You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Steve Ingraham <si...@okcca.net> on 2007/10/02 19:58:25 UTC
RE: [qmailtoaster] Duplicate emails and increased spam getting through
More information: Below are a few lines from the
/var/log/qmail/spamd/current file. This information does not look good
but I do not know what it means. Can someone give me some idea of what
this means and what I should be looking at?
@40000000470285c9110f939c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285ca11a7c874 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285cb12414d3c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285cc12da83e4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285cd1373e19c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285ce140bef64 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285cf14a531c4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285d0153dcc2c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285d115d6a514 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285d2166fe774 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285d3170977f4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285d417a1df94 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285d5183c6a14 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285d618d4606c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285d7196c898c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285d81a0629ac [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285d91a9ed79c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285da1b3825b4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285db1bd196f4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285dc1c6a8364 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285dd1d03c1dc [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285de1d9c92f4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285df1e35b9fc [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285e01ed0159c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285e11f67c1bc [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285e22000b9e4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285e320995064 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285e42132d914 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285e521cd30cc [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285e62264ec8c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285e722fe2b04 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285e82397232c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285e92430752c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285ea24c93e74 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285eb256353c4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285ec25fb695c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285ed269459b4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285ee272ead84 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285ef27c680b4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285f0285fd69c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285f128f8b754 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285f22991de5c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285f32a2af9ac [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285f42ac3c6dc [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285f52b5d20ac [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285f62bf5f994 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285f72c8f6304 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285f82d27f1b4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285f92dc1bccc [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285fa2e5a3024 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285fb2ef318ac [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285fc2f8c6e94 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285fd30250ce4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285fe30be997c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470285ff31575af4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@400000004702860031f07a2c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@400000004702860132892434 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@4000000047028602332331b4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@400000004702860333bbeb5c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470286043454e76c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@400000004702860534ee1644 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@400000004702860635872dac [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470286073620589c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@400000004702860836b99afc [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470286093752394c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@400000004702860a37eb7bac [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@400000004702860b3884c9c4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@400000004702860c391d3164 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@400000004702860d39b6f4ac [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@400000004702860e3a5cc9cc [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@400000004702860f3ae88b24 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470286103b85925c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470286120080596c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@40000000470286130119075c [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@400000004702861401b49f64 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
@4000000047028615024b1ad4 [19049] warn: prefork: select returned -1!
recovering: Bad file descriptor
-----Original Message-----
From: Steve Ingraham
Sent: Tuesday, October 02, 2007 12:46 PM
To: qmailtoaster-list@qmailtoaster.com;
users@spamassassin.apache.org
Subject: [qmailtoaster] Duplicate emails and increased spam
getting through
I have a couple of problems that had shown up about a month ago
and now are showing up again yesterday and today in our domain. Many of
my users are reporting quite a few duplicate emails and many are
receiving a great number of spam emails that they were not receiving
before.
We are running Qmailtoaster 1.3 with spamassassin 3.1.5 running
Perl version 5.8.0 on a Redhat OS.
Most of the new spam is very raw adult sex spam emails some with
pictures in the body of the text. None of this type of spam was making
it through the filters until this recent incident and the incident a
month ago. Not only is the highly offensive spam making its way through
but there is a large increase in the overall number of spams that are
getting to the user mailboxes.
The duplicate emails tend to be for the most part from
legitimate emails the users normally see email from.
I have checked the disk space capacity on this server as that
has been a problem in the past but I do not see that as a problem
currently. Here are the usage numbers for this server:
Filesystem Size Used Avail Use%
Mount on
/dev/sda7 1.5G 1.1G 356M 76% /
/dev/sda3 710M 48M 626M 8%
/boot
none 501M 0 501M 0%
/dev/shm
/dev/sda9 496M 26M 445M 6%
/tmp
/dev/sda5 16G 3.1G 12G 21%
/usr
/dev/sda8 496M 238M 233M 51%
/var
/dev/sda2 7.5G 5.3G 1.8G 75%
/home
Below is the header information of one of the emails that was
being duplicated. Below that is the header and content of one of the
spams that this same user recieved. The spam email does not appear to
have any spamassassin score information in the header at all. Are these
two problems related? Is there some specific things with qmail or with
spamassassin I should be looking at for either or both of these issues?
I appreciate any input that can be offered to help resolve this
problem.
Steve
Microsoft Mail Internet Headers Version 2.0
Received: from mxi.occa.state.ok.us ([172.16.255.12]) by
mxi2.occa.state.ok.us with Microsoft SMTPSVC(6.0.3790.3959);
Tue, 2 Oct 2007 08:11:23 -0500
Received: from dellapp02.occa.state.ok.us
([204.87.111.225]) by mxi.occa.state.ok.us with Microsoft
SMTPSVC(5.0.2195.6713);
Tue, 2 Oct 2007 08:12:07 -0500
Received: (qmail 19008 invoked by uid 507); 2 Oct 2007
13:16:22 -0000
Received: by simscan 1.2.0 ppid: 18755, pid: 18756, t:
215.0297s
scanners: attach: 1.2.0 clamav:
0.88.4/m:40/d:2106 spam: 3.1.5
Received: from unknown (HELO smtp160.iad.emailsrvr.com)
(207.97.245.160)
by dellapp02.occa.state.ok.us with SMTP; 2 Oct 2007
13:12:47 -0000
Received-SPF: none (dellapp02.occa.state.ok.us: domain
at longwall.com does not designate permitted sender hosts)
Received: by relay6.relay.iad.emailsrvr.com
(Authenticated sender: dclemens-AT-longwall.com) with ESMTP id
3BB94661470;
Mon, 1 Oct 2007 11:11:53 -0400 (EDT)
Message-ID: <03...@DAVE>
Reply-To: "Dave Clemens" <dc...@longwall.com>
From: "Dave Clemens" <dc...@longwall.com>
To: <ti...@sbcglobal.net>,
<dw...@okcca.net>,
"Andi Holmes" <ah...@longwall.com>
Subject: Fw: Dressed in Black
Date: Mon, 1 Oct 2007 11:09:25 -0500
Organization: Longwall Associates, Inc.
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_037B_01C8041B.8717EF60"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138
Return-Path: dclemens@longwall.com
X-OriginalArrivalTime: 02 Oct 2007 13:12:07.0234 (UTC)
FILETIME=[D54FE220:01C804F5]
------=_NextPart_000_037B_01C8041B.8717EF60
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
------=_NextPart_000_037B_01C8041B.8717EF60
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
------=_NextPart_000_037B_01C8041B.8717EF60--
________________________________
Microsoft Mail Internet Headers Version 2.0
Received: from mxi.occa.state.ok.us ([172.16.255.12]) by
mxi2.occa.state.ok.us with Microsoft SMTPSVC(6.0.3790.3959);
Tue, 2 Oct 2007 12:18:10 -0500
Received: from dellapp02.occa.state.ok.us ([204.87.111.225]) by
mxi.occa.state.ok.us with Microsoft SMTPSVC(5.0.2195.6713);
Tue, 2 Oct 2007 12:18:53 -0500
Received: (qmail 594 invoked by uid 507); 2 Oct 2007 17:23:08
-0000
Received: by simscan 1.2.0 ppid: 399, pid: 401, t: 214.9277s
scanners: attach: 1.2.0 clamav: 0.88.4/m:40/d:2106 spam: 3.1.5
Received: from unknown (HELO LC03.reefwalk.com) (216.188.169.48)
by dellapp02.occa.state.ok.us with SMTP; 2 Oct 2007 17:19:33
-0000
Received-SPF: softfail (dellapp02.occa.state.ok.us:
transitioning SPF record at planetstarpic.com does not designate
216.188.169.48 as permitted sender)
Received: by LC03.reefwalk.com id h09uac07blkd for
<dw...@okcca.net>; Tue, 2 Oct 2007 10:15:10 -0700 (envelope-from
<22...@planetstarpic.com>)
Message-Id: <MB...@planetstarpic.com>
Reply-To: <Bo...@planetstarpic.com>
From: BoostMyCreditNow <Bo...@planetstarpic.com>
Subject: Donna, Raise Your Credit Score Quickly and Legally
Date: Tue, 02 Oct 2007 18:15:34 GMT
X-Complaints-To: <co...@planetstarpic.com>
To: <dw...@okcca.net>
Return-Path: 22199062.14985051@planetstarpic.com
X-OriginalArrivalTime: 02 Oct 2007 17:18:53.0703 (UTC)
FILETIME=[4EA7C170:01C80518]
-----Original Message-----
From: BoostMyCreditNow
[mailto:BoostMyCreditNow@planetstarpic.com
<ma...@planetstarpic.com> ]
Sent: Tuesday, October 02, 2007 1:16 PM
To: Donna Way
Subject: Donna, Raise Your Credit Score Quickly and Legally
Restore Your Credit Report Rating Quickly and Legally!
http://MBbejifafbmfeJL.planetstarpic.com/link.asp?a=c&u=58411513&e=14985
051
<http://mbbejifafbmfejl.planetstarpic.com/link.asp?a=c&u=58411513&e=1498
5051>
* Save tens of thousands of dollars off your home or car loan
* Get approved for new, low interest loans and credit cards
* Lower the finance charges on all your debt
We tell you the secrets the credit bureaus don't want you to
know!
Learn More at:
http://MBbejifafbmfeJL.planetstarpic.com/link.asp?a=c&u=58411513&e=14985
051
<http://mbbejifafbmfejl.planetstarpic.com/link.asp?a=c&u=58411513&e=1498
5051>
-----------------------------------------------------------
If you would no longer like to receive ads from BMCN please
click below:
http://MBbejifafbmfeJL.planetstarpic.com/link.asp?a=c&u=58411514&e=14985
051
<http://mbbejifafbmfejl.planetstarpic.com/link.asp?a=c&u=58411514&e=1498
5051>
Removal Requests, 716 N Ventura Rd #374, Oxnard, CA 93030-4404
If you think you received this email in error or would prefer
not to receive emails from us, click here:
http://MBbejifafbmfeJL.planetstarpic.com/link.asp?a=r&m=22199062&e=14985
051
<http://mbbejifafbmfejl.planetstarpic.com/link.asp?a=r&m=22199062&e=1498
5051>
Data Services List 5, 941 Orange Ave #207, Coronado, CA 92118