You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Bjorn Jensen <bj...@info-connect.dk> on 2005/10/10 10:30:39 UTC
Spamassassin "crashing" on long email
During the last few days we have had huge problems with spamassassin
grinding to a halt and having to restart it to be able to have it scan
again. After investigating this it seems we have several emails in our
queue that "crashes" spamassassin, or rather, spamd/spamassassin goes to
100% cpu and never stops scanning these emails.
I have put one of these emails here: http://www.info-connect.dk/spam.txt
If I run spamassassin -D < spam.txt I get the following output:
[12420] dbg: logger: adding facilities: all
[12420] dbg: logger: logging level is DBG
[12420] dbg: generic: SpamAssassin version 3.1.0
[12420] dbg: config: score set 0 chosen.
[12420] dbg: util: running in taint mode? yes
[12420] dbg: util: taint mode: deleting unsafe environment variables,
resetting PATH
[12420] dbg: util: PATH included '/usr/kerberos/bin', keeping
[12420] dbg: util: PATH included '/bin', keeping
[12420] dbg: util: PATH included '/usr/bin', keeping
[12420] dbg: util: PATH included '/usr/local/bin', keeping
[12420] dbg: util: PATH included '/usr/bin/X11', keeping
[12420] dbg: util: PATH included '/usr/X11R6/bin', keeping
[12420] dbg: util: PATH included '/home/spamassassin/bin', which doesn't
exist, dropping
[12420] dbg: util: final PATH set to:
/usr/kerberos/bin:/bin:/usr/bin:/usr/local/bin:/usr/bin/X11:/usr/X11R6/bin
[12420] dbg: dns: is Net::DNS::Resolver available? yes
[12420] dbg: dns: Net::DNS version: 0.51
[12420] dbg: dns: name server: 127.0.0.1, family: 2, ipv6: 0
[12420] dbg: config: using "/etc/mail/spamassassin" for site rules pre files
[12420] dbg: config: read file /etc/mail/spamassassin/init.pre
[12420] dbg: config: read file /etc/mail/spamassassin/v310.pre
[12420] dbg: config: using "/usr/share/spamassassin" for sys rules pre files
[12420] dbg: config: using "/usr/share/spamassassin" for default rules dir
[12420] dbg: config: read file /usr/share/spamassassin/10_misc.cf
[12420] dbg: config: read file /usr/share/spamassassin/20_advance_fee.cf
[12420] dbg: config: read file /usr/share/spamassassin/20_anti_ratware.cf
[12420] dbg: config: read file /usr/share/spamassassin/20_body_tests.cf
[12420] dbg: config: read file /usr/share/spamassassin/20_compensate.cf
[12420] dbg: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
[12420] dbg: config: read file /usr/share/spamassassin/20_drugs.cf
[12420] dbg: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
[12420] dbg: config: read file /usr/share/spamassassin/20_head_tests.cf
[12420] dbg: config: read file /usr/share/spamassassin/20_html_tests.cf
[12420] dbg: config: read file /usr/share/spamassassin/20_meta_tests.cf
[12420] dbg: config: read file /usr/share/spamassassin/20_net_tests.cf
[12420] dbg: config: read file /usr/share/spamassassin/20_phrases.cf
[12420] dbg: config: read file /usr/share/spamassassin/20_porn.cf
[12420] dbg: config: read file /usr/share/spamassassin/20_ratware.cf
[12420] dbg: config: read file /usr/share/spamassassin/20_uri_tests.cf
[12420] dbg: config: read file /usr/share/spamassassin/23_bayes.cf
[12420] dbg: config: read file /usr/share/spamassassin/25_accessdb.cf
[12420] dbg: config: read file /usr/share/spamassassin/25_antivirus.cf
[12420] dbg: config: read file /usr/share/spamassassin/25_body_tests_es.cf
[12420] dbg: config: read file /usr/share/spamassassin/25_body_tests_pl.cf
[12420] dbg: config: read file /usr/share/spamassassin/25_dcc.cf
[12420] dbg: config: read file /usr/share/spamassassin/25_domainkeys.cf
[12420] dbg: config: read file /usr/share/spamassassin/25_hashcash.cf
[12420] dbg: config: read file /usr/share/spamassassin/25_pyzor.cf
[12420] dbg: config: read file /usr/share/spamassassin/25_razor2.cf
[12420] dbg: config: read file /usr/share/spamassassin/25_replace.cf
[12420] dbg: config: read file /usr/share/spamassassin/25_spf.cf
[12420] dbg: config: read file /usr/share/spamassassin/25_textcat.cf
[12420] dbg: config: read file /usr/share/spamassassin/25_uribl.cf
[12420] dbg: config: read file /usr/share/spamassassin/30_text_de.cf
[12420] dbg: config: read file /usr/share/spamassassin/30_text_fr.cf
[12420] dbg: config: read file /usr/share/spamassassin/30_text_it.cf
[12420] dbg: config: read file /usr/share/spamassassin/30_text_nl.cf
[12420] dbg: config: read file /usr/share/spamassassin/30_text_pl.cf
[12420] dbg: config: read file /usr/share/spamassassin/30_text_pt_br.cf
[12420] dbg: config: read file /usr/share/spamassassin/50_scores.cf
[12420] dbg: config: read file /usr/share/spamassassin/60_awl.cf
[12420] dbg: config: read file /usr/share/spamassassin/60_whitelist.cf
[12420] dbg: config: read file /usr/share/spamassassin/60_whitelist_spf.cf
[12420] dbg: config: read file
/usr/share/spamassassin/60_whitelist_subject.cf
[12420] dbg: config: using "/etc/mail/spamassassin" for site rules dir
[12420] dbg: config: read file /etc/mail/spamassassin/70_sare_adult.cf
[12420] dbg: config: read file
/etc/mail/spamassassin/70_sare_bayes_poison_nxm.cf
[12420] dbg: config: read file /etc/mail/spamassassin/70_sare_genlsubj0.cf
[12420] dbg: config: read file /etc/mail/spamassassin/70_sare_genlsubj1.cf
[12420] dbg: config: read file /etc/mail/spamassassin/70_sare_header0.cf
[12420] dbg: config: read file /etc/mail/spamassassin/70_sare_header1.cf
[12420] dbg: config: read file /etc/mail/spamassassin/70_sare_html0.cf
[12420] dbg: config: read file /etc/mail/spamassassin/70_sare_html1.cf
[12420] dbg: config: read file /etc/mail/spamassassin/70_sare_obfu.cf
[12420] dbg: config: read file /etc/mail/spamassassin/70_sare_oem.cf
[12420] dbg: config: read file /etc/mail/spamassassin/70_sare_random.cf
[12420] dbg: config: read file /etc/mail/spamassassin/70_sare_specific.cf
[12420] dbg: config: read file /etc/mail/spamassassin/70_sare_spoof.cf
[12420] dbg: config: read file /etc/mail/spamassassin/70_sare_unsub.cf
[12420] dbg: config: read file /etc/mail/spamassassin/70_sare_uri0.cf
[12420] dbg: config: read file /etc/mail/spamassassin/70_sare_uri1.cf
[12420] dbg: config: read file /etc/mail/spamassassin/70_sare_whitelist.cf
[12420] dbg: config: read file /etc/mail/spamassassin/72_sare_bml_post25x.cf
[12420] dbg: config: read file
/etc/mail/spamassassin/72_sare_redirect_post3.0.0.cf
[12420] dbg: config: read file
/etc/mail/spamassassin/99_sare_fraud_post25x.cf
[12420] dbg: config: read file
/etc/mail/spamassassin/bogus-virus-warnings.cf
[12420] dbg: config: read file /etc/mail/spamassassin/local.cf
[12420] dbg: config: read file /etc/mail/spamassassin/mime_validate.cf
[12420] dbg: config: read file /etc/mail/spamassassin/weeds.cf
[12420] dbg: config: using "/home/spamassassin/.spamassassin" for user
state dir
[12420] dbg: config: using "/home/spamassassin/.spamassassin/user_prefs"
for user prefs file
[12420] dbg: config: read file /home/spamassassin/.spamassassin/user_prefs
[12420] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
[12420] dbg: plugin: registered
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8c67858)
[12420] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
[12420] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8c71f68)
[12420] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[12420] dbg: plugin: registered
Mail::SpamAssassin::Plugin::SPF=HASH(0x8cb0ef8)
[12420] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
[12420] dbg: pyzor: network tests on, attempting Pyzor
[12420] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Pyzor=HASH(0x8ca33b8)
[12420] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC
[12420] dbg: reporter: network tests on, attempting SpamCop
[12420] dbg: plugin: registered
Mail::SpamAssassin::Plugin::SpamCop=HASH(0x8d5f128)
[12420] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
[12420] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AWL=HASH(0x8d82030)
[12420] dbg: plugin: loading
Mail::SpamAssassin::Plugin::AutoLearnThreshold from @INC
[12420] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0x8ced908)
[12420] dbg: plugin: loading
Mail::SpamAssassin::Plugin::WhiteListSubject from @INC
[12420] dbg: plugin: registered
Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x8cee37c)
[12420] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from
@INC
[12420] dbg: plugin: registered
Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0x8cef018)
[12420] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags
from @INC
[12420] dbg: plugin: registered
Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x8cf00a4)
[12420] dbg: config: adding redirector regex:
/^http:\/\/chkpt\.zdnet\.com\/chkpt\/\w+\/(.*)$/i
[12420] dbg: config: adding redirector regex:
/^http:\/\/www(?:\d+)?\.nate\.com\/r\/\w+\/(.*)$/i
[12420] dbg: config: adding redirector regex:
/^http:\/\/.+\.gov\/(?:.*\/)?externalLink\.jhtml\?.*url=(.*?)(?:&.*)?$/i
[12420] dbg: config: adding redirector regex:
/^http:\/\/redir\.internet\.com\/.+?\/.+?\/(.*)$/i
[12420] dbg: config: adding redirector regex:
/^http:\/\/(?:.*?\.)?adtech\.de\/.*(?:;|\|)link=(.*?)(?:;|$)/i
[12420] dbg: config: adding redirector regex:
m'^http.*?/redirect\.php\?.*(?<=[?&])goto=(.*?)(?:$|[&\#])'i
[12420] dbg: config: adding redirector regex:
m'^https?:/*(?:[^/]+\.)?emf\d\.com/r\.cfm.*?&r=(.*)'i
[12420] dbg: plugin:
Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x8cf00a4) implements
'finish_parsing_end'
[12420] dbg: replacetags: replacing tags
[12420] dbg: replacetags: done replacing tags
[12420] dbg: config: score set 1 chosen.
[12420] dbg: dns: dns_available set to yes in config file, skipping test
[12420] dbg: received-header: parsed as [ ip=12.65.222.247
rdns=slip-12-65-222-247.mis.prserv.net helo=mx2.prserv.net
by=mail2.info-connect.dk ident= envfrom= intl=0 id= auth= ]
[12420] dbg: received-header: relay 12.65.222.247 trusted? no internal? no
[12420] dbg: metadata: X-Spam-Relays-Trusted:
[12420] dbg: metadata: X-Spam-Relays-Untrusted: [ ip=12.65.222.247
rdns=slip-12-65-222-247.mis.prserv.net helo=mx2.prserv.net
by=mail2.info-connect.dk ident= envfrom= intl=0 id= auth= ]
[12420] dbg: message: ---- MIME PARSER START ----
[12420] dbg: message: main message type: text/html
[12420] dbg: message: parsing normal part
[12420] dbg: message: added part, type: text/html
[12420] dbg: message: ---- MIME PARSER END ----
[12420] dbg: message: decoding other encoding type (7bit), ignoring
[12420] dbg: plugin:
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8c67858) implements
'parsed_metadata'
[12420] dbg: uri: html uri found, http://pws.prserv.net/compassion/pic1.jpg
[12420] dbg: uri: cleaned html uri,
http://pws.prserv.net/compassion/pic1.jpg
[12420] dbg: uri: html domain, prserv.net
[12420] dbg: uri: html uri found,
http://pws.prserv.net/compassion/confirm.htm?recipient=113245
[12420] dbg: uri: cleaned html uri,
http://pws.prserv.net/compassion/confirm.htm?recipient=113245
[12420] dbg: uri: html domain, prserv.net
[12420] dbg: uri: html uri found, http://pws.prserv.net/compassion/pic2.gif
[12420] dbg: uri: cleaned html uri,
http://pws.prserv.net/compassion/pic2.gif
[12420] dbg: uri: html domain, prserv.net
[12420] dbg: uri: html uri found,
mailbox:///C|/Documents%20and%20Settings/Administrator/Application%20Data/Thunderbird/Profiles/wdnmem55.default/Mail/Local%20Folders/Inbox?number=29229479â‚=1.5&filename=spacer.gif
[12420] dbg: uri: cleaned html uri,
mailbox:///C|/Documents%20and%20Settings/Administrator/Application%20Data/Thunderbird/Profiles/wdnmem55.default/Mail/Local%20Folders/Inbox?number=29229479%e2%88%82=1.5&filename=spacer.gif
[12420] dbg: uri: cleaned html uri,
mailbox:///C|/Documents%20and%20Settings/Administrator/Application%20Data/Thunderbird/Profiles/wdnmem55.default/Mail/Local%20Folders/Inbox?number=29229479â‚=1.5&filename=spacer.gif
[12420] dbg: uri: html uri found,
http://pws.prserv.net/compassion/AutomaticCH.htm
[12420] dbg: uri: cleaned html uri,
http://pws.prserv.net/compassion/AutomaticCH.htm
[12420] dbg: uri: html domain, prserv.net
[12420] dbg: uri: html uri found, http://pws.prserv.net/compassion/pic3.gif
[12420] dbg: uri: cleaned html uri,
http://pws.prserv.net/compassion/pic3.gif
[12420] dbg: uri: html domain, prserv.net
[12420] dbg: uri: parsed uri found, doquotes.com/doquotes.html
[12420] dbg: uri: cleaned parsed uri, http://doquotes.com/doquotes.html
[12420] dbg: uri: cleaned parsed uri, doquotes.com/doquotes.html
[12420] dbg: uri: parsed domain, doquotes.com
[12420] dbg: uri: parsed uri found, http://doquotes.com/doquotes.html
[12420] dbg: uri: cleaned parsed uri, http://doquotes.com/doquotes.html
[12420] dbg: uri: parsed domain, doquotes.com
[12420] dbg: uri: parsed uri found, DoQuotes.com
[12420] dbg: uri: cleaned parsed uri, http://DoQuotes.com
[12420] dbg: uri: cleaned parsed uri, DoQuotes.com
[12420] dbg: uri: parsed domain, doquotes.com
[12420] dbg: uri: parsed uri found, http://DoQuotes.com
[12420] dbg: uri: cleaned parsed uri, http://DoQuotes.com
[12420] dbg: uri: parsed domain, doquotes.com
[12420] dbg: uri: parsed uri found, DoQuotes.com
[12420] dbg: uri: parsed domain, doquotes.com
[12420] dbg: uri: parsed uri found, http://DoQuotes.com
[12420] dbg: uri: parsed domain, doquotes.com
[12420] dbg: uridnsbl: domains to query: doquotes.com prserv.net
[12420] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl-notfirsthop
[12420] dbg: dns: IPs found: full-external: 12.65.222.247 untrusted:
12.65.222.247 originating:
[12420] dbg: dns: only inspecting the following IPs: 12.65.222.247
[12420] dbg: dns: launching DNS A query for
247.222.65.12.sbl-xbl.spamhaus.org. in background
[12420] dbg: dns: checking RBL sa-accredit.habeas.com., set
habeas-firsttrusted
[12420] dbg: dns: IPs found: full-external: 12.65.222.247 untrusted:
12.65.222.247 originating:
[12420] dbg: dns: only inspecting the following IPs: 12.65.222.247
[12420] dbg: dns: launching DNS A query for
247.222.65.12.sa-accredit.habeas.com. in background
[12420] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl
[12420] dbg: dns: IPs found: full-external: 12.65.222.247 untrusted:
12.65.222.247 originating:
[12420] dbg: dns: only inspecting the following IPs: 12.65.222.247
[12420] dbg: dns: checking RBL sa-other.bondedsender.org., set bsp-untrusted
[12420] dbg: dns: IPs found: full-external: 12.65.222.247 untrusted:
12.65.222.247 originating:
[12420] dbg: dns: only inspecting the following IPs:
[12420] dbg: dns: checking RBL combined.njabl.org., set njabl-notfirsthop
[12420] dbg: dns: IPs found: full-external: 12.65.222.247 untrusted:
12.65.222.247 originating:
[12420] dbg: dns: only inspecting the following IPs: 12.65.222.247
[12420] dbg: dns: launching DNS A query for
247.222.65.12.combined.njabl.org. in background
[12420] dbg: dns: checking RBL combined.njabl.org., set njabl
[12420] dbg: dns: IPs found: full-external: 12.65.222.247 untrusted:
12.65.222.247 originating:
[12420] dbg: dns: only inspecting the following IPs: 12.65.222.247
[12420] dbg: dns: checking RBL
combined-HIB.dnsiplists.completewhois.com., set whois
[12420] dbg: dns: IPs found: full-external: 12.65.222.247 untrusted:
12.65.222.247 originating:
[12420] dbg: dns: only inspecting the following IPs: 12.65.222.247
[12420] dbg: dns: launching DNS A query for
247.222.65.12.combined-HIB.dnsiplists.completewhois.com. in background
[12420] dbg: dns: checking RBL list.dsbl.org., set dsbl-notfirsthop
[12420] dbg: dns: IPs found: full-external: 12.65.222.247 untrusted:
12.65.222.247 originating:
[12420] dbg: dns: only inspecting the following IPs: 12.65.222.247
[12420] dbg: dns: launching DNS TXT query for
247.222.65.12.list.dsbl.org. in background
[12420] dbg: dns: checking RBL bl.spamcop.net., set spamcop
[12420] dbg: dns: IPs found: full-external: 12.65.222.247 untrusted:
12.65.222.247 originating:
[12420] dbg: dns: only inspecting the following IPs: 12.65.222.247
[12420] dbg: dns: launching DNS TXT query for
247.222.65.12.bl.spamcop.net. in background
[12420] dbg: dns: checking RBL sa-trusted.bondedsender.org., set
bsp-firsttrusted
[12420] dbg: dns: IPs found: full-external: 12.65.222.247 untrusted:
12.65.222.247 originating:
[12420] dbg: dns: only inspecting the following IPs: 12.65.222.247
[12420] dbg: dns: launching DNS TXT query for
247.222.65.12.sa-trusted.bondedsender.org. in background
[12420] dbg: dns: checking RBL
combined-HIB.dnsiplists.completewhois.com., set whois-notfirsthop
[12420] dbg: dns: IPs found: full-external: 12.65.222.247 untrusted:
12.65.222.247 originating:
[12420] dbg: dns: only inspecting the following IPs: 12.65.222.247
[12420] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs-notfirsthop
[12420] dbg: dns: IPs found: full-external: 12.65.222.247 untrusted:
12.65.222.247 originating:
[12420] dbg: dns: only inspecting the following IPs: 12.65.222.247
[12420] dbg: dns: launching DNS A query for
247.222.65.12.dnsbl.sorbs.net. in background
[12420] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs
[12420] dbg: dns: IPs found: full-external: 12.65.222.247 untrusted:
12.65.222.247 originating:
[12420] dbg: dns: only inspecting the following IPs: 12.65.222.247
[12420] dbg: dns: checking RBL iadb.isipp.com., set iadb-firsttrusted
[12420] dbg: dns: IPs found: full-external: 12.65.222.247 untrusted:
12.65.222.247 originating:
[12420] dbg: dns: only inspecting the following IPs: 12.65.222.247
[12420] dbg: dns: launching DNS A query for
247.222.65.12.iadb.isipp.com. in background
[12420] dbg: check: running tests for priority: 0
[12420] dbg: rules: running header regexp tests; score so far=0
[12420] dbg: rules: ran header rule __HAS_MSGID ======> got hit: "<"
[12420] dbg: rules: ran header rule __CTYPE_HTML ======> got hit:
"text/html"
[12420] dbg: rules: ran header rule __SANE_MSGID ======> got hit:
"<00...@mx2.prserv.net>
[12420] dbg: rules: "
[12420] dbg: rules: ran header rule __CTE ======> got hit: "7"
[12420] dbg: rules: ran header rule __MSGID_DOLLARS_MAYBE ======> got
hit: "<00...@mx2.prserv.net>"
[12420] dbg: rules: ran header rule __MSGID_DOLLARS_OK ======> got hit:
"<00...@mx2.prserv.net>"
[12420] dbg: rules: ran header rule __SARE_HEAD_HDR_RCVD ======> got
hit: "("
[12420] dbg: rules: ran header rule __SARE_HEAD_MIME_VALID ======> got
hit: "1.0"
[12420] dbg: rules: ran header rule __OUTLOOK_DOLLARS_MSGID ======> got
hit: "<00...@mx2.prserv.net>"
[12420] dbg: rules: ran header rule __CT ======> got hit: "t"
[12420] dbg: rules: ran header rule __SARE_HEAD_HDR_MIMEV ======> got
hit: "1"
[12420] dbg: rules: ran header rule __TOCC_EXISTS ======> got hit: "<"
[12420] dbg: rules: ran header rule __OE_MSGID_2 ======> got hit:
"<00...@mx2.prserv.net>"
[12420] dbg: rules: ran header rule __HAS_SUBJECT ======> got hit: "E"
[12420] dbg: rules: ran header rule __SARE_HTML_HAS_TO ======> got hit: "<"
[12420] dbg: rules: ran header rule __MSGID_OK_HEX ======> got hit:
"00006909"
[12420] dbg: rules: ran header rule __HAS_RCVD ======> got hit: "("
[12420] dbg: rules: ran header rule MSGID_SPAM_ZEROES ======> got hit:
"<000034180ec5$00006909$00003775@"
[12420] dbg: rules: ran header rule __USER_AGENT ======> got hit: "M"
[12420] dbg: rules: ran header rule __SARE_SUB_INSURANCE ======> got
hit: "Affordable Health Insurance"
[12420] dbg: rules: ran header rule __MSGID_RANDY ======> got hit:
"<00...@mx2.prserv.net>"
[12420] dbg: rules: ran header rule __MIME_VERSION ======> got hit: "1"
[12420] dbg: plugin: registering glue method for
check_hashcash_double_spend
(Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8c71f68))
[12420] dbg: plugin: registering glue method for check_for_spf_helo_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8cb0ef8))
[12420] dbg: spf: checking HELO (helo=mx2.prserv.net, ip=12.65.222.247)
[12420] dbg: spf: query for /12.65.222.247/mx2.prserv.net: result: none,
comment: SPF: domain of sender mx2.prserv.net does not designate mailers
[12420] dbg: eval: all '*From' addrs: firstchoice@attglobal.net
[12420] dbg: plugin: registering glue method for
check_subject_in_blacklist
(Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x8cee37c))
[12420] dbg: plugin: registering glue method for check_hashcash_value
(Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8c71f68))
[12420] dbg: eval: trying Received header date for real time: 5 Oct
2005 21:46:58 -0000
[12420] dbg: eval: time_t from date=1128548818, rcvd= 5 Oct 2005
21:46:58 -0000
[12420] dbg: eval: trying Received header date for real time: 5 Oct
2005 21:46:58 -0000
[12420] dbg: eval: time_t from date=1128548818, rcvd= 5 Oct 2005
21:46:58 -0000
[12420] dbg: eval: all '*To' addrs: mail@eurolines.dk
[12420] dbg: plugin: registering glue method for check_for_spf_neutral
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8cb0ef8))
[12420] dbg: spf: cannot get Envelope-From, cannot use SPF
[12420] dbg: plugin: registering glue method for check_for_spf_softfail
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8cb0ef8))
[12420] dbg: plugin: registering glue method for check_for_spf_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8cb0ef8))
[12420] dbg: plugin: registering glue method for
check_for_spf_helo_softfail
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8cb0ef8))
[12420] dbg: eval: forged-HELO: from=prserv.net helo=prserv.net
by=mail2.info-connect.dk
[12420] dbg: plugin: registering glue method for
check_for_def_spf_whitelist_from
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8cb0ef8))
[12420] dbg: spf: def_spf_whitelist_from: could not find useable
envelope sender
[12420] dbg: plugin: registering glue method for check_for_spf_fail
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8cb0ef8))
[12420] dbg: rules: ran eval rule MSGID_OUTLOOK_INVALID ======> got hit
[12420] dbg: eval: date chosen from message: Wed Oct 5 23:46:58 2005
[12420] dbg: plugin: registering glue method for
check_subject_in_whitelist
(Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x8cee37c))
[12420] dbg: plugin: registering glue method for
check_for_spf_whitelist_from
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8cb0ef8))
[12420] dbg: spf: spf_whitelist_from: could not find useable envelope sender
[12420] dbg: rules: running body-text per-line regexp tests; score so
far=3.387
[12420] dbg: rules: ran body rule DEAR_SOMETHING ======> got hit: "Dear Sir"
[12420] dbg: rules: ran body rule __SARE_PHONE_NUM ======> got hit:
"(800) 429-0127"
[12420] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "E"
[12420] dbg: rules: ran body rule __FRAUD_IRT ======> got hit: "Dear Sir"
[12420] dbg: rules: ran body rule __SARE_HTML_HAS_MSG ======> got hit: "E"
[12420] dbg: rules: ran body rule __FRAUD_DBI ======> got hit: "dollars"
[12420] dbg: uri: running uri tests; score so far=4.999
And after this line it just scans forever, e.g. it doesn't return to the
commandline.
I'm hoping someone can help me with a solution to this.
Regards,
Bjorn Jensen
--
A: Because it messes up the order in which people normally read text.
Q: Why is it such a bad thing?
A: Top-posting
Re[2]: Spamassassin "crashing" on long email
Posted by Robert Menschel <Ro...@Menschel.net>.
Hello Bjorn, others
Monday, October 10, 2005, 2:24:11 AM, you wrote:
BJ> Loren Wilton wrote:
>> There is a recent bug report that one of the SARE rules will cause extreme
>> processor use on a particular spam that has the entire message on a single
>> line. This looks like it may be another example of the same thing.
>>
BJ> Thanks for this hint, I found the bug at
BJ> http://bugzilla.spamassassin.org/show_bug.cgi?id=4621, took out that
BJ> rule and now it's running smoothly again.
I'm disabling SARE_URI_SIXCAPS until we can figure out what about that
rule causes the problem. Update should be on the SARE web site within
the hour.
Updates only to 70_sare_uri1.cf, 70_sare_uri.cf, and their sig files.
I'm not bothering to update the rules web page at this time.
Bob Menschel
Re: Spamassassin "crashing" on long email
Posted by Bjorn Jensen <bj...@info-connect.dk>.
Loren Wilton wrote:
> There is a recent bug report that one of the SARE rules will cause extreme
> processor use on a particular spam that has the entire message on a single
> line. This looks like it may be another example of the same thing.
>
Thanks for this hint, I found the bug at
http://bugzilla.spamassassin.org/show_bug.cgi?id=4621, took out that
rule and now it's running smoothly again.
Regards, Bjorn Jensen
--
A: Because it messes up the order in which people normally read text.
Q: Why is it such a bad thing?
A: Top-posting
Re: Spamassassin "crashing" on long email
Posted by Loren Wilton <lw...@earthlink.net>.
There is a recent bug report that one of the SARE rules will cause extreme
processor use on a particular spam that has the entire message on a single
line. This looks like it may be another example of the same thing.
Loren