7.0 fetchmail configuration problem

Bug #1082210 reported by Ferdinand
This bug affects 10 people
Affects Status Importance Assigned to Milestone

Bug Description

in the server log

2012-11-23 00:07:31,455 11903 ERROR None openerp.addons.fetchmail.fetchmail: Failed to fetch mail from imap server chricar.fg.
Traceback (most recent call last):
  File "/home/gass/OpenERP/7.0/server/openerp/addons/fetchmail/fetchmail.py", line 196, in fetch_mail
  File "/home/gass/OpenERP/7.0/server/openerp/addons/mail/mail_thread.py", line 435, in message_process
  File "/home/gass/OpenERP/7.0/server/openerp/addons/mail/mail_thread.py", line 377, in message_route
    "Create an appropriate mail.alias or force the destination model." % message_id
AssertionError: No possible route found for incoming message with Message-Id <email address hidden>. Create an appropriate mail.alias or force the destination model.

probably because I didn't configure anything for
Actions to Perform on Incoming Mails

Explanation needed

Revision history for this message
Olivier Dony (Odoo) (odo-openerp) wrote :

The explanation is right there: No possible route found for incoming message with Message-Id <email address hidden>. Create an appropriate mail.alias or force the destination model.

You've tried to import a message through fetchmail without properly configuring it, e.g. without selecting a target model on the fetchmail config. You could also have used the new alias system but that requires setting up a "catchall mail domain", and I doubt that's what you were trying to accomplish.

So you have two options: either you configure fetchmail rules exactly like you were doing in 6.1 (making sure you always force the destination model for each rule, as explained in the error message you got), or you setup a mail catchall domain and you start using aliases. The latter is a complex thing to setup, with most of it done outside OpenERP (requires admin rights on a mail server somewhere + a DNS MX record), so it is meant for advanced integrators. We will describe it in the documentation. When properly configured it will let you manage virtual mailboxes directly within OpenERP.

Changed in openobject-addons:
status: New → Invalid
Revision history for this message
Yajo (yajo) wrote :

I'm sorry but I am reopening this bug as a SECURITY FLAW.

When you set up a catchall domain (Olivier's option 2) and somebody in the world just sends an email to a user that does not exist in OpenERP's alias list, the whole fetchmail process dies with the described AssertionError and no more emails are processed.

Spambots do this often, so a single non-filtered spam email would just crash the whole fetching process forever until the admin realizes and deletes that message directly from the mailbox.

Solution: Add a catch-all alias to OpenERP, so unhandled email gets sent there. However this is not possible right now AFAIK.

Changed in openobject-addons:
status: Invalid → Confirmed
information type: Public → Public Security
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.