You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Justin Mason <jm...@jmason.org> on 2007/10/02 20:45:40 UTC

Re: [qmailtoaster] Duplicate emails and increased spam getting through

upgrade, this bug was fixed in 3.2.0.

--j.

Steve Ingraham writes:
> More information:  Below are a few lines from the
> /var/log/qmail/spamd/current file.  This information does not look good
> but I do not know what it means.  Can someone give me some idea of what
> this means and what I should be looking at?
>  
> @40000000470285c9110f939c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285ca11a7c874 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285cb12414d3c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285cc12da83e4 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285cd1373e19c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285ce140bef64 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285cf14a531c4 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285d0153dcc2c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285d115d6a514 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285d2166fe774 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285d3170977f4 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285d417a1df94 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285d5183c6a14 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285d618d4606c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285d7196c898c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285d81a0629ac [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285d91a9ed79c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285da1b3825b4 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285db1bd196f4 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285dc1c6a8364 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285dd1d03c1dc [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285de1d9c92f4 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285df1e35b9fc [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285e01ed0159c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285e11f67c1bc [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285e22000b9e4 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285e320995064 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285e42132d914 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285e521cd30cc [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285e62264ec8c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285e722fe2b04 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285e82397232c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285e92430752c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285ea24c93e74 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285eb256353c4 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285ec25fb695c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285ed269459b4 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285ee272ead84 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285ef27c680b4 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285f0285fd69c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285f128f8b754 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285f22991de5c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285f32a2af9ac [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285f42ac3c6dc [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285f52b5d20ac [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285f62bf5f994 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285f72c8f6304 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285f82d27f1b4 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285f92dc1bccc [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285fa2e5a3024 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285fb2ef318ac [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285fc2f8c6e94 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285fd30250ce4 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285fe30be997c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470285ff31575af4 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @400000004702860031f07a2c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @400000004702860132892434 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @4000000047028602332331b4 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @400000004702860333bbeb5c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470286043454e76c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @400000004702860534ee1644 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @400000004702860635872dac [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470286073620589c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @400000004702860836b99afc [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470286093752394c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @400000004702860a37eb7bac [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @400000004702860b3884c9c4 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @400000004702860c391d3164 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @400000004702860d39b6f4ac [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @400000004702860e3a5cc9cc [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @400000004702860f3ae88b24 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470286103b85925c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470286120080596c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @40000000470286130119075c [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @400000004702861401b49f64 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> @4000000047028615024b1ad4 [19049] warn: prefork: select returned -1!
> recovering: Bad file descriptor
> 
> 
> 	-----Original Message-----
> 	From: Steve Ingraham 
> 	Sent: Tuesday, October 02, 2007 12:46 PM
> 	To: qmailtoaster-list@qmailtoaster.com;
> users@spamassassin.apache.org
> 	Subject: [qmailtoaster] Duplicate emails and increased spam
> getting through
> 	
> 	
> 	I have a couple of problems that had shown up about a month ago
> and now are showing up again yesterday and today in our domain.  Many of
> my users are reporting quite a few duplicate emails and many are
> receiving a great number of spam emails that they were not receiving
> before.
> 	 
> 	We are running Qmailtoaster 1.3 with spamassassin 3.1.5 running
> Perl version 5.8.0 on a Redhat OS.
> 	 
> 	Most of the new spam is very raw adult sex spam emails some with
> pictures in the body of the text.  None of this type of spam was making
> it through the filters until this recent incident and the incident a
> month ago.  Not only is the highly offensive spam making its way through
> but there is a large increase in the overall number of spams that are
> getting to the user mailboxes.
> 	 
> 	The duplicate emails tend to be for the most part from
> legitimate emails the users normally see email from.
> 	 
> 	I have checked the disk space capacity on this server as that
> has been a problem in the past but I do not see that as a problem
> currently.  Here are the usage numbers for this server:
> 	Filesystem    Size        Used        Avail        Use%
> Mount on
> 	/dev/sda7        1.5G        1.1G        356M        76%       /
> 	/dev/sda3        710M        48M        626M        8%
> /boot
> 	none               501M            0        501M        0%
> /dev/shm
> 	/dev/sda9        496M        26M        445M        6%
> /tmp
> 	/dev/sda5         16G         3.1G        12G         21%
> /usr
> 	/dev/sda8        496M        238M        233M      51%
> /var
> 	/dev/sda2         7.5G         5.3G        1.8G        75%
> /home
> 	 
> 	Below is the header information of one of the emails that was
> being duplicated.  Below that is the header and content of one of the
> spams that this same user recieved.  The spam email does not appear to
> have any spamassassin score information in the header at all.  Are these
> two problems related?  Is there some specific things with qmail or with
> spamassassin I should be looking at for either or both of these issues?
> 	 
> 	I appreciate any input that can be offered to help resolve this
> problem.
> 	 
> 	Steve
> 	 
> 	 
> 
> 		Microsoft Mail Internet Headers Version 2.0
> 
> 		Received: from mxi.occa.state.ok.us ([172.16.255.12]) by
> mxi2.occa.state.ok.us with Microsoft SMTPSVC(6.0.3790.3959);
> 
> 		             Tue, 2 Oct 2007 08:11:23 -0500
> 
> 		Received: from dellapp02.occa.state.ok.us
> ([204.87.111.225]) by mxi.occa.state.ok.us with Microsoft
> SMTPSVC(5.0.2195.6713);
> 
> 		             Tue, 2 Oct 2007 08:12:07 -0500
> 
> 		Received: (qmail 19008 invoked by uid 507); 2 Oct 2007
> 13:16:22 -0000
> 
> 		Received: by simscan 1.2.0 ppid: 18755, pid: 18756, t:
> 215.0297s
> 
> 		         scanners: attach: 1.2.0 clamav:
> 0.88.4/m:40/d:2106 spam: 3.1.5
> 
> 		Received: from unknown (HELO smtp160.iad.emailsrvr.com)
> (207.97.245.160)
> 
> 		  by dellapp02.occa.state.ok.us with SMTP; 2 Oct 2007
> 13:12:47 -0000
> 
> 		Received-SPF: none (dellapp02.occa.state.ok.us: domain
> at longwall.com does not designate permitted sender hosts)
> 
> 		Received: by relay6.relay.iad.emailsrvr.com
> (Authenticated sender: dclemens-AT-longwall.com) with ESMTP id
> 3BB94661470;
> 
> 		            Mon,  1 Oct 2007 11:11:53 -0400 (EDT)
> 
> 		Message-ID: <03...@DAVE>
> 
> 		Reply-To: "Dave Clemens" <dc...@longwall.com>
> 
> 		From: "Dave Clemens" <dc...@longwall.com>
> 
> 		To: <ti...@sbcglobal.net>,
> 
> 		            <dw...@okcca.net>,
> 
> 		            "Andi Holmes" <ah...@longwall.com>
> 
> 		Subject: Fw:  Dressed in Black
> 
> 		Date: Mon, 1 Oct 2007 11:09:25 -0500
> 
> 		Organization: Longwall Associates, Inc.
> 
> 		MIME-Version: 1.0
> 
> 		Content-Type: multipart/alternative;
> 
> 	
> boundary="----=_NextPart_000_037B_01C8041B.8717EF60"
> 
> 		X-Priority: 3
> 
> 		X-MSMail-Priority: Normal
> 
> 		X-Mailer: Microsoft Outlook Express 6.00.2900.3138
> 
> 		X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
> 
> 		Return-Path: dclemens@longwall.com
> 
> 		X-OriginalArrivalTime: 02 Oct 2007 13:12:07.0234 (UTC)
> FILETIME=[D54FE220:01C804F5]
> 
> 		 
> 
> 		------=_NextPart_000_037B_01C8041B.8717EF60
> 
> 		Content-Type: text/plain;
> 
> 		            charset="iso-8859-1"
> 
> 		Content-Transfer-Encoding: quoted-printable
> 
> 		 
> 
> 		------=_NextPart_000_037B_01C8041B.8717EF60
> 
> 		Content-Type: text/html;
> 
> 		            charset="iso-8859-1"
> 
> 		Content-Transfer-Encoding: quoted-printable
> 
> 		 
> 
> 		 
> 
> 		------=_NextPart_000_037B_01C8041B.8717EF60--
> 
> 		 
> 
> 		
> 
> 		
> 
> 		
> 
> 		
> ________________________________
> 
> 
> 	Microsoft Mail Internet Headers Version 2.0
> 
> 	Received: from mxi.occa.state.ok.us ([172.16.255.12]) by
> mxi2.occa.state.ok.us with Microsoft SMTPSVC(6.0.3790.3959);
> 
> 	Tue, 2 Oct 2007 12:18:10 -0500
> 
> 	Received: from dellapp02.occa.state.ok.us ([204.87.111.225]) by
> mxi.occa.state.ok.us with Microsoft SMTPSVC(5.0.2195.6713);
> 
> 	Tue, 2 Oct 2007 12:18:53 -0500
> 
> 	Received: (qmail 594 invoked by uid 507); 2 Oct 2007 17:23:08
> -0000
> 
> 	Received: by simscan 1.2.0 ppid: 399, pid: 401, t: 214.9277s
> 
> 	scanners: attach: 1.2.0 clamav: 0.88.4/m:40/d:2106 spam: 3.1.5
> 
> 	Received: from unknown (HELO LC03.reefwalk.com) (216.188.169.48)
> 
> 	by dellapp02.occa.state.ok.us with SMTP; 2 Oct 2007 17:19:33
> -0000
> 
> 	Received-SPF: softfail (dellapp02.occa.state.ok.us:
> transitioning SPF record at planetstarpic.com does not designate
> 216.188.169.48 as permitted sender)
> 
> 	Received: by LC03.reefwalk.com id h09uac07blkd for
> <dw...@okcca.net>; Tue, 2 Oct 2007 10:15:10 -0700 (envelope-from
> <22...@planetstarpic.com>)
> 
> 	Message-Id: <MB...@planetstarpic.com>
> 
> 	Reply-To: <Bo...@planetstarpic.com>
> 
> 	From: BoostMyCreditNow <Bo...@planetstarpic.com>
> 
> 	Subject: Donna, Raise Your Credit Score Quickly and Legally
> 
> 	Date: Tue, 02 Oct 2007 18:15:34 GMT
> 
> 	X-Complaints-To: <co...@planetstarpic.com>
> 
> 	To: <dw...@okcca.net>
> 
> 	Return-Path: 22199062.14985051@planetstarpic.com
> 
> 	X-OriginalArrivalTime: 02 Oct 2007 17:18:53.0703 (UTC)
> FILETIME=[4EA7C170:01C80518]
> 
> 	 
> 
> 	-----Original Message-----
> 
> 	From: BoostMyCreditNow
> [mailto:BoostMyCreditNow@planetstarpic.com
> <ma...@planetstarpic.com> ] 
> 
> 	Sent: Tuesday, October 02, 2007 1:16 PM
> 
> 	To: Donna Way
> 
> 	Subject: Donna, Raise Your Credit Score Quickly and Legally
> 
> 	Restore Your Credit Report Rating Quickly and Legally!
> 
> 	
> http://MBbejifafbmfeJL.planetstarpic.com/link.asp?a=c&u=58411513&e=14985
> 051
> <http://mbbejifafbmfejl.planetstarpic.com/link.asp?a=c&u=58411513&e=1498
> 5051> 
> 
> 	* Save tens of thousands of dollars off your home or car loan
> 
> 	* Get approved for new, low interest loans and credit cards
> 
> 	* Lower the finance charges on all your debt
> 
> 	We tell you the secrets the credit bureaus don't want you to
> know! 
> 
> 	Learn More at: 
> 
> 	
> http://MBbejifafbmfeJL.planetstarpic.com/link.asp?a=c&u=58411513&e=14985
> 051
> <http://mbbejifafbmfejl.planetstarpic.com/link.asp?a=c&u=58411513&e=1498
> 5051> 
> 
> 	-----------------------------------------------------------
> 
> 	If you would no longer like to receive ads from BMCN please
> click below: 
> 
> 	
> http://MBbejifafbmfeJL.planetstarpic.com/link.asp?a=c&u=58411514&e=14985
> 051
> <http://mbbejifafbmfejl.planetstarpic.com/link.asp?a=c&u=58411514&e=1498
> 5051> 
> 
> 	Removal Requests, 716 N Ventura Rd #374, Oxnard, CA 93030-4404
> 
> 	 
> 
> 	 
> 
> 	 
> 
> 	If you think you received this email in error or would prefer
> not to receive emails from us, click here:
> http://MBbejifafbmfeJL.planetstarpic.com/link.asp?a=r&m=22199062&e=14985
> 051
> <http://mbbejifafbmfejl.planetstarpic.com/link.asp?a=r&m=22199062&e=1498
> 5051>  
> 
> 	Data Services List 5, 941 Orange Ave #207, Coronado, CA 92118