[Bug 214894] New: Spamd error when parsing email body with too long domain name.
https://bugzilla.novell.com/show_bug.cgi?id=214894
Summary: Spamd error when parsing email body with too long domain
name.
Product: SUSE Linux 10.1
Version: Final
Platform: PC
OS/Version: SuSE Linux 10.1
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Security
AssignedTo: security-team@suse.de
ReportedBy: robin.listas@telefonica.net
QAContact: qa@suse.de
Some one sent an email to
Hey, the "everyone-is-entitled-to-my-opinion-and-i-am-an-expert-and-asus-is-crap.com" domain is available!
inmediately, I saw this in my /var/log/warn file, which I happen to watch: Oct 24 23:46:06 nimrodel spamd[6105]: length of everyone-is-entitled-to-my-opinion-and-i-am-an-expert-and-asus-is-crap is larger than 63 octets at /usr/lib/perl5/vendor_perl/5.8.8/i586-linux-thread-multi/Net/DNS/Question.pm line 179 Oct 24 23:46:06 nimrodel spamd[6105]: plugin: eval failed: length of everyone-is-entitled-to-my-opinion-and-i-am-an-expert-and-asus-is-crap is larger than 63 octets at /usr/lib/perl5/vendor_perl/5.8.8/i586-linux-thread-multi/Net/DNS/Question.pm line 179 Using spamassassin-3.1.3-3.2 in SuSE 10.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894 lkundrak@redhat.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lkundrak@redhat.com ------- Comment #1 from lkundrak@redhat.com 2006-10-25 10:37 MST ------- It looks like some spamassassin plugin is complaining. Could you please specify which plugins do you use? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894 ------- Comment #2 from robin.listas@telefonica.net 2006-10-25 11:52 MST ------- File /etc/mail/spamassassin/init.pre (2006-07-14) contains: loadplugin Mail::SpamAssassin::Plugin::URIDNSBL loadplugin Mail::SpamAssassin::Plugin::Hashcash loadplugin Mail::SpamAssassin::Plugin::SPF File /etc/mail/spamassassin/v310.pre (2005-11-23) contains (I can't say if it is active): loadplugin Mail::SpamAssassin::Plugin::Pyzor loadplugin Mail::SpamAssassin::Plugin::SpamCop loadplugin Mail::SpamAssassin::Plugin::AWL loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold loadplugin Mail::SpamAssassin::Plugin::WhiteListSubject loadplugin Mail::SpamAssassin::Plugin::MIMEHeader loadplugin Mail::SpamAssassin::Plugin::ReplaceTags File /etc/mail/spamassassin/v312.pre (2006-07-27): none. File /etc/mail/spamassassin/init.pre.-3.1.0-0.1 (2005-10-30) contains: loadplugin Mail::SpamAssassin::Plugin::URIDNSBL loadplugin Mail::SpamAssassin::Plugin::Hashcash loadplugin Mail::SpamAssassin::Plugin::SPF File /etc/mail/spamassassin/init.pre.-3.0.4-1.1 (2005-05-14) contains: loadplugin Mail::SpamAssassin::Plugin::URIDNSBL loadplugin Mail::SpamAssassin::Plugin::Hashcash loadplugin Mail::SpamAssassin::Plugin::SPF I'm sorry, but I have no idea which of those files are active, but I assume you will know that better than me. I have spamassassin-3.1.3-3.2, stock version with SuSE 10.1. System has only official YOU patches, AFAIK. Filtering is done via procmail, spamd, and spamc. If there is a command that lists the active plugins, just email me and I will check. Or write a comment in bugzilla, and it will email me. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894 ------- Comment #3 from suse-beta@cboltz.de 2006-10-29 14:55 MST ------- might be interesting: /usr/lib/perl5> grep -r 'larger than .*octets' . /vendor_perl/5.8.8/x86_64-linux-thread-multi/Net/DNS/Packet.pm: croak "length of $first is larger than 63 octets" if $length>63; -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894 varkoly@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|varkoly@novell.com |anicka@novell.com ------- Comment #4 from varkoly@novell.com 2006-12-22 01:44 MST ------- This is not a bug of spamassassin this is a bug (or feature) of perl-Net-DNS. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894 anicka@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |INVALID ------- Comment #5 from anicka@novell.com 2007-01-01 11:32 MST ------- As RFC 1035 states: Labels must be 63 characters or less. This is definitely not a bug: perl-Net-DNS just complies with the standard. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894 robin.listas@telefonica.net changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|INVALID | ------- Comment #6 from robin.listas@telefonica.net 2007-02-11 06:01 MST ------- I sugest then that it is not a bug of perl-Net-DNS, but it is a bug of SpamAssassin itself because it tries to evaluate o non standard, faked, domain name. In any case, it should not be reported to syslog. I don't know if that has been solved or not. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894 anicka@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|anicka@novell.com |varkoly@novell.com Status|REOPENED |NEW ------- Comment #7 from anicka@novell.com 2007-02-21 09:36 MST ------- This problem cannot be fixed in perl-Net-DNS, so I am reassigning it to spamassassin maintainer. I agree that things like that should not be output to syslog but it is up to spamd to take care. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894 varkoly@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |robin.listas@telefonica.net ------- Comment #8 from varkoly@novell.com 2007-03-15 04:53 MST ------- Please try the ne spamassassin version: ftp://ftp.suse.com/pub/people/varkoly/spamassassin/3.1.8/10.1-i386/ -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894 robin.listas@telefonica.net changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |NEW Info Provider|robin.listas@telefonica.net | ------- Comment #9 from robin.listas@telefonica.net 2007-03-20 05:20 MST ------- (In reply to comment #8)
Please try the ne spamassassin version: ftp://ftp.suse.com/pub/people/varkoly/spamassassin/3.1.8/10.1-i386/
Ok. I have 10.2 by now, so I download (watch line wrap! This bugzilla thing should not wrap lines!): ftp.gwdg.de/pub/linux/suse/ftp.suse.com/people/varkoly/spamassassin/3.1.8/10.2-i386 -rw-r--r-- 1 cer users 761640 2007-03-13 15:18 perl-spamassassin-3.1.8-4.1.i586.rpm -rw-r--r-- 1 cer users 141741 2007-03-13 15:18 spamassassin-3.1.8-4.1.i586.rpm -rw-r--r-- 1 cer users 1019572 2007-03-13 15:18 spamassassin-3.1.8-4.1.src.rpm -rw-r--r-- 1 cer users 55269 2007-03-13 15:18 spamassassin-debuginfo-3.1.8-4.1.i586.rpm -rw-r--r-- 1 cer users 17645 2007-03-13 15:18 spamassassin.changes Install: nimrodel:/xtr/cer/download/updates/10.2/suse_people/varkoly # rpm -q -a | grep spam spamassassin-3.1.7-6.1 perl-spamassassin-3.1.7-6.1 nimrodel:/xtr/cer/download/updates/10.2/suse_people/varkoly # rpm --freshen *rpm warning: /etc/mail/spamassassin/local.cf created as /etc/mail/spamassassin/local.cf.rpmnew Updating etc/sysconfig/spamd... nimrodel:/xtr/cer/download/updates/10.2/suse_people/varkoly # rpm -q -a | grep spam perl-spamassassin-3.1.8-4.1 spamassassin-3.1.8-4.1 nimrodel:/xtr/cer/download/updates/10.2/suse_people/varkoly # rcspamd restart Shutting down spamd done Starting spamd done Log: Mar 20 11:56:32 nimrodel spamd[4732]: spamd: server killed by SIGTERM, shutting down Mar 20 11:56:32 nimrodel spamd[4732]: spamd: cannot unlink /var/run/spamd.pid: No such file or directory Mar 20 11:56:48 nimrodel spamd[32318]: logger: removing stderr method Mar 20 11:56:51 nimrodel spamd[32324]: rules: meta test DIGEST_MULTIPLE has undefined dependency 'DCC_CHECK' Mar 20 11:56:51 nimrodel spamd[32324]: spamd: server started on port 783/tcp (running version 3.1.8) Mar 20 11:56:51 nimrodel spamd[32324]: spamd: server pid: 32324 Mar 20 11:56:51 nimrodel spamd[32324]: spamd: server successfully spawned child process, pid 32325 Mar 20 11:56:51 nimrodel spamd[32324]: spamd: server successfully spawned child process, pid 32326 Mar 20 11:56:51 nimrodel spamd[32324]: prefork: child states: II Mar 20 11:57:35 nimrodel spamd[32324]: spamd: server killed by SIGTERM, shutting down Mar 20 11:57:47 nimrodel spamd[32365]: logger: removing stderr method Mar 20 11:57:50 nimrodel spamd[32367]: rules: meta test DIGEST_MULTIPLE has undefined dependency 'DCC_CHECK' Mar 20 11:57:51 nimrodel spamd[32367]: spamd: server started on port 783/tcp (running version 3.1.8) Mar 20 11:57:51 nimrodel spamd[32367]: spamd: server pid: 32367 Mar 20 11:57:51 nimrodel spamd[32367]: spamd: server successfully spawned child process, pid 32387 Mar 20 11:57:51 nimrodel spamd[32367]: spamd: server successfully spawned child process, pid 32388 Mar 20 11:57:51 nimrodel spamd[32367]: prefork: child states: II As by now it seems I have lost track of the original email that triggered this, I simply email to meself one with that long "domain":
Hey, the "everyone-is-entitled-to-my-opinion-and-i-am-an-expert-and-asus-is-crap.com" domain is available!
Here goes the mail.debug log:
Mar 20 12:05:43 nimrodel postfix/smtpd[32514]: connect from
localhost[127.0.0.1]
Mar 20 12:05:43 nimrodel postfix/smtpd[32514]: 8FCD5B6EC5:
client=localhost[127.0.0.1]
Mar 20 12:05:43 nimrodel postfix/cleanup[32517]: 8FCD5B6EC5:
message-id=
https://bugzilla.novell.com/show_bug.cgi?id=214894 ------- Comment #10 from varkoly@novell.com 2007-03-20 09:02 MST ------- You have written:
Ok. I have 10.2 by now, so I download (watch line wrap! This bugzilla thing should not wrap lines!):
It is good so. For log files there is the possibility to create attachements. Comments are comments :-) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=214894
User coolo@novell.com added comment
https://bugzilla.novell.com/show_bug.cgi?id=214894#c12
Stephan Kulow
https://bugzilla.novell.com/show_bug.cgi?id=214894
User coolo@novell.com added comment
https://bugzilla.novell.com/show_bug.cgi?id=214894#c13
--- Comment #13 from Stephan Kulow
https://bugzilla.novell.com/show_bug.cgi?id=214894
User coolo@novell.com added comment
https://bugzilla.novell.com/show_bug.cgi?id=214894#c14
--- Comment #14 from Stephan Kulow
https://bugzilla.novell.com/show_bug.cgi?id=214894
User coolo@novell.com added comment
https://bugzilla.novell.com/show_bug.cgi?id=214894#c15
Stephan Kulow
participants (1)
-
bugzilla_noreply@novell.com