7.0 fetchmail configuration problem

[Ferdinand]

in the server log

2012-11-23 00:07:31,455 11903 ERROR None openerp.addons.fetchmail.fetchmail: Failed to fetch mail from imap server chricar.fg.
Traceback (most recent call last):
  File "/home/gass/OpenERP/7.0/server/openerp/addons/fetchmail/fetchmail.py", line 196, in fetch_mail
    context=context)
  File "/home/gass/OpenERP/7.0/server/openerp/addons/mail/mail_thread.py", line 435, in message_process
    context=context)
  File "/home/gass/OpenERP/7.0/server/openerp/addons/mail/mail_thread.py", line 377, in message_route
    "Create an appropriate mail.alias or force the destination model." % message_id
AssertionError: No possible route found for incoming message with Message-Id <email address hidden>. Create an appropriate mail.alias or force the destination model.

probably because I didn't configure anything for
Actions to Perform on Incoming Mails

Explanation needed

[Olivier Dony (Odoo) (odo-openerp)]

The explanation is right there: No possible route found for incoming message with Message-Id <email address hidden>. Create an appropriate mail.alias or force the destination model.

You've tried to import a message through fetchmail without properly configuring it, e.g. without selecting a target model on the fetchmail config. You could also have used the new alias system but that requires setting up a "catchall mail domain", and I doubt that's what you were trying to accomplish.

So you have two options: either you configure fetchmail rules exactly like you were doing in 6.1 (making sure you always force the destination model for each rule, as explained in the error message you got), or you setup a mail catchall domain and you start using aliases. The latter is a complex thing to setup, with most of it done outside OpenERP (requires admin rights on a mail server somewhere + a DNS MX record), so it is meant for advanced integrators. We will describe it in the documentation. When properly configured it will let you manage virtual mailboxes directly within OpenERP.

[Yajo (yajo)]

I'm sorry but I am reopening this bug as a SECURITY FLAW.

When you set up a catchall domain (Olivier's option 2) and somebody in the world just sends an email to a user that does not exist in OpenERP's alias list, the whole fetchmail process dies with the described AssertionError and no more emails are processed.

Spambots do this often, so a single non-filtered spam email would just crash the whole fetching process forever until the admin realizes and deletes that message directly from the mailbox.

Solution: Add a catch-all alias to OpenERP, so unhandled email gets sent there. However this is not possible right now AFAIK.