You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Anders Larsson <an...@dio.nu> on 2009/04/08 11:36:03 UTC
Backtrace of SA rules
Hi!
got a problem with SA from qmail auto-reply mail.
The users got a full mbox and thats makes SA to timeout when checking the
mail.
any hints ? whats wrong in the drugs.cf rule that cause this
Apr 7 14:16:50 spam.jll.se /usr/local/sbin/amavisd[27353]: (27353-02-63)
LMTP:[127.0.0.1]:10024 /var/amavis/amavis_temp/amavis-20090407T141038-27353:
<> -> <da...@jll.se> SIZE=5622554 Received: from spam.jll.se
([127.0.0.1]) by localhost (spam.jll.se [127.0.0.1]) (amavisd-new, port
10024) with LMTP for <da...@jll.se>; Tue, 7 Apr 2009 14:16:50 +0200
(CEST)
Apr 7 14:16:51 spam.jll.se /usr/local/sbin/amavisd[27353]: (27353-02-63)
Checking: Oob4QYskTbDh [213.186.47.132] <> -> <da...@jll.se>
Apr 7 14:22:25 spam.jll.se /usr/local/sbin/amavisd[27353]: (27353-02-63)
(!)SA TIMED OUT, backtrace: at
/var/lib/spamassassin/3.002005/updates_spamassassin_org/20_drugs.cf, rule
/ __DRUGS_PAIN13, line 1\n\teval {...} called at
/ /var/lib/spamassassin/3.002005/updates_spamassassin_org/20_drugs.cf, rule
/ / __DRUGS_PAIN13, line
/ / 1\n\tMail::SpamAssassin::Plugin::Check::_body_tests_0('Mail::SpamAssassin::PerMsgStatus=HASH(0xdade100)',
/ / 'failure notice\\x{a}', 'Hi. This is the qmail-send program at
/ / mx1.ovh.net. I\\'m afrai...', '<gn...@gymsuedoise.com>: user is over
/ / quota\\x{a}', '--- Below this line is a copy of the message.\\x{a}',
/ / 'Return-Path: <da...@jll.se> Received: from b0.ovh.net ...',
/ / 'X-Spam-Status: No, score=-2.864 tagged_above=-999 required=5 ...',
/ / 'This is a multi-part message in MIME format.\\x{a}',
/ / '----=_--0319c856.0319c640.c5fb745c Content-Type: multipart/al...', ...)
/ / called at /usr/share/perl5/Mail/SpamAssassin/Plugin/Check.pm line
/ / 239\n\tMail::SpamAssassin[...]
Regards Anders
Re: Backtrace of SA rules
Posted by Mark Martinec <Ma...@ijs.si>.
On Wednesday 08 April 2009 12:40:26 Karsten Bräckelmann wrote:
> On Wed, 2009-04-08 at 04:29 -0600, LuKreme wrote:
> > On 8-Apr-2009, at 04:04, Mark Martinec wrote:
> > > set it to something like:
> > > $sa_mail_body_size_limit = 420*1024;
> >
> > Isn't the limit still 256K unless overridden?
>
> Is that an Amavis specific question?
>
> Neither spamassassin, nor spamd have any limit and will happily chew on
> whatever you feed them. The default limit when using spamc is 500 KB,
> messages exceeding the limit will not be passed to spamd at all.
Right. With amavisd the limit $sa_mail_body_size_limit is specified in
a config file. In absence of assignment to this variable no limit applies.
The sample amavisd.conf file, as well as the initial config files provided
by some packages, does supply some limit (often 420kB, which is just
below the MS 'message/partial' chunk size which isn't handled gracefully
by SpamAssassin rules), which can be changed by administrator.
Mark
Re: Backtrace of SA rules
Posted by Karsten Bräckelmann <gu...@rudersport.de>.
On Wed, 2009-04-08 at 04:29 -0600, LuKreme wrote:
> On 8-Apr-2009, at 04:04, Mark Martinec wrote:
> > set it to something like:
> > $sa_mail_body_size_limit = 420*1024;
>
> Isn't the limit still 256K unless overridden?
Is that an Amavis specific question?
Neither spamassassin, nor spamd have any limit and will happily chew on
whatever you feed them. The default limit when using spamc is 500 KB,
messages exceeding the limit will not be passed to spamd at all.
--
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
Re: Backtrace of SA rules
Posted by LuKreme <kr...@kreme.com>.
On 8-Apr-2009, at 04:04, Mark Martinec wrote:
> set it to something like:
> $sa_mail_body_size_limit = 420*1024;
Isn't the limit still 256K unless overridden?
--
*** Word_of_God was kicked from #christian by SageRider (Please
don't Swear)
Re: Backtrace of SA rules
Posted by Mark Martinec <Ma...@ijs.si>.
Anders,
> got a problem with SA from qmail auto-reply mail.
> The users got a full mbox and thats makes SA to timeout when checking the
> mail.
>
> Apr 7 14:16:50 spam.jll.se /usr/local/sbin/amavisd[27353]: (27353-02-63)
> LMTP:[127.0.0.1]:10024
> /var/amavis/amavis_temp/amavis-20090407T141038-27353: <> ->
> <da...@jll.se> SIZE=5622554 Received: from spam.jll.se ([127.0.0.1])
> by localhost (spam.jll.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP
> for <da...@jll.se>; Tue, 7 Apr 2009 14:16:50 +0200 (CEST)
A 4.4 MB auto-reply message?
> any hints ? whats wrong in the drugs.cf rule that cause this
Probably just takes too long for all these rules to check the full message.
> Apr 7 14:16:51 spam.jll.se /usr/local/sbin/amavisd[27353]: (27353-02-63)
> Checking: Oob4QYskTbDh [213.186.47.132] <> -> <da...@jll.se>
> Apr 7 14:22:25 spam.jll.se /usr/local/sbin/amavisd[27353]: (27353-02-63)
> (!)SA TIMED OUT, backtrace: at
> /var/lib/spamassassin/3.002005/updates_spamassassin_org/20_drugs.cf, rule
> / __DRUGS_PAIN13, line 1\n\teval {...}
You should be limiting the size of a message passed to SpamAssassin,
set it to something like:
$sa_mail_body_size_limit = 420*1024;
Mark
Re: Backtrace of SA rules
Posted by Karsten Bräckelmann <gu...@rudersport.de>.
On Wed, 2009-04-08 at 11:36 +0200, Anders Larsson wrote:
> got a problem with SA from qmail auto-reply mail.
> The users got a full mbox and thats makes SA to timeout when checking the
> mail.
I don't think it does. SA doesn't know about the full mbox, or where the
mail will end for that matter. See Mark's earlier reply, probably just a
timeout processing a large message.
--
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}