[Bug 214894] New: Spamd error when parsing email body with too long domain name.
https://bugzilla.novell.com/show_bug.cgi?id=214894 Summary: Spamd error when parsing email body with too long domain name. Product: SUSE Linux 10.1 Version: Final Platform: PC OS/Version: SuSE Linux 10.1 Status: NEW Severity: Normal Priority: P5 - None Component: Security AssignedTo: security-team@suse.de ReportedBy: robin.listas@telefonica.net QAContact: qa@suse.de Some one sent an email to <opensuse@opensuse.org> with this sentence in the body:
Hey, the "everyone-is-entitled-to-my-opinion-and-i-am-an-expert-and-asus-is-crap.com" domain is available!
inmediately, I saw this in my /var/log/warn file, which I happen to watch: Oct 24 23:46:06 nimrodel spamd[6105]: length of everyone-is-entitled-to-my-opinion-and-i-am-an-expert-and-asus-is-crap is larger than 63 octets at /usr/lib/perl5/vendor_perl/5.8.8/i586-linux-thread-multi/Net/DNS/Question.pm line 179 Oct 24 23:46:06 nimrodel spamd[6105]: plugin: eval failed: length of everyone-is-entitled-to-my-opinion-and-i-am-an-expert-and-asus-is-crap is larger than 63 octets at /usr/lib/perl5/vendor_perl/5.8.8/i586-linux-thread-multi/Net/DNS/Question.pm line 179 Using spamassassin-3.1.3-3.2 in SuSE 10.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894 lkundrak@redhat.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lkundrak@redhat.com ------- Comment #1 from lkundrak@redhat.com 2006-10-25 10:37 MST ------- It looks like some spamassassin plugin is complaining. Could you please specify which plugins do you use? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894 ------- Comment #2 from robin.listas@telefonica.net 2006-10-25 11:52 MST ------- File /etc/mail/spamassassin/init.pre (2006-07-14) contains: loadplugin Mail::SpamAssassin::Plugin::URIDNSBL loadplugin Mail::SpamAssassin::Plugin::Hashcash loadplugin Mail::SpamAssassin::Plugin::SPF File /etc/mail/spamassassin/v310.pre (2005-11-23) contains (I can't say if it is active): loadplugin Mail::SpamAssassin::Plugin::Pyzor loadplugin Mail::SpamAssassin::Plugin::SpamCop loadplugin Mail::SpamAssassin::Plugin::AWL loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold loadplugin Mail::SpamAssassin::Plugin::WhiteListSubject loadplugin Mail::SpamAssassin::Plugin::MIMEHeader loadplugin Mail::SpamAssassin::Plugin::ReplaceTags File /etc/mail/spamassassin/v312.pre (2006-07-27): none. File /etc/mail/spamassassin/init.pre.-3.1.0-0.1 (2005-10-30) contains: loadplugin Mail::SpamAssassin::Plugin::URIDNSBL loadplugin Mail::SpamAssassin::Plugin::Hashcash loadplugin Mail::SpamAssassin::Plugin::SPF File /etc/mail/spamassassin/init.pre.-3.0.4-1.1 (2005-05-14) contains: loadplugin Mail::SpamAssassin::Plugin::URIDNSBL loadplugin Mail::SpamAssassin::Plugin::Hashcash loadplugin Mail::SpamAssassin::Plugin::SPF I'm sorry, but I have no idea which of those files are active, but I assume you will know that better than me. I have spamassassin-3.1.3-3.2, stock version with SuSE 10.1. System has only official YOU patches, AFAIK. Filtering is done via procmail, spamd, and spamc. If there is a command that lists the active plugins, just email me and I will check. Or write a comment in bugzilla, and it will email me. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894 ------- Comment #3 from suse-beta@cboltz.de 2006-10-29 14:55 MST ------- might be interesting: /usr/lib/perl5> grep -r 'larger than .*octets' . /vendor_perl/5.8.8/x86_64-linux-thread-multi/Net/DNS/Packet.pm: croak "length of $first is larger than 63 octets" if $length>63; -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894 varkoly@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|varkoly@novell.com |anicka@novell.com ------- Comment #4 from varkoly@novell.com 2006-12-22 01:44 MST ------- This is not a bug of spamassassin this is a bug (or feature) of perl-Net-DNS. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894 anicka@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |INVALID ------- Comment #5 from anicka@novell.com 2007-01-01 11:32 MST ------- As RFC 1035 states: Labels must be 63 characters or less. This is definitely not a bug: perl-Net-DNS just complies with the standard. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894 robin.listas@telefonica.net changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|INVALID | ------- Comment #6 from robin.listas@telefonica.net 2007-02-11 06:01 MST ------- I sugest then that it is not a bug of perl-Net-DNS, but it is a bug of SpamAssassin itself because it tries to evaluate o non standard, faked, domain name. In any case, it should not be reported to syslog. I don't know if that has been solved or not. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894 anicka@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|anicka@novell.com |varkoly@novell.com Status|REOPENED |NEW ------- Comment #7 from anicka@novell.com 2007-02-21 09:36 MST ------- This problem cannot be fixed in perl-Net-DNS, so I am reassigning it to spamassassin maintainer. I agree that things like that should not be output to syslog but it is up to spamd to take care. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894 varkoly@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |robin.listas@telefonica.net ------- Comment #8 from varkoly@novell.com 2007-03-15 04:53 MST ------- Please try the ne spamassassin version: ftp://ftp.suse.com/pub/people/varkoly/spamassassin/3.1.8/10.1-i386/ -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894 robin.listas@telefonica.net changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|robin.listas@telefonica.net | ------- Comment #9 from robin.listas@telefonica.net 2007-03-20 05:20 MST ------- (In reply to comment #8)
Please try the ne spamassassin version: ftp://ftp.suse.com/pub/people/varkoly/spamassassin/3.1.8/10.1-i386/
Ok. I have 10.2 by now, so I download (watch line wrap! This bugzilla thing should not wrap lines!): ftp.gwdg.de/pub/linux/suse/ftp.suse.com/people/varkoly/spamassassin/3.1.8/10.2-i386 -rw-r--r-- 1 cer users 761640 2007-03-13 15:18 perl-spamassassin-3.1.8-4.1.i586.rpm -rw-r--r-- 1 cer users 141741 2007-03-13 15:18 spamassassin-3.1.8-4.1.i586.rpm -rw-r--r-- 1 cer users 1019572 2007-03-13 15:18 spamassassin-3.1.8-4.1.src.rpm -rw-r--r-- 1 cer users 55269 2007-03-13 15:18 spamassassin-debuginfo-3.1.8-4.1.i586.rpm -rw-r--r-- 1 cer users 17645 2007-03-13 15:18 spamassassin.changes Install: nimrodel:/xtr/cer/download/updates/10.2/suse_people/varkoly # rpm -q -a | grep spam spamassassin-3.1.7-6.1 perl-spamassassin-3.1.7-6.1 nimrodel:/xtr/cer/download/updates/10.2/suse_people/varkoly # rpm --freshen *rpm warning: /etc/mail/spamassassin/local.cf created as /etc/mail/spamassassin/local.cf.rpmnew Updating etc/sysconfig/spamd... nimrodel:/xtr/cer/download/updates/10.2/suse_people/varkoly # rpm -q -a | grep spam perl-spamassassin-3.1.8-4.1 spamassassin-3.1.8-4.1 nimrodel:/xtr/cer/download/updates/10.2/suse_people/varkoly # rcspamd restart Shutting down spamd done Starting spamd done Log: Mar 20 11:56:32 nimrodel spamd[4732]: spamd: server killed by SIGTERM, shutting down Mar 20 11:56:32 nimrodel spamd[4732]: spamd: cannot unlink /var/run/spamd.pid: No such file or directory Mar 20 11:56:48 nimrodel spamd[32318]: logger: removing stderr method Mar 20 11:56:51 nimrodel spamd[32324]: rules: meta test DIGEST_MULTIPLE has undefined dependency 'DCC_CHECK' Mar 20 11:56:51 nimrodel spamd[32324]: spamd: server started on port 783/tcp (running version 3.1.8) Mar 20 11:56:51 nimrodel spamd[32324]: spamd: server pid: 32324 Mar 20 11:56:51 nimrodel spamd[32324]: spamd: server successfully spawned child process, pid 32325 Mar 20 11:56:51 nimrodel spamd[32324]: spamd: server successfully spawned child process, pid 32326 Mar 20 11:56:51 nimrodel spamd[32324]: prefork: child states: II Mar 20 11:57:35 nimrodel spamd[32324]: spamd: server killed by SIGTERM, shutting down Mar 20 11:57:47 nimrodel spamd[32365]: logger: removing stderr method Mar 20 11:57:50 nimrodel spamd[32367]: rules: meta test DIGEST_MULTIPLE has undefined dependency 'DCC_CHECK' Mar 20 11:57:51 nimrodel spamd[32367]: spamd: server started on port 783/tcp (running version 3.1.8) Mar 20 11:57:51 nimrodel spamd[32367]: spamd: server pid: 32367 Mar 20 11:57:51 nimrodel spamd[32367]: spamd: server successfully spawned child process, pid 32387 Mar 20 11:57:51 nimrodel spamd[32367]: spamd: server successfully spawned child process, pid 32388 Mar 20 11:57:51 nimrodel spamd[32367]: prefork: child states: II As by now it seems I have lost track of the original email that triggered this, I simply email to meself one with that long "domain":
Hey, the "everyone-is-entitled-to-my-opinion-and-i-am-an-expert-and-asus-is-crap.com" domain is available!
Here goes the mail.debug log: Mar 20 12:05:43 nimrodel postfix/smtpd[32514]: connect from localhost[127.0.0.1] Mar 20 12:05:43 nimrodel postfix/smtpd[32514]: 8FCD5B6EC5: client=localhost[127.0.0.1] Mar 20 12:05:43 nimrodel postfix/cleanup[32517]: 8FCD5B6EC5: message-id=<Pine.LNX.4.64.0703201204240.31603@nimrodel.valinor> Mar 20 12:05:43 nimrodel postfix/smtpd[32514]: disconnect from localhost[127.0.0.1] Mar 20 12:05:43 nimrodel postfix/qmgr[11858]: 8FCD5B6EC5: from=<cer@nimrodel.valinor>, size=624, nrcpt=1 (queue active) Mar 20 12:05:43 nimrodel amavis[29501]: (29501-03) LMTP::10024 /var/spool/amavis/tmp/amavis-20070320T111418-29501: <cer@nimrodel.valinor> -> <cer@nimrodel.valinor> SIZE=624 Received: from nimrod el.valinor ([127.0.0.1]) by localhost (nimrodel.valinor [127.0.0.1]) (amavisd-new, port 10024) with LMTP for <cer@nimrodel.valinor>; Tue, 20 Mar 2007 12:05:43 +0100 (CET) Mar 20 12:05:43 nimrodel amavis[29501]: (29501-03) Checking: hwoX2Fmu69eU [127.0.0.1] <cer@nimrodel.valinor> -> <cer@nimrodel.valinor> Mar 20 12:05:44 nimrodel postfix/smtpd[32520]: connect from localhost[127.0.0.1] Mar 20 12:05:44 nimrodel postfix/smtpd[32520]: 1C01AB6F5D: client=localhost[127.0.0.1] Mar 20 12:05:44 nimrodel postfix/cleanup[32517]: 1C01AB6F5D: message-id=<Pine.LNX.4.64.0703201204240.31603@nimrodel.valinor> Mar 20 12:05:44 nimrodel postfix/smtpd[32520]: disconnect from localhost[127.0.0.1] Mar 20 12:05:44 nimrodel amavis[29501]: (29501-03) FWD via SMTP: <cer@nimrodel.valinor> -> <cer@nimrodel.valinor>, BODY=8BITMIME 250 2.6.0 Ok, id=29501-03, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 1C01AB6F5D Mar 20 12:05:44 nimrodel postfix/qmgr[11858]: 1C01AB6F5D: from=<cer@nimrodel.valinor>, size=1014, nrcpt=1 (queue active) Mar 20 12:05:44 nimrodel amavis[29501]: (29501-03) Passed CLEAN, LOCAL [127.0.0.1] [127.0.0.1] <cer@nimrodel.valinor> -> <cer@nimrodel.valinor>, Message-ID: <Pine.LNX.4.64.0703201204240.31603@ni mrodel.valinor>, mail_id: hwoX2Fmu69eU, Hits: -, queued_as: 1C01AB6F5D, 604 ms Mar 20 12:05:44 nimrodel postfix/lmtp[32518]: 8FCD5B6EC5: to=<cer@nimrodel.valinor>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.91, delays=0.25/0.04/0.01/0.62, dsn=2.6.0, status=sent (250 2.6.0 O k, id=29501-03, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 1C01AB6F5D) Mar 20 12:05:44 nimrodel postfix/qmgr[11858]: 8FCD5B6EC5: removed Mar 20 12:05:45 nimrodel spamd[32387]: spamd: connection from localhost [127.0.0.1] at port 8971 Mar 20 12:05:45 nimrodel spamd[32387]: spamd: setuid to cer succeeded Mar 20 12:05:47 nimrodel spamd[32387]: spamd: processing message <Pine.LNX.4.64.0703201204240.31603@nimrodel.valinor> for cer:500 Mar 20 12:05:47 nimrodel spamd[32387]: length of everyone-is-entitled-to-my-opinion-and-i-am-an-expert-and-asus-is-crap is larger than 63 octets; see RFC1035 section 2.3.1 at /usr/lib/perl5/vend or_perl/5.8.8/i586-linux-thread-multi/Net/DNS/Question.pm line 199 Mar 20 12:05:47 nimrodel spamd[32387]: plugin: eval failed: length of everyone-is-entitled-to-my-opinion-and-i-am-an-expert-and-asus-is-crap is larger than 63 octets; see RFC1035 section 2.3.1 a t /usr/lib/perl5/vendor_perl/5.8.8/i586-linux-thread-multi/Net/DNS/Question.pm line 199 Mar 20 12:05:48 nimrodel spamd[32387]: spamd: clean message (-2.1/5.0) for cer:500 in 3.5 seconds, 1146 bytes. Mar 20 12:05:48 nimrodel spamd[32387]: spamd: result: . -2 - AWL,BAYES_00 scantime=3.5,size=1146,user=cer,uid=500,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=8971,mid=<Pine.LNX.4.64 0703201204240.31603@nimrodel.valinor>,bayes=1.50712775592865e-13,autolearn=disabled Mar 20 12:05:48 nimrodel postfix/local[32521]: 1C01AB6F5D: to=<cer@nimrodel.valinor>, relay=local, delay=4.7, delays=0.23/0.11/0/4.4, dsn=2.0.0, status=sent (delivered to command: /usr/bin/procm ail) Mar 20 12:05:48 nimrodel postfix/qmgr[11858]: 1C01AB6F5D: removed Mar 20 12:05:48 nimrodel spamd[32367]: prefork: child states: II The /var/log/warn file also has two entries: Mar 20 12:05:47 nimrodel spamd[32387]: length of everyone-is-entitled-to-my-opinion-and-i-am-an-expert-and-asus-is-crap is larger than 63 octets; see RFC1035 section 2.3.1 at /usr/lib/perl5/vend or_perl/5.8.8/i586-linux-thread-multi/Net/DNS/Question.pm line 199 Mar 20 12:05:47 nimrodel spamd[32387]: plugin: eval failed: length of everyone-is-entitled-to-my-opinion-and-i-am-an-expert-and-asus-is-crap is larger than 63 octets; see RFC1035 section 2.3.1 a t /usr/lib/perl5/vendor_perl/5.8.8/i586-linux-thread-multi/Net/DNS/Question.pm line 199 The mail headers contain: X-Spam-Status: No, score=-2.1 required=5.0 tests=AWL,BAYES_00 autolearn=disabled version=3.1.8 IMO, I think that this thing should not trigger an error, and should not report at "warn" level, but "info" or "debug" level. It is not important to a user. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894 ------- Comment #10 from varkoly@novell.com 2007-03-20 09:02 MST ------- You have written:
Ok. I have 10.2 by now, so I download (watch line wrap! This bugzilla thing should not wrap lines!):
It is good so. For log files there is the possibility to create attachements. Comments are comments :-) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894 User coolo@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=214894#c12 Stephan Kulow <coolo@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|LATER | --- Comment #12 from Stephan Kulow <coolo@novell.com> 2008-06-25 03:40:28 MDT --- mass reopening all SuSE Linux bugs that are set to REMIND+LATER to change the resolution to WONTFIX (adapting to new policy) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=214894 User coolo@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=214894#c13 --- Comment #13 from Stephan Kulow <coolo@novell.com> 2008-06-25 03:41:21 MDT --- mass reopening all SuSE Linux bugs that are set to REMIND+LATER to change the resolution to WONTFIX (adapting to new policy) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=214894 User coolo@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=214894#c14 --- Comment #14 from Stephan Kulow <coolo@novell.com> 2008-06-25 03:43:53 MDT --- mass reopening all SuSE Linux bugs that are set to REMIND+LATER to change the resolution to WONTFIX (adapting to new policy) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=214894 User coolo@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=214894#c15 Stephan Kulow <coolo@novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution| |WONTFIX --- Comment #15 from Stephan Kulow <coolo@novell.com> 2008-06-25 03:56:53 MDT --- Closing old LATER+REMIND bugs as WONTFIX - if you still plan to work on it, feel free to reopen and set to ASSIGNED. In case the report saw repeated reopen comments, it's due to bugzilla timing out on the huge request ;( -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com