for.  Of course there are probably many other hacks that will keep
> 5.61 from working on AIX without a great deal of painful work.
> 

I picked up the sources from Berkeley.  Once you figure out the correct
configuration options it works without any changes.  I had to pick up
bind 4.8 at the same time to get some missing resolver subroutines ( I
think that they're normally in libc.a on a bsd system ).  I have not
tried the IDA modifications.
-- 
Ed Clarke
acheron!clarke