Re: *****SPAM***** Spamass-milt-list Digest, Vol 18, Issue 3

[Jeff D. Hamann]

I'm also noticing that spammilter will stop working after a little while.
I'm using a FreeBSD port (FreeBSD 4.4) spamass-milter-0.2.0 and have beenm
running it for about a couple of weeks and it seems to stop working after
about two days.

Jeff.

----- Original Message ----- 
From: <address@hidden>
To: <address@hidden>
Sent: Tuesday, July 06, 2004 9:00 AM
Subject: *****SPAM***** Spamass-milt-list Digest, Vol 18, Issue 3


> SPAM: -------------------- Start SpamAssassin
results ----------------------
> SPAM: This mail is probably spam.  The original message has been altered
> SPAM: so you can recognise or block similar unwanted mail in future.
> SPAM: See http://spamassassin.org/tag/ for more details.
> SPAM:
> SPAM: Content analysis details:   (5.10 hits, 5 required)
> SPAM: SUBJECT_IS_LIST    (-0.2 points) Subject contains newsletter header
(list)
> SPAM: NO_REAL_NAME       (1.3 points)  From: does not include a real name
> SPAM: DATE_MISSING       (0.8 points)  Missing Date: header
> SPAM: SPAM_PHRASE_02_03  (0.8 points)  BODY: Spam phrases score is 02 to
03 (medium)
> SPAM:                    [score: 2]
> SPAM: QUOTED_EMAIL_TEXT  (-0.8 points) BODY: Contains what looks like a
quoted email text
> SPAM: Y_SILLY_SALUTATION (0.7 points)  BODY: Foobar,+ salutation
> SPAM: SUPERLONG_LINE     (0.0 points)  BODY: Contains a line >=199
characters long
> SPAM: CARRIAGE_RETURNS   (0.3 points)  RAW: Message contains a lot of ^M
characters
> SPAM: RCVD_IN_ORBS       (2.2 points)  RBL: Received via a relay in
orbs.dorkslayers.com
> SPAM:                    [RBL check: found
165.76.232.199.orbs.dorkslayers.com.]
> SPAM:
> SPAM: -------------------- End of SpamAssassin
results ---------------------
>
> Send Spamass-milt-list mailing list submissions to
> address@hidden
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.nongnu.org/mailman/listinfo/spamass-milt-list
> or, via email, send a message with subject or body 'help' to
> address@hidden
>
> You can reach the person managing the list at
> address@hidden
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Spamass-milt-list digest..."
>
>
> Today's Topics:
>
>    1. Re: Release? (Kees Monshouwer)
>    2. Re: Sudden instability (SG)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Mon, 5 Jul 2004 19:33:45 +0200
> From: "Kees Monshouwer" <address@hidden>
> Subject: Re: Release?
> To: <address@hidden>
> Message-ID: <address@hidden>
> Content-Type: text/plain; charset="iso-8859-1"
>
> Hello Dan,
>
> 17 February 2004 you said:
>
> > I have a couple things I need to commit (including code
> > fixing your CR issue), and then I'll release a new
> > version.
>
> Now (4 months later) there is still nothing :-( I think the time has come
to realease a new version. 0.2.0 has some nasty bugs and it is no longer the
right thing to work with. The cvs code is quit stable at the moment (no cvs
version related problems reported in this list for a long time). So what is
the problem ;-)
>
> ---
> Kees
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL:
http://lists.gnu.org/pipermail/spamass-milt-list/attachments/20040705/bca8bf21/attachment.html
>
> ------------------------------
>
> Message: 2
> Date: Tue, 6 Jul 2004 06:21:29 -0700
> From: SG <address@hidden>
> Subject: Re: Sudden instability
> To: address@hidden
> Message-ID: <address@hidden>
> Content-Type: text/plain; charset=US-ASCII
>
> So what's the verdict? I'm using a FreeBSD package... my sa/milt seems
> to stop working, is it crashing? Was it a new spammer's header? Is the
> solution to upgrade to the latest? Can i just get the latest from
> cvssup - will I have to reconfigure? BTW - I have envelope on, and it
> still crashes. Interesting there hasn't been more on this, could it be
> Todd and I are the only ones using the older version?
>
> Thanks!
> sg
>
> On Sat, 3 Jul 2004 00:43:15 -0700, Todd Lyons <address@hidden> wrote:
> > Dan Nelson wanted us to know:
> >
> > >> >It could be that there's a new spam sender out there with unusual
> > >> >header or HELO information that happens to crash the milter.  The
> > >> >report_safe stuff shouldn't make any difference.  I believe the
> > >> >redhat
> > >> Turns out that it did.  I reverted the change on mx1 and mx3, leaving
> > >> mx2 as the only machine with the report_safe 0 setting.  Over the
> > >> past 24 hours, only mx2 has crashed (about 5 times since this time
> > >> yesterday).
> > >That's interesting.  Spamass-milter actually replaces the body on spams
> > >even if it's unchanged, so the only real difference between your before
> > >and after cases should have been the replacement of Content-Type:,
> > >which shouldn't really make any difference.  I don't run report_safe on
> > >my systems so I have never personally run through this codepath.  I'll
> > >turn it on on my personal box, but I only get ~20 spams a day so it may
> > >take a while to die :)
> > >> I don't think I used the RedHat RPM, I rolled my own.  I can't find
> > >> my srpm or my spec file any more, I think I built it on a box that
> > >> we've since reimaged to a Gentoo box.
> > >Then you may be missing the "empty-body" patch, which fixed a crash on
> > >a message with no body at all.
> >
> > There's a very good possibility that is true.  I took a CVS snapshot
> > from this afternoon, compiled it, installed it on one of my 3 boxen,
> > then reenabled the report_safe 0 setting.  So far it has run with no
> > crashes.  If it makes it through the weekend, I will put it on all of
> > the boxen and give you a report middle of next week.
> >
> > >Valgrind is easy to use.  You just stick "valgrind" in front of the
> > >commandline and it does the rest.  Newer valgrinds require the
> >
> > Yeah I played with it a bit this afternoon. It's quite nice.  I think
> > that you're right above though.  I was running pristine 0.2.0 code, so
> > none of the recent fixes in CVS had made its way into my code.  I think
> > that I'm going to be much better off now.  How much, I will report next
> > week.
> >
> > I also hang out in the #Mandrake, #Clamav, and #Spamassassin channels on
> > irc.freenode.net.  You can usually catch me there.
> > --
> > Regards...              Todd
> >  We should not be building surveillance technology into standards.
> >  Law enforcement was not supposed to be easy.  Where it is easy,
> >  it's called a police state.             -- Jeff Schiller on NANOG
> > Linux kernel 2.6.3-8mdkenterprise   3 users,  load average: 0.00, 0.01,
0.00
> >
> >
> >
> >
> > _______________________________________________
> > Spamass-milt-list mailing list
> > address@hidden
> > http://lists.nongnu.org/mailman/listinfo/spamass-milt-list
> >
>
>
>
>
> ------------------------------
>
> _______________________________________________
> Spamass-milt-list mailing list
> address@hidden
> http://lists.nongnu.org/mailman/listinfo/spamass-milt-list
>
>
> End of Spamass-milt-list Digest, Vol 18, Issue 3
> ************************************************
>