ASSP crashed twice today

It appears to be caused by a particular 
whitelisted newsletter mail that should be able to go trough normally.
I always suspect of errors made by myself and I 
have hundreds of bomb regex in each file that 
could be the reason for this failure.
1) Is there a way to tell apart if this was 
caused by a malformed spambomb or anything else?
2) If it was a bomb, how can I pinpoint wich spambomb file is it?
3) how can I check wich regex inside the bomb file?

Thanks for the help

Hilário
PS1: Bellow is all I could get so far.
PS2: Let me know if you preffer a report/help 
request like this to be posted somewhere else like the forums.

Cpanel shows:
PID:            29162           
user:           root    
priority:       -5      
CPU% :  32.0    
MEM %:  9.3     
command:        /usr/bin/perl /usr/local/assp/assp.pl /usr/local/assp

FIRST CRASH: ASSP 3.15
2009-10-27 09:32:19 Disconnected: 200.234.221.151;
2009-10-27 09:32:21 Connected: 
74.202.227.42:45841 -> 111.111.111.111:25 -> 127.0.0.1:125;
2009-10-27 09:32:21 m...@mydomain.com matches 
m...@mydomain.com in LocalAddresses_Flat;
2009-10-27 09:32:21 id-43141-06444 74.202.227.42 
<bounces+219445.13064263.183...@icpbounce.com> 
accepting triplet: 
(74.202.227.0,boun...@icpbounce.com,m...@mydomain.com) waited: 8m 22s;
2009-10-27 09:32:21 id-43141-06444 74.202.227.42 
<bounces+219445.13064263.183...@icpbounce.com> 
to: m...@mydomain.com recipient accepted: m...@mydomain.com;
2009-10-27 09:32:21 Sending DNS-query to 
111.111.111.111 on query.bondedsender.org for RWL checks on 74.202.227.42;
2009-10-27 09:32:21 Sending DNS-query to 
111.111.111.111 on exemptions.ahbl.org for RWL checks on 74.202.227.42;
2009-10-27 09:32:21 Sending DNS-query to 
111.111.111.111 on iadb.isipp.com for RWL checks on 74.202.227.42;
2009-10-27 09:32:21 Sending DNS-query to 
111.111.111.111 on hul.habeas.com for RWL checks on 74.202.227.42;
2009-10-27 09:32:21 Commencing RWL checks on 74.202.227.42;
2009-10-27 09:32:21 Completed RWL checks after 0 seconds on 74.202.227.42;
2009-10-27 09:32:21 id-43141-06444 74.202.227.42 
<bounces+219445.13064263.183...@icpbounce.com> 
to: m...@mydomain.com Received-RWL: listed from none; client-ip=74.202.227.42;
2009-10-27 09:32:21 id-43141-06444 [BombHeader] 
74.202.227.42 
<bounces+219445.13064263.183...@icpbounce.com> 
to: m...@mydomain.com Whitelisted Domain: invertek.co.uk;
2009-10-27 09:50:10 Reloading config;
Logfile reopened on HUP

SECOND CRASH: ASSP 4.00
2009-10-27 10:42:23 Connected: 
74.202.227.42:45602 -> 111.111.111.111:25 -> 127.0.0.1:125;
2009-10-27 10:42:23 m...@mydomain.com matches 
m...@mydomain.com in LocalAddresses_Flat;
2009-10-27 10:42:23 id-47343-11527 74.202.227.42 
<bounces+219445.13064263.183...@icpbounce.com> 
accepting triplet: 
(74.202.227.0,boun...@icpbounce.com,m...@mydomain.com) waited: 40m 3s;
2009-10-27 10:42:23 id-47343-11527 74.202.227.42 
<bounces+219445.13064263.183...@icpbounce.com> 
to: m...@mydomain.com recipient accepted: m...@mydomain.com;
2009-10-27 10:42:23 Sending DNS-query to 
111.111.111.111 on query.bondedsender.org for RWL checks on 74.202.227.42;
2009-10-27 10:42:23 Sending DNS-query to 
111.111.111.111 on exemptions.ahbl.org for RWL checks on 74.202.227.42;
2009-10-27 10:42:23 Sending DNS-query to 
111.111.111.111 on iadb.isipp.com for RWL checks on 74.202.227.42;
2009-10-27 10:42:23 Sending DNS-query to 
111.111.111.111 on hul.habeas.com for RWL checks on 74.202.227.42;
2009-10-27 10:42:23 Commencing RWL checks on 74.202.227.42;
2009-10-27 10:42:24 Completed RWL checks after 1 seconds on 74.202.227.42;
2009-10-27 10:42:24 id-47343-11527 74.202.227.42 
<bounces+219445.13064263.183...@icpbounce.com> 
to: m...@mydomain.com Received-RWL: listed from none; client-ip=74.202.227.42;
2009-10-27 10:42:24 id-47343-11527 [BombHeader] 
74.202.227.42 
<bounces+219445.13064263.183...@icpbounce.com> 
to: m...@mydomain.com Whitelisted Domain: invertek.co.uk;


------------------------------------------------------------------------------
Come build with us! The BlackBerry(R) Developer Conference in SF, CA
is the only developer event you need to attend this year. Jumpstart your
developing skills, take BlackBerry mobile applications to market and stay 
ahead of the curve. Join us from November 9 - 12, 2009. Register now!
http://p.sf.net/sfu/devconference
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test

Reply via email to