PMG Error: Parameter Verification Failed (400)

[dlhendup]

I have a PMG 5.2.7 installation, cannot upgrade to the newest version due to some compatibility issues.

Anyway, once in a while, I have mails in quarantine that I cannot view at all, throwing a "Parameter Verification Failed (400)" message. When I click on the mail, in chrome console I get this message: {pmail: "value does not match the regex pattern"}.

Looks like a malformed message or a bug in PMG that prevents it from decoding it properly.

Anyway, is there a manual way from CLI/File System to delete the particular mail from quarantine?

 

[Stoiko Ivanov]

you can check the quarantine also via `pmgsh` - however this also verifies the parameters against the api..

without knowing for which e-mail address the mail was put in quarantine (this is what the 'pmail' parameter is for) it's not really possible to analyze this further...

just for completeness sake - consider upgrading ASAP - PMG 5.2 has been EOL for quite a long while now - you're missing security updates (and bugfixes - maybe even for your problem...)

I hope this helps!

 

[dlhendup]

This is the recipient email: ahztmm/k8sn6n2fubjijmdg==_1112375229161_9wdp8svueeqdojcxhdum4q==@in.constantcontact.com

PMG is in an openvz container, on a RHEL6 host node. PMG 6.X does not seem to work on it.

 

[Stoiko Ivanov]

This is the recipient email: ahztmm/k8sn6n2fubjijmdg==_1112375229161_9wdp8svueeqdojcxhdum4q==@in.constantcontact.com

here the slash '/' is the not allowed character - is that an actual mailbox - and if - does it need to have a slash in the localpart?
(while the relevant RFC are quite liberal in the characters they allow as localpart, I've never seen a system where a regular mailbox contains a slash)

The issue here is that a slash is also used as path-separator in the API - and encoding this in a stable manner is quite tricky - also I'm inclined not to allow even more addresses as valid, unless there is a good reason and a valid use case for such an address..

If this was a spam email to a bogus e-mail-address I would suggest to enable recipient verfication - then postfix would simply deny such a request.

regarding the message which is currently in the quarantine - it will get removed from there after it expires (has been in the quarantine longer than your configured quarantine lifetime