You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2007/06/12 22:22:51 UTC
[Bug 5512] New: Parseable Received Header Determined Unparsable
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5512
Summary: Parseable Received Header Determined Unparsable
Product: Spamassassin
Version: 3.1.7
Platform: Other
OS/Version: FreeBSD
Status: NEW
Severity: normal
Priority: P3
Component: Libraries
AssignedTo: dev@spamassassin.apache.org
ReportedBy: gperry@ironport.com
The following "Received" header is parsed, but is determined unparseable:
Received: from ([89.79.20.16]) by pop3.m80.net with MailEnable ESMTP;
Tue, 20 Feb 2007 09:26:17 -0500
It matches the /^from \(\[(${IP_ADDRESS})\]\) by (\S+) with / regexp, but does
not go to "enough". However, a very similar regular expression, /^from
(${IP_ADDRESS}) by (\S+) with /, collects the same information, and goes to
"enough". Because it does not goto "enough" the later regexp, /^from \S+ by \S+
(?:with|via|for|\()/, determines that it is unparseable. However, we know this
to be a valid, parseable relay.
This problem prevents the sender's IP address from being correctly determined in
some cases, and lowers our catch rate.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 5512] Parseable Received Header Determined Unparsable
Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5512
------- Additional Comments From perrygeorget@hotmail.com 2007-06-12 13:45 -------
(From update of attachment 3986)
Jun 12 13:14:54 dev5.sfo.foo spamd[13351]: config: Conf::SQL: executing SQL:
SELECT preference, value FROM sa_userpref WHERE username = 'trap.dbarker' OR
username = '@GLOBAL' ORDER BY username ASC
Jun 12 13:14:54 dev5.sfo.foo spamd[13351]: config: retrieving prefs for
trap.dbarker from SQL server
Jun 12 13:14:54 dev5.sfo.foo spamd[13351]: info: user has changed
Jun 12 13:14:54 dev5.sfo.foo spamd[13351]: config: score set 1 chosen.
Jun 12 13:14:54 dev5.sfo.foo spamd[13351]: dns: name server: 10.1.1.12, family:
2, ipv6: 0
Jun 12 13:14:54 dev5.sfo.foo spamd[13351]: received-header: Parsing from
corpus2-smtp6.soma.foo (corpus2-smtp6.soma.foo [192.168.33.245]) by
corpus2-queue1.soma.foo (Postfix) with ESMTP id 46DA42A543 for
<tr...@corpus2-mga.soma.foo>; Tue, 20 Feb 2007 06:26:38 -0800 (PST)
<GPERRY>
Jun 12 13:14:54 dev5.sfo.foo spamd[13351]: received-header: parsed as [
ip=192.168.33.245 rdns=corpus2-smtp6.soma.foo helo=corpus2-smtp6.soma.foo
by=corpus2-queue1.soma.foo ident= envfrom= intl=0 id=46DA42A543 auth= ]
Jun 12 13:14:54 dev5.sfo.foo spamd[13351]: received-header: relay
192.168.33.245 trusted? yes internal? yes
Jun 12 13:14:54 dev5.sfo.foo spamd[13351]: received-header: Parsing from
corpus-splitter-smtp1.soma.foo (corpus-splitter-smtp1.soma.foo
[192.168.33.217]) by corpus2-queue3.soma.foo (Postfix) with ESMTP id E9E0615338
for <tr...@corpus-mx.eq.foo>; Tue, 20 Feb 2007 06:26:30 -0800 (PST)
<GPERRY>
Jun 12 13:14:54 dev5.sfo.foo spamd[13351]: received-header: parsed as [
ip=192.168.33.217 rdns=corpus-splitter-smtp1.soma.foo
helo=corpus-splitter-smtp1.soma.foo by=corpus2-queue3.soma.foo ident= envfrom=
intl=0 id=E9E0615338 auth= ]
Jun 12 13:14:54 dev5.sfo.foo spamd[13351]: received-header: relay
192.168.33.217 trusted? yes internal? yes
Jun 12 13:14:54 dev5.sfo.foo spamd[13351]: received-header: Parsing from
pop3.m80.net ([66.103.232.4]) by sc-smtp3.soma.foo with ESMTP; 20 Feb 2007
06:26:31 -0800 <GPERRY>
Jun 12 13:14:54 dev5.sfo.foo spamd[13351]: dns: looking up PTR record for
'66.103.232.4'
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: PTR for '66.103.232.4':
'pop3.m80.net'
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: received-header: parsed as [
ip=66.103.232.4 rdns=pop3.m80.net helo=pop3.m80.net by=sc-smtp3.soma.foo ident=
envfrom= intl=0 id= auth= ]
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: received-header: relay 66.103.232.4
trusted? yes internal? yes
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: received-header: Parsing with
MailEnable Postoffice Connector; Tue, 20 Feb 2007 09:26:20 -0500 <GPERRY>
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: received-header: unknown format:
with MailEnable Postoffice Connector; Tue, 20 Feb 2007 09:26:20 -0500
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: received-header: unparseable: with
MailEnable Postoffice Connector; Tue, 20 Feb 2007 09:26:20 -0500
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: received-header: Parsing from
([89.79.20.16]) by pop3.m80.net with MailEnable ESMTP; Tue, 20 Feb 2007
09:26:17 -0500 <GPERRY>
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: received-header: Found IP
89.79.20.16 and BY pop3.m80.net <GPERRY>
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: received-header: Can't handle
HANDOVERS <GPERRY>
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: received-header: unparseable: from
([89.79.20.16]) by pop3.m80.net with MailEnable ESMTP; Tue, 20 Feb 2007
09:26:17 -0500
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: received-header: Parsing from
[127.127.181.53] (port=6974 helo=KYEYMOV) by rRFjIxcAQj with asmtp id
CGUZSL-tgcwNq-54 for mancini@electrosonics.net; Tue, 20 Feb 2007 15:26:40 +0100
<GPERRY>
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: IP is private, not looking up
PTR: 127.127.181.53
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: received-header: parsed as [
ip=127.127.181.53 rdns= helo=KYEYMOV by=rRFjIxcAQj ident= envfrom= intl=0
id=CGUZSL-tgcwNq-54 auth=asmtp ]
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: received-header: relay
127.127.181.53 trusted? yes internal? yes
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: metadata: X-Spam-Relays-Trusted: [
ip=192.168.33.245 rdns=corpus2-smtp6.soma.foo helo=corpus2-smtp6.soma.foo
by=corpus2-queue1.soma.foo ident= envfrom= intl=1 id=46DA42A543 auth= ] [
ip=192.168.33.217 rdns=corpus-splitter-smtp1.soma.foo
helo=corpus-splitter-smtp1.soma.foo by=corpus2-queue3.soma.foo ident= envfrom=
intl=1 id=E9E0615338 auth= ] [ ip=66.103.232.4 rdns=pop3.m80.net
helo=pop3.m80.net by=sc-smtp3.soma.foo ident= envfrom= intl=1 id= auth= ] [
ip=127.127.181.53 rdns= helo=KYEYMOV by=rRFjIxcAQj ident= envfrom= intl=1
id=CGUZSL-tgcwNq-54 auth=asmtp ]
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: metadata: X-Spam-Relays-Untrusted:
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: metadata: X-Spam-Relays-Internal: [
ip=192.168.33.245 rdns=corpus2-smtp6.soma.foo helo=corpus2-smtp6.soma.foo
by=corpus2-queue1.soma.foo ident= envfrom= intl=1 id=46DA42A543 auth= ] [
ip=192.168.33.217 rdns=corpus-splitter-smtp1.soma.foo
helo=corpus-splitter-smtp1.soma.foo by=corpus2-queue3.soma.foo ident= envfrom=
intl=1 id=E9E0615338 auth= ] [ ip=66.103.232.4 rdns=pop3.m80.net
helo=pop3.m80.net by=sc-smtp3.soma.foo ident= envfrom= intl=1 id= auth= ] [
ip=127.127.181.53 rdns= helo=KYEYMOV by=rRFjIxcAQj ident= envfrom= intl=1
id=CGUZSL-tgcwNq-54 auth=asmtp ]
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: metadata: X-Spam-Relays-External:
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: message: ---- MIME PARSER START ----
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: message: main message type:
text/plain
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: message: parsing normal part
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: message: added part, type:
text/plain
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: message: ---- MIME PARSER END ----
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: message: decoding other encoding
type (7bit), ignoring
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: textcat: classifying, skipping: ne
yi sco af sw lv is bs qu la hy am sa ka eu et rm cy fy eo lt
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: textcat: language possibly: en
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: textcat: X-Languages: "en",
X-Languages-Length: 2420
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: uridnsbl: domains to query:
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: senderip: received is 66.103.232.4
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: checking RBL
sbl-xbl.spamhaus.org., set sblxbl-lastexternal
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: checking RBL
sa-accredit.habeas.com., set habeas-firsttrusted
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: checking RBL
sbl-xbl.spamhaus.org., set sblxbl
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: checking RBL
sa-other.bondedsender.org., set bsp-untrusted
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: checking RBL
combined.njabl.org., set njabl-lastexternal
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: checking RBL
combined.njabl.org., set njabl
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: checking RBL
combined-HIB.dnsiplists.completewhois.com., set whois
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: checking RBL list.dsbl.org.,
set dsbl-lastexternal
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: checking RBL bl.spamcop.net.,
set spamcop
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: _check_rbl_addresses RBL
blackhole.securitysage.com., set securitysage
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: launching DNS A query for
corpus2-queue3.soma.foo.blackhole.securitysage.com. in background
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: checking RBL
sa-trusted.bondedsender.org., set bsp-firsttrusted
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: checking RBL
combined-HIB.dnsiplists.completewhois.com., set whois-lastexternal
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: _check_rbl_addresses RBL
rhsbl.ahbl.org., set ahbl
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: launching DNS A query for
corpus2-queue3.soma.foo.rhsbl.ahbl.org. in background
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: checking A and MX for host
corpus2-queue3.soma.foo
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: launching DNS A query for
corpus2-queue3.soma.foo in background
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: launching DNS MX query for
corpus2-queue3.soma.foo in background
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: _check_rbl_addresses RBL
fulldom.rfc-ignorant.org., set rfci_envfrom
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: launching DNS A query for
corpus2-queue3.soma.foo.fulldom.rfc-ignorant.org. in background
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: checking RBL dnsbl.sorbs.net.,
set sorbs-lastexternal
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: checking RBL dnsbl.sorbs.net.,
set sorbs
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: dns: checking RBL iadb.isipp.com.,
set iadb-firsttrusted
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: check: running tests for priority: 0
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: running header regexp tests;
score so far=0
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule __HAS_MSGID
======> got hit: "<"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule __CT ======>
got hit: "t"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule __HAS_RCVD
======> got hit: "f"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule __SANE_MSGID
======> got hit: "<00...@zbyszek>
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: "
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule
__CT_TEXT_PLAIN ======> got hit: "text/plain"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule __MIMEOLE_MS
======> got hit: "Produced By Microsoft MimeOLE"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule
__CTYPE_CHARSET_QUOTED ======> got hit: "charset=""
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule
__MSGID_OK_HOST ======> got hit: "@zbyszek>"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule
__HAS_MSMAIL_PRI ======> got hit: "N"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule
__ANY_OUTLOOK_MUA ======> got hit: "Microsoft Outlook"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule __MSGID_RANDY
======> got hit: "<00...@zbyszek>"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule
__MIME_VERSION ======> got hit: "1"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule
__OCM_FILTERED ======> got hit: "true"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule __TOCC_EXISTS
======> got hit: "m"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule __HAS_MIMEOLE
======> got hit: "P"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule __CTE ======>
got hit: "7"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule __OCM_RESULT
======> got hit: "v"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule
__MSGID_DOLLARS_MAYBE ======> got hit:
"<00...@zbyszek>"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule
__HAS_X_PRIORITY ======> got hit: "3"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule
__MSGID_DOLLARS_OK ======> got hit: "<00...@zbyszek>"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule __OE_MSGID_2
======> got hit: "<00...@zbyszek>"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule
__OUTLOOK_DOLLARS_MUA ======> got hit: "Microsoft Outlook, Build 10."
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule __HAS_SUBJECT
======> got hit: "["
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule
__HAS_OUTLOOK_IN_MAILER ======> got hit: "Microsoft Outlook"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule
__MSGID_OK_HEX ======> got hit: "14af3660"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran header rule
__HAS_X_MAILER ======> got hit: "M"
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: spf: no suitable relay for spf use
found, skipping SPF-helo check
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: eval: all '*From' addrs:
MAILER-DAEMON@corpus2-queue3.soma.foo Moregtgt@talk-aboutit.com
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: eval: trying Received header date
for real time: 20 Feb 2007 06:26:38 -0800
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: eval: time_t from date=1171981598,
rcvd= 20 Feb 2007 06:26:38 -0800
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: eval: trying Received header date
for real time: 20 Feb 2007 06:26:30 -0800
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: eval: time_t from date=1171981590,
rcvd= 20 Feb 2007 06:26:30 -0800
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: eval: trying Received header date
for real time: 20 Feb 2007 06:26:31 -0800
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: eval: time_t from date=1171981591,
rcvd= 20 Feb 2007 06:26:31 -0800
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: eval: trying Received header date
for real time: 20 Feb 2007 09:26:20 -0500
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: eval: time_t from date=1171981580,
rcvd= 20 Feb 2007 09:26:20 -0500
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: eval: trying Received header date
for real time: 20 Feb 2007 09:26:17 -0500
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: eval: time_t from date=1171981577,
rcvd= 20 Feb 2007 09:26:17 -0500
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: eval: trying Received header date
for real time: 20 Feb 2007 15:26:40 +0100
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: eval: time_t from date=1171981600,
rcvd= 20 Feb 2007 15:26:40 +0100
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: eval: all '*To' addrs:
trap.dbarker@corpus2-mga.soma.foo trap.dbarker@corpus-mx.eq.foo
mancini@electrosonics.net
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: spf: no suitable relay for spf use
found, skipping SPF check
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: spf: relayed through one or more
trusted relays, cannot use header-based Envelope-From, skipping
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: spf: def_spf_whitelist_from: could
not find useable envelope sender
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: ran eval rule
UNPARSEABLE_RELAY ======> got hit
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: eval: date chosen from message: Tue
Feb 20 06:26:17 2007
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: spf: spf_whitelist_from: could not
find useable envelope sender
Jun 12 13:14:55 dev5.sfo.foo spamd[13351]: rules: running body-text per-line
regexp tests; score so far=0.001
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: rules: ran body rule __FRAUD_DBI
======> got hit: "$800,000"
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: rules: ran body rule __NONEMPTY_BODY
======> got hit: "["
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uri: running uri tests; score so
far=0.001
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: bayes: not scoring message,
returning undef
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: bayes: opportunistic call attempt
failed, DB not readable
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: rules: ran eval rule URIBL_V1_ACTIVE
======> got hit
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: domains to query:
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: rulename, mask:
URIBL_V1_BIT_2048, 2048
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: domains to query:
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: rulename, mask:
URIBL_V1_BIT_2, 2
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: domains to query:
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: rulename, mask:
URIBL_V1_BIT_8, 8
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: domains to query:
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: rulename, mask:
URIBL_V1_BIT_64, 64
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: domains to query:
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: checking two or more
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: domains to query:
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: rulename, mask:
URIBL_V1_BIT_32, 32
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: domains to query:
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: rulename, mask:
URIBL_V1_BIT_256, 256
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: domains to query:
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: rulename, mask:
URIBL_V1_BIT_4, 4
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: domains to query:
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: rulename, mask:
URIBL_1BIT, 511
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: domains to query:
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: rulename, mask:
URIBL_V1_BIT_128, 128
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: domains to query:
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: rulename, mask:
URIBL_V1_BIT_1, 1
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: domains to query:
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: rulename, mask:
URIBL_V1_BIT_512, 512
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: domains to query:
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: rulename, mask:
URIBL_V1_BIT_16, 16
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: domains to query:
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: uribllocal: rulename, mask:
URIBL_V1_BIT_1024, 1024
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: rules: running raw-body-text
per-line regexp tests; score so far=0.002
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: rules: running full-text regexp
tests; score so far=0.002
Jun 12 13:14:56 dev5.sfo.foo spamd[13351]: info: entering helper-app run mode
Jun 12 13:15:00 dev5.sfo.foo spamd[13351]: info: leaving helper-app run mode
Jun 12 13:15:00 dev5.sfo.foo spamd[13351]: razor2: part=0 engine=4 contested=0
confidence=100
Jun 12 13:15:00 dev5.sfo.foo spamd[13351]: razor2: results: spam? 1
Jun 12 13:15:00 dev5.sfo.foo spamd[13351]: razor2: results: engine 8, highest
cf score: 0
Jun 12 13:15:00 dev5.sfo.foo spamd[13351]: razor2: results: engine 4, highest
cf score: 100
Jun 12 13:15:01 dev5.sfo.foo spamd[13351]: pyzor: pyzor is not available: no
pyzor executable found
Jun 12 13:15:01 dev5.sfo.foo spamd[13351]: pyzor: no pyzor found, disabling
Pyzor
Jun 12 13:15:01 dev5.sfo.foo spamd[13351]: dcc: dccifd is not available: no r/w
dccifd socket found
Jun 12 13:15:01 dev5.sfo.foo spamd[13351]: dcc: dccproc is not available: no
dccproc executable found
Jun 12 13:15:01 dev5.sfo.foo spamd[13351]: dcc: dccifd and dccproc are not
available, disabling DCC
Jun 12 13:15:01 dev5.sfo.foo spamd[13351]: check: running tests for priority:
500
Jun 12 13:15:01 dev5.sfo.foo spamd[13351]: dns: success for 4 of 5 queries
Jun 12 13:15:01 dev5.sfo.foo spamd[13351]: dns: timeout for ahbl after 5
seconds
Jun 12 13:15:01 dev5.sfo.foo spamd[13351]: rules: running meta tests; score so
far=2.502
Jun 12 13:15:01 dev5.sfo.foo spamd[13351]: rules: running header regexp tests;
score so far=2.503
Jun 12 13:15:01 dev5.sfo.foo spamd[13351]: rules: running body-text per-line
regexp tests; score so far=2.503
Jun 12 13:15:01 dev5.sfo.foo spamd[13351]: uri: running uri tests; score so
far=2.503
Jun 12 13:15:01 dev5.sfo.foo spamd[13351]: rules: running raw-body-text
per-line regexp tests; score so far=2.503
Jun 12 13:15:01 dev5.sfo.foo spamd[13351]: rules: running full-text regexp
tests; score so far=2.503
Jun 12 13:15:01 dev5.sfo.foo spamd[13351]: check: is spam? score=2.503
required=5
Jun 12 13:15:01 dev5.sfo.foo spamd[13351]: check:
tests=CORPUS_KEYWORD_ADD_OCM,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E4_51_100,R
AZOR2_CHECK,UNPARSEABLE_RELAY,URIBL_V1_ACTIVE
Jun 12 13:15:01 dev5.sfo.foo spamd[13351]: check:
subtests=__ANY_OUTLOOK_MUA,__CT,__CTE,__CTYPE_CHARSET_QUOTED,__CT_TEXT_PLAIN,__
FRAUD_DBI,__HAS_MIMEOLE,__HAS_MSGID,__HAS_MSMAIL_PRI,__HAS_OUTLOOK_IN_MAILER,__
HAS_RCVD,__HAS_SUBJECT,__HAS_X_MAILER,__HAS_X_PRIORITY,__MIMEOLE_MS,__MIME_VERS
ION,__MSGID_DOLLARS_MAYBE,__MSGID_DOLLARS_OK,__MSGID_OK_HEX,__MSGID_OK_HOST,__M
SGID_RANDY,__NONEMPTY_BODY,__OCM_FILTERED,__OCM_RESULT,__OE_MSGID_2,__OUTLOOK_D
OLLARS_MUA,__SANE_MSGID,__TOCC_EXISTS
Jun 13 13:15:01 dev5.sfo.foo spamd[13351]: config: copying current conf from
backup
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 5512] Parseable Received Header Determined Unparsable
Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5512
------- Additional Comments From gperry@ironport.com 2007-06-12 13:28 -------
Created an attachment (id=3986)
--> (http://issues.apache.org/SpamAssassin/attachment.cgi?id=3986&action=view)
debug log
Additional logging added by me contains "<GPERRY>".
The relevant lines from the log are as follows:
Jun 12 13:14:55 dev5.sfo.ironport.com spamd[13351]: received-header: Parsing
from ([89.79.20.16]) by pop3.m80.net with MailEnable ESMTP; Tue, 20 Feb 2007
09:26:17 -0500 <GPERRY>
Jun 12 13:14:55 dev5.sfo.ironport.com spamd[13351]: received-header: Found IP
89.79.20.16 and BY pop3.m80.net <GPERRY>
Jun 12 13:14:55 dev5.sfo.ironport.com spamd[13351]: received-header: Can't
handle HANDOVERS <GPERRY>
Jun 12 13:14:55 dev5.sfo.ironport.com spamd[13351]: received-header:
unparseable: from ([89.79.20.16]) by pop3.m80.net with MailEnable ESMTP; Tue,
20 Feb 2007 09:26:17 -0500
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.