I have the most recent versions of v2 installed on several servers and randomly assp crashes. This has happened with at least 2 different versions of assp most recently 2.0.2 0.0.01. There is never any message in the log file. I know that it has crashed because when I restart assp it tries to stop assp and shows that no process was found to stop. Anyway this happened again today and I restarted it, a few minutes later on the console window I saw the following error when assp crashed again. I am using Red Hat Enterprise Linux Server release 5.2.
*** glibc detected *** perl: double free or corruption (fasttop): 0x98f3e938 *** ======= Backtrace: ========= /lib/libc.so.6[0x6acb16] /lib/libc.so.6(cfree+0x90)[0x6b0030] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_newCONSTSU B+0x154)[0x150354] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so[0x15f19c] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_pp_anoncod e+0x8c)[0x1aee6c] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_runops_sta ndard+0x1f)[0x18298f] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so[0x12303e] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_call_sv+0x 5e6)[0x127906] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_call_list+ 0x20b)[0x127c2b] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_newATTRSUB +0x1152)[0x15b482] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_utilize+0x 331)[0x1596e1] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_yyparse+0x 1b22)[0x14a8c2] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so[0x1b6300] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_pp_require +0xd52)[0x1b81b2] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_runops_sta ndard+0x1f)[0x18298f] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so[0x12303e] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so(Perl_call_sv+0x 5e6)[0x127906] /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/threads/threads.so[0x2647c a] /lib/libpthread.so.0[0x7bd45b] /lib/libc.so.6(clone+0x5e)[0x714c4e] ======= Memory map: ======== 00101000-0022c000 r-xp 00000000 09:00 490322 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so 0022c000-00231000 rwxp 0012a000 09:00 490322 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/CORE/libperl.so 00231000-00233000 rwxp 00231000 00:00 0 00233000-0023c000 r-xp 00000000 09:00 491083 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/List/Util/Util.so 0023c000-0023d000 rwxp 00008000 09:00 491083 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/List/Util/Util.so 0023d000-00245000 r-xp 00000000 09:00 491053 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Encode/Encode.so 00245000-00246000 rwxp 00007000 09:00 491053 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Encode/Encode.so 00246000-0024b000 r-xp 00000000 09:00 492010 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so 0024b000-0024c000 rwxp 00005000 09:00 492010 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/Time/HiRes/HiRes.so 0024c000-00256000 r-xp 00000000 09:00 522999 /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/HTML/Parser/Pa rser.so 00256000-00257000 rwxp 0000a000 09:00 522999 /usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/HTML/Parser/Pa rser.so 00257000-0025b000 r-xp 00000000 09:00 689969 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Thread/State/Sta te.so 0025b000-0025c000 rwxp 00003000 09:00 689969 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Thread/State/Sta te.so 0025d000-00267000 r-xp 00000000 09:00 490610 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/threads/threads.so 00267000-00268000 rwxp 00009000 09:00 490610 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/threads/threads.so 00268000-002b8000 r-xp 00000000 09:00 689996 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/BerkeleyDB/Berke leyDB.so 002b8000-002b9000 rwxp 00050000 09:00 689996 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/BerkeleyDB/Berke leyDB.so 002b9000-002c0000 r-xp 00000000 09:00 2711777 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/NetAddr/IP/Util/ Util.so 002c0000-002c1000 rwxp 00006000 09:00 2711777 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/NetAddr/IP/Util/ Util.so 002c1000-002c5000 r-xp 00000000 09:00 1110851 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Digest/SHA1/SHA1 .so 002c5000-002c6000 rwxp 00003000 09:00 1110851 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Digest/SHA1/SHA1 .so 002c6000-002c8000 r-xp 00000000 09:00 491247 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/PerlIO/scalar/scalar.so 002c8000-002c9000 rwxp 00001000 09:00 491247 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/PerlIO/scalar/scalar.so 002c9000-002d6000 r-xp 00000000 09:00 491023 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/DB_File/DB_File.so 002d6000-002d7000 rwxp 0000c000 09:00 491023 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/DB_File/DB_File.so 002d7000-002da000 r-xp 00000000 09:00 492004 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so 002da000-002db000 rwxp 00002000 09:00 492004 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/MIME/Base64/Base64.so 002db000-00308000 r-xp 00000000 09:00 433824 /usr/lib/libgssapi_krb5.so.2.2 00308000-00309000 rwxp 0002d000 09:00 433824 /usr/lib/libgssapi_krb5.so.2.2 00309000-0030c000 r-xp 00000000 09:00 689987 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Sys/MemInfo/MemI nfo.so 0030c000-0030d000 rwxp 00002000 09:00 689987 /usr/lib/perl5/site_perl/5.8.8/i386-linux-thread-multi/auto/Sys/MemInfo/MemI nfo.so 0030f000-00318000 r-xp 00000000 09:00 490680 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/threads/shared/shared.so 00318000-00319000 rwxp 00009000 09:00 490680 /usr/lib/perl5/5.8.8/i386-linux-thread-multi/auto/threads/shared/shared.so 00319000-0040d000 r-xp 00000000 09:00 2483164 /lib/libdb-4.3.so 0040d000-00410000 rwxp 000f4000 09:00 2483164 /lib/libdb-4.3.so 00410000- -----Original Message----- From: assp-test-requ...@lists.sourceforge.net [mailto:assp-test-requ...@lists.sourceforge.net] Sent: Saturday, March 06, 2010 4:29 AM To: assp-test@lists.sourceforge.net Subject: Assp-test Digest, Vol 32, Issue 8 Send Assp-test mailing list submissions to assp-test@lists.sourceforge.net To subscribe or unsubscribe via the World Wide Web, visit https://lists.sourceforge.net/lists/listinfo/assp-test or, via email, send a message with subject or body 'help' to assp-test-requ...@lists.sourceforge.net You can reach the person managing the list at assp-test-ow...@lists.sourceforge.net When replying, please edit your Subject line so it is more specific than "Re: Contents of Assp-test digest..." Today's Topics: 1. Re: Whitelist check ignored?? (Fritz Borgstedt) 2. SpamHaus DBL now online (GrayHat) 3. OT: Alan Ralsky jailed (GrayHat) 4. Re: SpamHaus DBL now online (Trevor Jacques) 5. Re: SpamHaus DBL now online (GrayHat) 6. Re: SpamHaus DBL now online (GrayHat) 7. Re: SpamHaus DBL now online (Thomas Eckardt/eck) 8. v1 new assp.pl version notification request. (Paul K. Dickson) 9. fixes and changes in 2.0.2 0.0.03 (Thomas Eckardt) ---------------------------------------------------------------------- Message: 1 Date: Thu, 04 Mar 2010 14:48:55 +0100 From: "Fritz Borgstedt" <f...@iworld.de> Subject: Re: [Assp-test] Whitelist check ignored?? To: "ASSP development mailing list" <assp-test@lists.sourceforge.net> Message-ID: <sig.1679b1c3ac.fc.000f455506dd1d8c3b9aca0052e17798.6dd1...@iworld.de> Content-Type: text/plain; charset=ISO-8859-1 >I have not checked the code handling delaying, so I was not aware when >exactly it is done. At the earlist time possible, after envelope. ------------------------------ Message: 2 Date: Thu, 4 Mar 2010 16:11:56 +0100 From: "GrayHat" <gray...@gmx.net> Subject: [Assp-test] SpamHaus DBL now online To: <assp-test@lists.sourceforge.net> Message-ID: <00ef01cabbad$0826d760$1400a...@apra.it> Content-Type: text/plain; charset="utf-8" Informations and usage can be found here http://www.spamhaus.org/dbl/ ------------------------------ Message: 3 Date: Thu, 4 Mar 2010 16:13:53 +0100 From: "GrayHat" <gray...@gmx.net> Subject: [Assp-test] OT: Alan Ralsky jailed To: <assp-test@lists.sourceforge.net> Message-ID: <00f401cabbad$4de39fe0$1400a...@apra.it> Content-Type: text/plain; charset="utf-8" Not that this will stop other spammers, but at least one of the *real criminals* got jailed http://www.spamhaus.org/news.lasso?article=658 feel free to snail-mail him, all in all he spammed the whole world, so maybe he deserves some spam as well ------------------------------ Message: 4 Date: Thu, 4 Mar 2010 10:26:04 -0500 From: Trevor Jacques <tre...@videlicet.com> Subject: Re: [Assp-test] SpamHaus DBL now online To: ASSP development mailing list <assp-test@lists.sourceforge.net> Message-ID: <sigth.1679d34e73.e207c4a0-220d-440c-bf92-01636d3ce...@videlicet.com> Content-Type: text/plain; charset=us-ascii > http://www.spamhaus.org/dbl/ It would be really useful for us to know if there are recommended places to include the DBL in our assp set ups. For example, can we simply add the DBL to our list in URIBLServiceProvider, etc.? T. ------------------------------ Message: 5 Date: Thu, 4 Mar 2010 16:27:40 +0100 From: "GrayHat" <gray...@gmx.net> Subject: Re: [Assp-test] SpamHaus DBL now online To: "ASSP development mailing list" <assp-test@lists.sourceforge.net> Message-ID: <00fb01cabbaf$3b279080$1400a...@apra.it> Content-Type: text/plain; charset="Windows-1252" > Informations and usage can be found here > > http://www.spamhaus.org/dbl/ Just in case, the list can be used as a regular URIBL one (as long as the query is NOT an IP) but will also allow queries related to HELO strings Reverse IP zones Envelope sender domain which may extend quite a lot its usage and help improving the rejection of bad senders ------------------------------ Message: 6 Date: Thu, 4 Mar 2010 18:05:41 +0100 From: "GrayHat" <gray...@gmx.net> Subject: Re: [Assp-test] SpamHaus DBL now online To: "ASSP development mailing list" <assp-test@lists.sourceforge.net> Message-ID: <012401cabbbc$ebe85c80$1400a...@apra.it> Content-Type: text/plain; charset="Windows-1252" >> http://www.spamhaus.org/dbl/ > It would be really useful for us to know if there are recommended > places to include the DBL in our assp set ups. For example, can we > simply add the DBL to our list in URIBLServiceProvider, etc.? I'm currently testing it on a "low traffic" ASSP box to see if there are any counter indications; as far as I can tell, ASSP shouldn't have issues with that since it will only (please, Fritz, Thomas confirm or deny it) pass domains to the URIBLs so there won't be issues due to IPs being checked against it (the list doesn't handle IPs at all); as for the other features (e.g. using it to check the HELO and the other stuff) I think Fritz and Thomas may give you a better answer; for sure ASSP is checking URIs contained in the mail body against the defined URIBLs not sure if it also checks the HELO string/domain, reverse IP zone or envelope sender domain against the URIBLs ------------------------------ Message: 7 Date: Thu, 4 Mar 2010 18:57:28 +0100 From: Thomas Eckardt/eck <thomas.ecka...@thockar.com> Subject: Re: [Assp-test] SpamHaus DBL now online To: GrayHat <gray...@gmx.net>, ASSP development mailing list <assp-test@lists.sourceforge.net> Message-ID: <titc.9679e6701a.of6d549e3a.2ce7ef00-onc12576dc.0061b844-c12576dc.0062a...@t hockar.com> Content-Type: text/plain; charset="US-ASCII" ASSP is checking any found URI. IP's are not sent to the URIBL providers but checked if they are obfuscated. Checked are the MIME decoded mail body and the complete mail header except: received: Message-ID: References:; In-Reply-To:; X-Assp-.+?:; cc:; bcc: lines. Thomas Von: "GrayHat" <gray...@gmx.net> An: "ASSP development mailing list" <assp-test@lists.sourceforge.net> Datum: 04.03.2010 18:07 Betreff: Re: [Assp-test] SpamHaus DBL now online >> http://www.spamhaus.org/dbl/ > It would be really useful for us to know if there are recommended > places to include the DBL in our assp set ups. For example, can we > simply add the DBL to our list in URIBLServiceProvider, etc.? I'm currently testing it on a "low traffic" ASSP box to see if there are any counter indications; as far as I can tell, ASSP shouldn't have issues with that since it will only (please, Fritz, Thomas confirm or deny it) pass domains to the URIBLs so there won't be issues due to IPs being checked against it (the list doesn't handle IPs at all); as for the other features (e.g. using it to check the HELO and the other stuff) I think Fritz and Thomas may give you a better answer; for sure ASSP is checking URIs contained in the mail body against the defined URIBLs not sure if it also checks the HELO string/domain, reverse IP zone or envelope sender domain against the URIBLs ---------------------------------------------------------------------------- -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* ------------------------------ Message: 8 Date: Thu, 04 Mar 2010 13:45:14 -0500 From: "Paul K. Dickson" <pdick...@frederickcountymd.gov> Subject: [Assp-test] v1 new assp.pl version notification request. To: ASSP development mailing list <assp-test@lists.sourceforge.net> Message-ID: <gov.0679a1149d.c7b569ea.5de43%pdick...@frederickcountymd.gov> Content-Type: text/plain; charset="US-ASCII" At the top of the web interface, can it specify the release status? Beta, RC, Stable? Paul K. Dickson Systems Administrator Frederick County Government, IIT pdick...@frederickcountymd.gov 301-600-2399/x12399 ------ End of Forwarded Message ------------------------------ Message: 9 Date: Sat, 6 Mar 2010 13:28:40 +0100 From: Thomas Eckardt <thomas.ecka...@thockar.com> Subject: [Assp-test] fixes and changes in 2.0.2 0.0.03 To: ASSP development mailing list <assp-test@lists.sourceforge.net> Message-ID: <titc.36814d4c15.ofdf3401e5.93c146a3-onc12576de.0040af40-c12576de.00448...@t hockar.com> Content-Type: text/plain; charset="us-ascii" Hi all, fixed in 2.0.2 0.0.03 (also fixed in public version 2.0.1 1.0.03) - security fix: a workstation behind a NAT network is able to adopt the user credentials from an other (GUI) logged in workstation in the same network ASSP now uses HTTP-Session-ID's to prevent this. Browser cookies must be enabled for the GUI-URL to make sure, that assp generates absolute unique session ID's - if any bomb regular expression contains a regex '^$' to check for an empty string (eg. bombSubjectRe), no result is found - if a wrong search query is used in MaillogTail and the option 'show ..... results' is set to 'all matches', it is possible that the MainThread needs a very long time (30 min or more) to process the query. For this reason the option 'all matches' is changed to '2000'. There are also two search timeout values used: 30s for the search in the log files and 30s for rendering the HTML for the output. - if in MaillogTail a selection for a list of file to search in was made, it was possible, that the timeline of the output was broken, because of a wrong sort of the filenames (numbers). changed: - the default value for 'LogRollDays' is changed from 7 to 1. - if FBMTV is used and an incoming not-bounce message is received, which contains a valid FBMTV-tag, the message is considered 'whitelisted' if it is not taged otherwise (red,contentonly, noprocessing...) by assp added: - 'httpRequireCookies','HTTP and HTTPS require enabled browser cookies',0,\&checkbox,'1','(.*)',undef, 'Cookie based http session ID\'s are used by assp to handle different requests from the same IP (eg behind NAT). Switch this off, if you are unable to use cookies in your browser. If switched off, a security hole is opened for connection that are using NAT - it could be possible that a second workstation (behind NAT) is able to login to the GUI, without user credentials if the same OS and browser version is used.' Thomas DISCLAIMER: ******************************************************* This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the individual to whom it is addressed. This email was multiple times scanned for viruses. There should be no known virus in this email! ******************************************************* ------------------------------ ---------------------------------------------------------------------------- -- Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev ------------------------------ _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test End of Assp-test Digest, Vol 32, Issue 8 **************************************** ------------------------------------------------------------------------------ Download Intel® Parallel Studio Eval Try the new software tools for yourself. Speed compiling, find bugs proactively, and fine-tune applications for parallel performance. See why Intel Parallel Studio got high marks during beta. http://p.sf.net/sfu/intel-sw-dev _______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
